Source: https://www.widiba.it/banca/online/en/privacy-policy
Timestamp: 2018-04-23 09:35:16+00:00
Document Index: 96155978

Matched Legal Cases: ['art. 4', 'art. 4', 'art. 4', 'art. 4', 'art. 13', 'art. 29', 'art. 13']

Privacy Statement and Policy | Widiba
Party Concerned: the person whose data is processed by Widiba, that is YOU
(art. 4, L.D. 196/2003- the natural person to whom the personal data refers)
Personal Data:the set of data by which it is possible to identify you, such as: first name, last name, tax code, home address, mobile number, mailbox, internet IP address
(art. 4, L.D. 196/2003 - any information concerning a natural person who may be identified or identifiable, even indirectly, by making reference to any other information, including a personal identification number)
Sensitive data: data about you from which it is possible to determine your racial or ethnic origin, your religious beliefs, your political opinions, your state of health or your sexual orientation. For example, if a bank transfer is made in favour of a philosophical association
(Art. 4, Legislative Decree 196/2003 - personal data revealing racial or ethnic origin, religious, philosophical or other beliefs, political opinions, or membership in parties, trade unions, associations or organizations of a religious, philosophical, political or trade union nature, as well as personal data disclosing information on state of health or sexual orientation)
Processing: any operation performed by Widiba or by the Montepaschi Group involving your data.
(art. 4, L.D. 196/2003 - any operation or set of operations, carried out also without the aid of electronic instruments, concerning the collection, recording, organization, storage, consultation, elaboration, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, erasure and destruction of data, also if not registered in a database)
Data Controller: Banca Widiba S.p.A
(art. 4, L.D. 196/2003 - the natural person, legal person, public administration or any other body, association or organization responsible, also jointly with another data controller, for decisions regarding the purposes and methods of processing personal data and the tools used, including the security profile)
Data Processor: Mr. Stefano AGHINI LOMBARDI - Privacy and Security Office - Milan, via Messina 38, Torre D
(Art. 4, Legislative Decree 196/2003 - the natural person, legal person, public administration or any other institution, association or body appointed by the Data Controller)
l’apposizione della firma autografa, nel caso in cui venga registrata la propria firma;
Nel dettaglio Widiba osserva questi principi così come enunciati dal GDPR:
In relazione alle diverse finalità e agli scopi per i quali sono stati raccolti, i tuoi dati saranno conservati per il tempo previsto dalla normativa di riferimento ovvero per quello strettamente necessario al perseguimento delle finalità (a titolo esemplificativo, ma non esaustivo, il Testo Unico Bancario prevede 10 anni dopo la chiusura del contratto, così come per particolari ordini e istruzioni della clientela ovvero per servizi di telephone banking, Widiba può registrare il contenuto delle conversazioni telefoniche intercorse, anche per eventuali profili di prova e di tutela di diritti in caso di controversie).
Inoltre, Widiba, per il perseguimento delle finalità descritte al precedente punto 3, può comunicare i tuoi Dati Personali a società, enti o consorzi esterni, presenti in Italia o all’estero, appartenenti alle seguenti categorie:
Diritto alla portabilità – il diritto di ottenere da Widiba l’invio dei propri Dati Personali in un formato strutturato e di uso comune. Tale invio può essere richiesto verso un dispositivo portabile (Chiavetta, Disco USB, PC) ovvero verso un altro Titolare del Trattamento. Per esercitare questo diritto è sufficiente accedere al sito di Widiba, mediante le proprie credenziali, e utilizzare l’apposita funzionalità.
10. Accesso, modifica dei Consensi e dei Dati
Queste informazioni saranno conservate presso di noi; alcune saranno comunicate a grandi banche dati istituite per valutare il rischio crediti- zio, gestite da privati e consultabili da molti soggetti.
Ciò significa che altre banche o finanziarie a cui tu chiederai un altro prestito, un finanziamento o una carta di credito, ecc., anche per acqui- stare a rate un bene di consumo, potranno venire a conoscenza delle tue richieste di finanziamento presentate a Widiba e se paghi regolar- mente o meno le rate.
Conserviamo i tuoi dati presso Widiba per tutto ciò che è necessario per gestire il finanziamento e adempiere ad obblighi di legge.
Al fine di meglio valutare il rischio creditizio, comunichiamo alcuni Dati Personali (dati anagrafici, anche della persona eventualmente coob- bligata, tipologia del contratto, importo del credito, modalità di rimborso) ai sistemi di informazioni creditizie, i quali sono regolati dal relativo codice deontologico del 2004.
I tuoi Dati Personali sono aggiornati periodicamente con informazioni acquisite nel corso del rapporto (andamento dei pagamenti, esposizione debitoria residuale, stato del rapporto). Nell’ambito dei sistemi di informazioni creditizie, i tuoi dati saranno trattati secondo modalità di organiz- zazione, raffronto ed elaborazione strettamente indispensabili per perseguire le finalità sopra descritte, e in particolare per estrarre in maniera univoca, dal sistema di informazioni creditizie, le informazioni a te ascritte. Tali elaborazioni saranno effettuate attraverso strumenti informatici, telematici e manuali che garantiscono la sicurezza e la riservatezza degli stessi, anche nel caso di utilizzo di tecniche di comunicazione a distanza.
I tuoi dati saranno oggetto di particolari elaborazioni statistiche al fine di attribuirti un giudizio sintetico o un punteggio sul tuo grado di affidabi- lità e solvibilità (cd. credit scoring), tenendo conto delle seguenti principali tipologie di fattori: numero e caratteristiche dei rapporti di credito in essere, andamento e storia dei pagamenti dei rapporti in essere o estinti, eventuale presenza e caratteristiche delle nuove richieste di credito, storia dei rapporti di credito estinti. Alcune informazioni aggiuntive possono esserti fornite in caso di mancato accoglimento di una richiesta di credito.
I soggetti partecipanti ai sistemi di informazioni creditizie gestiti da CRIF S.p.A. e EXPERIAN-CERVED INFORMATION SERVICES S.p.A. appar- tengono, per entrambi, alle seguenti categorie: Banche, Intermediari Finanziari, soggetti privati che nell’esercizio di un’attività commerciale o professionale concedono dilazioni di pagamento del corrispettivo per la fornitura di beni o servizi.
I tempi di conservazione dei dati sono quelli indicati nel codice di deontologia e specificati nella tabella riportata in calce alla presente. CRIF S.p.A. e EXPERIAN-CERVED INFORMATION SERVICES S.p.A. fanno uso di tecniche e di sistemi automatizzati di credit scoring basati su mo- delli di analisi statistica e algoritmi di calcolo che forniscono alla Banca e agli altri partecipanti, giudizi indicatori e punteggi utili per l’istruttoria delle richieste di credito.
CRIF S.p.A. aderisce ad un circuito internazionale di sistemi di informazioni creditizie operanti in vari paesi europei ed extra-europei e, pertan- to, i dati trattati potranno essere comunicati (sussistendo tutti i presupposti di legge) ad altre società, anche estere, che operano - nel rispetto del GDPR - come Titolari dei suddetti sistemi di informazioni creditizie e quindi perseguono le medesime finalità di trattamento del sistema gestito da CRIF S.p.A. (elenco sistemi esteri convenzionati disponibili al sito www.crif.com).
EXPERIAN-CERVED INFORMATION SERVICES S.p.A. effettua, altresì, in ogni forma (anche, dunque, mediante l’uso di sistemi automatizzati di credit scoring) e nel rispetto del GDPR, il trattamento di dati provenienti da pubblici registri, elenchi, atti o documenti conoscibili da chiunque. I dati oggetto di trattamento da parte dell’EXPERIAN-CERVED INFORMATION SERVICES S.p.A. possono venire a conoscenza di EXPERIAN Ltd, con sede in Nottingham (UK) che, nella qualità di responsabile, fornisce servizi di supporto tecnologico funzionali a tale trattamento. L’elenco completo dei Responsabili, nonché ogni ulteriore eventuale dettaglio di carattere informativo, con riferimento al trattamento operato dalla EXPERIAN-CERVED INFORMATION SERVICES S.p.A., è disponibile sul sito www.experian.it.
eventi negativi (ossia morosità, gravi inadempimenti, sofferenze) non sanati 36 mesi dalla data di scadenza contrattuale del rapporto o dalla data in cui è risultato necessario lultimo aggiornamento (in caso di successivi accordi o altri eventi rilevanti in relazione al rimborso)
rapporti che si sono svolti positivamente (senza ritardi o altri eventi negativi) 36 mesi dalla data di scadenza contrattuale del rapporto o dalla data in cui è risultato necessario lultimo aggiornamento (in caso di successivi accordi o altri eventi rilevanti in relazione al rimborso)
Widiba places great importance on protecting the personal data of its users.
This notice is given pursuant to art. 13 of Legislative Decree no. 196 of 30 June 2003 (hereinafter referred to as the Data Protection Act) and relates to the processing of personal data of users who make use of the Widiba web services. This information does not relate to other websites accessed via any links.
The information note is also based on the Recommendation no. 2/2001 that the European authorities for the protection of personal data, grouped by art. 29 of directive no. 95/46/EC, adopted on May 17, 2001 to determine some minimum requirements for the online collection of personal data, and, in particular, methods, times and nature of the information that the data controllers must give the users when they connect to web pages, regardless of the purposes of such connection.
is Widiba SpA in the person of its pro-tempore legal representative domiciled for the office at the company's headquarters in Milan, via Messina 38, Torre D.
How is logistical data processed?
Access to and use of the online services foresees the processing of data relating to individuals identifiable by means of authentication systems and procedures. The mere consultation of the website, without access to the online services, foresees the collection of information the transmission of which is implicit in the use of Internet communication protocols, as well as information on the computer used to connect to the internet.
Data collected in connection with this site's web services is processed at the Widiba offices exclusively by persons in charge of data processing or by persons in charge of occasional maintenance tasks. No personal data deriving from these web services is disclosed. If necessary, the data connected with these web services can be processed by Banca Monte Paschi di Siena and by the MPS Group Operating Consortium (the first in its capacity as independent Data Controller, and the second in its capacity as specially appointed Data Processor in accordance with Article 29 of the Data Protection Act), at the offices of the said companies. The personal data of users who access and use the online services may be disclosed to third parties to fulfil specific legal, regulatory and supervisory obligations. In addition, to enable the fulfilment of "logistical" activities pertaining to the web services offered to clients, the processing of some data may be delegated to third parties especially appointed for the purpose.
Widiba regularly reviews its privacy and security policies and, where appropriate, updates them in accordance with regulatory or organizational changes, or prompted by technological evolution. Any amendments to these policies will be published on this website.
The explicit and voluntary insertion of personal data by the user in the registration forms of this website involves the acquisition of the data provided, which is necessary in order to provide the service requested. Specific information pursuant to art. 13 of the Data Protection Act, also in summarised form, will be reported or displayed case by case in contractual documents or in the pages of the website designated for special services upon request.
The computer systems and software procedures relating to the normal operation of this website acquire personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified parties, but by their very nature could, through processing and associations with data held by third parties, lead to the identification of users.
This category of data includes IP addresses or domain names of computers used by users connecting to the site, URIs (Uniform Resource Identifiers) ​​of requested resources, the time of requests, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (successful, error, etc.) and other parameters regarding the user's operating system and computer environment.
This data is used solely for the purpose of:
- obtaining anonymous statistical information regarding use of the site;
- checking the correct operation of the site;
- carrying out monitoring activities to ensure the safety of the service.
The data could be stored and used to ascertain responsibility in case of hypothetical computer crimes against the site or its users.
Widiba uses cookies for several purposes. A cookie is a set of information that can be stored on the hard disk of a computer of a client connected to the widiba.it website.
Widiba uses two types of cookies:
Static cookies - saved on the hard drive of the client's PC, these cookies contain information concerning the characteristics of said PC; they are used to identify the device for the purpose of fighting computer fraud
Temporary cookies - these cookies are only used for the duration of the session and contain information related to said session; their purpose is the proper and efficient processing of requests made by the customer.
Conferring data
Except for what has been specified for navigation data, the user is free to provide the personal information stated on request forms or indicated during contacts with the Office to further the dispatch of information material or of other communications. Non conferral of said data may make it impossible to fulfil the request.
Personal data is processed using automated tools for the time strictly necessary to achieve the purposes for which it is collected. Specific security measures are observed to prevent the loss of data, illegal or incorrect use and unauthorized access.
Data subjects have the right, at any time, to obtain confirmation as to whether or not personal data concerning them exists, to know its content and source, to verify its accuracy or to demand its integration, updating or rectification (Art. 7 of the Data Protection Act). In accordance with said Article, data subjects have the right to ask for the erasure, the anonymization or the blocking of data that has been processed unlawfully, and, furthermore, to object on legitimate grounds, to the processing of same.
Anyone wishing to obtain more information or to offer suggestions or complaints about the privacy policies, can do so by writing to the following e-mail address: privacy@widiba.it.
The GDPR protects individuals through the following rights:
Data subjects have the right to obtain confirmation as to whether or not personal/sensitive data concerning them are being processed. To exercise this right, simply log onto the Widiba website with your credentials and view/download the information you require.
Data subjects have the right to obtain from Widiba the rectification of inaccurate personal data concerning them. To exercise this right, simply log onto the Widiba website with your credentials and use the various features provided (e.g. change residence address, mobile number, password).
Data subjects have the right to obtain from Widiba the erasure of personal data concerning them whenever said data are no longer necessary in relation to the purposes for which they were collected. In some cases, envisaged by the regulations governing the banking sector (see the Italian Consolidated Banking Act, Circular no. 285 of the Bank of Italy), Widiba is entitled to deny this right, for example when the aforementioned data are required to assess, exercise or defend a right in court.
Data subjects have the right to obtain from Widiba restriction of access to personal data by those parties who have a service contract or an employment contract with the Bank. In some cases, the Bank reserves the right to grant access to a limited number of people in order to guarantee the safety, integrity and correctness of said data.
Data subjects have the right to receive the personal data concerning them, which they have provided to Widiba, in a structured, commonly used format. Said data can be provided on a portable device (USB stick, USB disk, PC) or forwarded to another Data Controller. To exercise this right, simply log onto the Widiba website with your credentials and use the features provided.
Data subjects have the right to object to processing of personal data concerning them by Widiba. In this case, two scenarios are possible:
a. data is processed in connection to the fulfilment of a contract, in which case it is not possible to exercise this right except by terminating said contract;
b. data is processed for commercial and/or profiling purposes, in which case you may exercise this right simply by logging onto the Widiba website with your credentials and and changing the consent previously provided.
Data subjects have the right to lodge a complaint with the Supervisory Authority whenever they consider that their data have been processed in violation of the law. The procedures for lodging a complaint are described on the website of the Italian Data Protection Authority.
To exercise the aforementioned rights in the absence of the internet or if you are not yet our customer, you can send a request by email to privacy@widiba.it or by certified email to privacy@widipec.it.
Cookies are a kind of "reminder"; short "lines of text" containing information that can be stored on a user's computer when the browser (e.g. Chrome or Internet Explorer) recalls a particular website.
Through cookies, the server sends information that will be reinterpreted and updated each time the user returns to that website. In this way, the website will automatically adapt to the user, improving the browsing experience.
Cookies are used for different purposes, have different characteristics, and can be used both by the data controller of the website you are visiting and by third parties.
- Improve user navigation within the site
- Provide the site manager information about user navigation, also with a view to obtaining statistical data about the site and improve its email navigation
What types of cookies exist
Installing technical cookies (navigation/session; analytics and functionality) does not require the user’s consent, but only the disclosure requirement.
They are designed to create user profiles and are used to send targeted advertising messages in line with the preferences shown by the user while surfing the net.
They are also called "technical" cookies, and are essential to browse the site using all of its features, such as access to restricted areas (Customer Area). Without these cookies, it would be impossible to provide the services requested. These cookies do not collect information to be used for commercial purposes.
This category includes cookies set by platforms supporting the company's security infrastructure.
These cookies can be disabled from your Browser Settings
Blocking these cookies
Blocking features such as authentication, validation, management of browsing sessions and fraud prevention is strongly discouraged.
They collect and analyse - in an anonymous and/or aggregate form - information on use of the site by visitors (page views) so as to provide a better browsing experience. These cookies do not collect information that can identify the user in any way.
This category includes cookies set by the following technological solutions:
This will result in exclusion from the statistical calculation of navigation parameters that allows analysis such as to optimize the site
They allow the site to "remember" the user's choices and customize the site by improving its content. The information gathered by these cookies is anonymous.
This will block customization and testing features and consequently the website will not be optimally displayed.
Advertising or profiling cookies:
These cookies are used to customize commercial information based on your interests in order to send advertising messages in line with the preferences shown while browsing the site. These cookies store information on what parts of a website you've visited and this information may be shared with other parties.
This will result in being excluded from campaigns and dedicated offers.
The Widiba sites work best if cookies are enabled. You can decide not to accept the use of cookies on your device (computer or smartphone).
To do this, go to the "Preferences" section of your browser.
For information on how to change your cookie settings, select the browser you're using:
All other information under Article 13 of Legislative Decree 196/03 may be consulted in the Privacy Policy section.