Privacy and Cookie policy

Banca Generali institutionally processes personal data, taking the necessary measures to ensure the confidentiality and security of the data processed, in tune with technological progress in general and computer progress in particular.

Banca Generali, in application of current legislation on the protection of personal data, has organized itself as follows:

The Data Controller is BANCA GENERALI S.p.A. with registered office in Trieste, Via Machiavelli 4;

The Data Controller has appointed a Data Protection Officer ("Data Protection Officer" or "DPO"), whom you may contact in order to exercise your rights, as well as to receive any information related to the same and/or to this Notice, by writing to:

• Banca Generali S.p.A. - Data Protection Officer, Corso Cavour 5/A - 34132 Trieste;
• by sending an e-mail to: DataProtectionOfficerBG@bancagenerali.it.

The Data Controller and the DPO, also through the designated structures, will take charge of each of your requests concerning the processing of your personal data and provide you, without undue delay and in any case, at the latest, within one month from the receipt of the same, with the information concerning the action taken regarding the request.

For specific needs, the Company makes use of third parties to whom it entrusts parts of its process. These subjects take on the role of "External Managers" of the Company's processing, or operate completely independently as "Autonomous Holders" of subsequent processing having purposes described in the specific information notes of the aforementioned Autonomous Holders.

For the same purposes, the data may be communicated to companies of the Generali Group, in Italy or abroad.

The Company acquires only the personal data strictly necessary to allow you to browse the website.

It may happen that the Bank, against information freely provided by you (by way of example through an e-mail message sent by you to us), may occasionally become aware of special categories of data, such as data disclosing racial and ethnic origin, religious or philosophical beliefs, political opinions, trade union membership, as well as personal data disclosing health, sex life or sexual orientation. Such data will not be subject to any processing operation by the Data Controller, except of course for the respect by the Data Controller itself of the principles of security, confidentiality and privacy with respect to the possible presence of such data in its information systems and without prejudice to the possibility on your part to exercise the rights of the 'Interested Party provided for by the legislation, where applicable in this case.

(a) Allowing you to browse this website;
(b) Monitoring navigation on the website.

Nature of conferment: mandatory.
Consequences of refusal to provide data: Failure to provide data may result in the inability to offer you a smooth navigation of the website.
Legal basis for processing: legitimate interest.
Personal data retention period: Your personal data will be processed for the time necessary to carry out the purposes of the processing described above and in compliance with the retention periods imposed by the regulations pro tempore in force.

The Company processes personal data by adopting all the necessary security measures, both physical and IT, in compliance with the provisions of the GDPR and in accordance with the regulations and provisions of the Guarantor Authority for the Protection of Personal Data pro tempore in force on the subject.

In relation to the processing carried out by Banca Generali, as a data subject you may, under the conditions provided for by the GDPR, exercise the rights enshrined in Articles 15 to 21 of the GDPR and, in particular, the following rights:

• right of access: right to obtain confirmation as to whether or not personal data concerning you are being processed and, if so, to obtain access to your personal data, including a copy thereof.
• Right to rectification: right to obtain, without undue delay, rectification of inaccurate personal data concerning you and/or supplementation of incomplete personal data;
• right to erasure (right to be forgotten): right to obtain, without undue delay, the erasure of personal data concerning you.
• Right to restriction of processing: right to obtain restriction of processing, when:

the data subject disputes the accuracy of personal data, for the period necessary for the controller to verify the accuracy of such data;

the processing is unlawful and the data subject objects to the deletion of the personal data and instead requests that its use be restricted;

the personal data are necessary for the data subject to establish, exercise or defend a right in court;

the data subject has objected to the processing pursuant to Article 21 GDPR, during the period pending verification as to whether the data controller's legitimate reasons prevail over those of the data subject.

• Right to data portability: the right to receive, in a structured, commonly used and machine-readable format, personal data concerning you provided to the Data Controller and the right to transmit them to another data controller without hindrance, if the processing is based on consent and is carried out by automated means. In addition, the right to have your personal data transmitted directly from the Bank to another controller if this is technically feasible;
• Right to object: the right to object, at any time on grounds relating to your particular situation, to the processing of personal data concerning you based on the lawful condition of legitimate interest or the performance of a task carried out in the public interest or in the exercise of official authority, including profiling, unless there are legitimate grounds for the Controller to continue the processing that override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of a legal claim. In addition, the right to object at any time to processing if personal data are processed for direct marketing purposes, including profiling, insofar as it is related to such direct marketing.
• Right to revoke consent - in cases where processing is based on consent, right to revoke consent to the processing of your data at any time, without prejudice to the lawfulness of the processing based on consent prior to revocation;
• Right to lodge a complaint with the Italian Data Protection Authority, Piazza di Montecitorio n. 121, 00186, Rome (RM).

The above rights may be exercised, vis-à-vis the Data Controller, by contacting the references indicated in this notice.

The exercise of your rights as a data subject is free of charge in accordance with Article 12 GDPR. However, in the case of requests that are manifestly unfounded or excessive, including because they are repetitive, the Data Controller may charge you a reasonable fee in light of the administrative costs incurred in handling your request, or deny satisfaction of your request.

During navigation within a website it is technically possible, even in the absence of an explicit registration to the service by the Surfer and without his active role, to carry out a collection of information which, for these reasons, is defined as passive. In particular, the ways in which IP Addresses, Cookies and other session identifiers, Internet Tags, Browsing Data are used are described below, including the possible possibility of excluding them and their implications.

Regarding passive information collection the site:

• does not use Ip Addresses (Internet Protocol addresses) to collect information, but stores them in Browsing Data.
• uses Browsing Data only for statistical purposes as aggregate data.
• uses cookies and other session identifiers only in order to make navigation possible or to the extent strictly necessary to provide a service requested by the user, in compliance with Legislative Decree No. 69/2012 and European legislation on the protection of personal data in publicly accessible electronic communication services. Consent is not required for these purposes. Cookies are not used for statistical purposes.If necessary, it is possible to disable, depending on the browser in use, the use of cookies; in this case, navigation may not be as smooth.
• Does not use Internet Tags.

Regarding the active collection of information, the services offered on www.bancagenerali.com are the following:

• e-mail: Data received through the Web site's e-mail contact is used solely to respond to the Surfer's requests and for no other purpose; such data is retained for statistical and background check purposes only. Individual names may be placed on specific Mailing Lists only at the express request of the Surfer who wishes to receive certain documents (news, financial disclosure, etc.) on a regular basis.

The services offered on this site:

• do not use Ip Addresses (Internet Protocol addresses) to collect information, but store them in Browsing Data
• use Browsing Data only for statistical purposes as aggregate data
• use session cookies only to improve navigation within the site, but not for statistical purposes. Eventually it is possible to disable, depending on the browser in use, the use of cookies; in this case navigation may not be as smooth
• do not use Internet Tags

The services offered on www.bancagenerali.com comply with the following:

e-mail: Data received through the website's e-mail contact is used exclusively to respond to the Surfer's requests and for no other purpose; such data is retained for statistical and background check purposes only. Individual names may be placed on specific Mailing Lists only at the express request of the Surfer who wishes to receive certain documents (news, financial disclosure, etc.) on a regular basis.