Privacy Information Notice
1. Assicurazioni Generali processes your personal data
Assicurazioni Generali S.p.A. (hereinafter also the Company), with registered office in Trieste, at Piazza Duca Degli Abruzzi no. 2, processes your personal data as data controller.
If you wish to receive more information, you can use the following postal address:
Assicurazioni Generali S.p.A., Piazza Duca degli Abruzzi no. 2, 34132 Trieste P.O. Box 538.
For any questions or if you wish to exercise a right in respect of the processing of your personal data, you can contact our data protection officer:
by email at: dpoag@generali.com
by traditional mail at: Assicurazioni Generali, Piazza Tre Torri n. 1, 20145 Milan to the attention of the data protection officer.
2. How we use your personal data and on the basis of which ground
We process your personal data using computerized methods and procedures designed to ensure an adequate level of security, for the following purposes:
- to activate and manage the Newsletter service you have requested. The Newsletter will inform and update you on business, innovation, sustainability, and content dedicated to those who wish to stay informed about the Generali world, also allowing you to select your areas of interest, taking into account the topics you have chosen ;
- to carry out reporting, statistical, and data analytics activities, including in aggregated and/or anonymous form, in order to assess the performance of the Newsletter and the level of interest in topics related to business and strategy, financial updates, innovation, people, and sustainability;
- to exercise, in the event of a dispute, the right of defense in judicial proceedings on behalf of the Company, its officers, representatives, and shareholders;
- to perform activities related to potential operations or transformations concerning the Company or its assets, and to execute such operations;
- to comply with legal obligations to which the Company is subject.
3. Why the provision of your personal data is required
The processing of your personal data is carried out on the basis of the following legal grounds, which vary according to the purpose of processing referred to in paragraph 2 of this Notice:
- purpose 1: your optional, freely given, specific, and explicit consent, without which we will not be able to proceed with sending the newsletter. You may withdraw your consent at any time, as also described in paragraph 7;
- purpose 2: the Company’s legitimate interest in monitoring the progress of the initiative and improving its effectiveness;
- purposes 3 and 4: the Company’s legitimate interest in defending its rights, as well as those of its officers and representatives, in a potential dispute or in out-of-court proceedings, and in carrying out any operations or transformations concerning the Company. As explained in paragraph 7 below, you may object to the processing and, in such case, your personal data may not be used for the above purpose, unless the Company demonstrates the existence of compelling legitimate grounds for processing that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims;
- purpose 5: compliance with legal obligations to which the Company is subject.
4. Which personal data we use
We process only the personal data to achieve the purposes above:
- identification data (such as name and surname);
- contact data (such as email address and phone number);
- in addition to any other personal data provided by you, if any.
5. With whom we share your personal data
Our staff processes your personal data with modalities and procedures, also in electronic form, appropriate to ensure an adequate level of security. Your personal data can be shared only with third party which have been assigned with the task to perform some activities concerning the management of the relationship with the Company. Both our staff and third parties which process your personal data for the purposes above indicated – exception for autonomous Data Controllers – receive proper instructions about the correct modalities of the processing. Furthermore, insofar as applicable, your personal data may be shared with other companies belonging to the Generali Group.
6. To whom and where we transfer your personal data
As a general rule, we do not transfer your personal data in Countries outside the European Economic Area.
In exceptional cases, limitedly for the purposes indicated under paragraph 2 above, we may transfer your personal data to where the above-listed recipients may be based. In any case, the transfer of your personal data is performed in compliance with the applicable laws and international agreements in force, as well as on the basis of appropriate and suitable safeguards (such as, for example, transfer to a Country ensuring an adequate level of protection or adopting the standard contractual clauses approved by the EU Commission). Where required by the applicable laws, the Company will implement any supplementary measure as required by applicable laws.
7. The rights you can exercise in respect of the processing of your personal data
You can exercise the right of access, rectification, updating, integration, cancellation, limitation to processing, portability in respect to your personal data.
In case you provided your consent to the processing of personal data, you may withdraw it at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
If your personal data are transferred outside the European Economic Area, you have the right to obtain copy of such data as well as indication of the Country/Countries where the data have been made available.
Insofar as applicable, you have the right to object to the processing of your personal data and request the stop of the processing operations when they are based on the legitimate interest.
In case you consider that the processing of your personal data infringes the applicable privacy laws, you have the right to lodge a complaint with a supervisory authority. You can contact the Italian Personal Data Protection Authority – Garante per la Protezione dei Dati Personali with the modalities indicated on the Authority’s website (www.garanteprivacy.it).
You can exercise your rights by contacting the Data Protection Officer at the contact details above indicated. The request of exercise of rights is free of charge unless the request is manifestly unfounded or excessive.
8. How long we retain your personal data
Your personal data are retained for the period necessary to fulfil the purposes for which they were collected, pursuant to paragraph 2 above.
In particular, personal data are retained:
- purpose (1) for the whole duration of the Newsletter Initiative, which remains active until you decide to withdraw your consent; from that moment, your data will be deleted.
- purpose (2) for the period necessary to pursue the purposes for which they were collected, but anyway not exceeding 24 months from the moment of the collection or, in case of disputes, for the statute of limitations set forth under the applicable laws, without prejudice to any longer storage periods provided for by specific laws;
- purposes (3) and (4) for 10 years equal to the statute of limitations set forth under the applicable laws, without prejudice to any longer storage periods provided for by specific laws;
- purpose (5) for the period necessary to comply with applicable legal obligations, without prejudice to any longer retention periods provided for by specific laws.
Upon expiration of the retention period, your data will be deleted.
Changes and updates of the privacy notice
Also considering possible amendments to the applicable privacy laws, the Company may integrate and/or update, wholly or partially, this privacy notice.
Any changes, integrations or updates will be communicated through publication on the Company’s website www.generali.com.