Privacy Information Notice
1. Assicurazioni Generali processes your personal data
Assicurazioni Generali S.p.A. (hereinafter also the Company), with registered office in Trieste, at Piazza Duca Degli Abruzzi no. 2, processes your personal data as data controller.
If you wish to receive more information, you can use the following postal address:
Assicurazioni Generali S.p.A., Piazza Duca degli Abruzzi no. 2, 34132 Trieste / P.O. Box 538.
For any questions or if you wish to exercise a right in respect of the processing of your personal data, you can contact our data protection officer: by email at: dpoag@generali.com; by traditional mail at: Assicurazioni Generali, Piazza Tre Torri n. 1, 20145 Milan to the attention of the data protection officer.
2. How we use your personal data and on the basis of which ground
We process your personal for the following purposes:
- evaluate and manage the sponsorship request we received, ensuring the correct execution of the related activities;
- perform reporting, statistic and data analytics activities, also in aggregate form, in order to assess the sponsorship performance and keep record of the same for future improvements; the activities can be based also on feedback gathered from you;
- fulfil applicable legal obligations;
- claim and defend the rights of the Company, its officers, representatives and shareholders in a potential dispute.
3. Why the provision of your personal data is required
The processing of your personal data takes place on the basis of the following assumptions:
- purpose (1) to execute your sponsorship and it is mandatory since, in lack thereof, sponsorship itself may not be possible (contractual obligation);
- purpose (2) and (4) on the legitimate interest of the Company: purpose (2) to assess the Initiative performance and keep record for future improvements; purpose (4) to defend the rights of the Company, its officers, representatives and shareholders in a potential dispute. Should you oppose said processing as explained in paragraph 7 below, your personal data may not be used for the above-mentioned purposes, unless the Company proves the existence of compelling legitimate reasons to proceed with the processing, that prevail over your interests, rights and freedoms;
- purpose (3) is mandatory as it is necessary for the Company to comply with its legal obligations.
4. Which personal data we use
We process only the personal data to achieve the purposes above. We mainly process:
- identification data (such as name and surname);
- contact data (such as email address and phone number);
- your image, voice, when the Initiative entails photo\audio\video shooting or requires their submission;
in addition to any other personal data provided by you, if any.
5. How and with whom we share your personal data
Our staff processes your personal data with modalities and procedures, also in electronic form, appropriate to ensure an adequate level of security which, insofar as applicable, may be set forth in the audio/video release form you have signed. Your personal data can be shared only with third party which have been assigned with the task to perform some activities concerning the management of the relationship with the Company. Both our staff and third parties which process your personal data for the purposes above indicated – exception for autonomous Data Controllers – receive proper instructions about the correct modalities of the processing. Furthermore, insofar as applicable, your personal data may be shared with other companies belonging to the Generali group.
6. To whom and where we transfer your personal data
As a general rule, we do not transfer your personal data in Countries outside the European Economic Area.
In exceptional cases, limitedly for the purposes indicated under paragraph 2 above, we may transfer your personal data to where the above-listed recipients may be based. In any case, the transfer of your personal data is performed in compliance with the applicable laws and international agreements in force, as well as on the basis of appropriate and suitable safeguards (such as, for example, transfer to a Country ensuring an adequate level of protection or adopting the standard contractual clauses approved by the EU Commission). Where required by the applicable laws, the Company will implement any supplementary measure as required by applicable laws.
7. The rights you can exercise in respect of the processing of your personal data
You can exercise the right of access, rectification, updating, integration, cancellation, limitation to processing, portability in respect to your personal data.
In case you provided your consent to the processing of personal data, you may withdraw it at any time, without affecting the lawfulness of processing based on consent before its withdrawal.If your personal data are transferred outside the European Economic Area, you have the right to obtain copy of such data as well as indication of the Country/Countries where the data have been made available.
Insofar as applicable, you have the right to object to the processing of your personal data and request the stop of the processing operations when they are based on the legitimate interest.
In case you consider that the processing of your personal data infringes the applicable privacy laws, you have the right to lodge a complaint with a supervisory authority. You can contact the Italian Personal Data Protection Authority – Garante per la Protezione dei Dati Personali with the modalities indicated on the Authority’s website (www.garanteprivacy.it).
You can exercise your rights by contacting the Data Protection Officer at the contact details above indicated. The request of exercise of rights is free of charge unless the request is manifestly unfounded or excessive.
8. How long we retain your personal data
Your personal data are retained for the period necessary to fulfil the purposes for which they were collected, pursuant to paragraph 2 above. In particular, personal data are retained:
- purpose (1) for the whole duration of the Initiative and for 10 years after its termination;
- purpose (2) for the period necessary to pursue the purposes for which they were collected, but anyway not exceeding 24 months from the moment of the collection or, in case of disputes, for the statute of limitations set forth under the applicable laws, without prejudice to any longer storage periods provided for by specific laws;
- purpose (3) for the period necessary to fulfil applicable legal obligations, without prejudice to any longer storage periods provided for by specific laws;
- purpose (4) for 10 years equal to the statute of limitations set forth under the applicable laws, without prejudice to any longer storage periods provided for by specific laws.
Changes and updates of the privacy notice
Also considering possible amendments to the applicable privacy laws, the Company may integrate and/or update, wholly or partially, this privacy notice.
Any changes, integrations or updates will be communicated through publication on the Company’s website www.generali.com.