Information Notice relating to the processing of personal data and Consent
Pursuant to art. 13 of Regulation (EU) 2016/679 (General Regulation for the Protection of Data)
Pursuant to art. 13 of the EU Regulation 679/2016 of the European Parliament and of the Council of 27th April 2016 on the protection of natural persons with reference to the processing of their personal data, as well as the free circulation of such data (General Data Protection Regulation, hereinafter also called “GDPR” or “Regulation”) we hereby inform you that your personal data (hereafter also the “Data”), freely provided by you to our company will be processed by BFF Bank S.p.A., the Data Controller, for the following purposes:
a) Marketing communication (merely by way of example but without limitation, promotion of products or services by the sending of emails and/or telephone contact details by authorized personnel of BFF Bank S.p.A., newsletters)
b) Event management.
The legal basis for the pursuit of purposes a) and b) consists of Your specific and separate consents (cf. art. 6(1)(a) GDPR). The communication of Your personal data for these purposes does not correspond to a legal or contractual obligation. The consequence of the lack of communication will only cause the impossibility for BFF Bank S.p.A. to allow you the access to the event (in case of refusal of consent for the purpose b), or to carry out marketing activities (in case of refusal of consent for the purpose a).
The Personal Data collected may be subject to communication by the Data Controller to authorized personnel of the companies of BFF Banking Group. These latter could act as autonomous Data Controllers to fulfill the purposes above. The processing of data for these purposes will be carried out by the Data Controller BFF Bank S.p.A. and authorized persons in charge pursuant to article 29 of the EU Regulation 679/2016 with automated and non-automated methods, based on logical criteria compatible and functional to the purposes for which the data were collected, in compliance with the rules of confidentiality and security required by law. The category of Data that will be subject to the aforementioned data processing consists of the identification details entered by You in form above.
We also inform you that your Data will be processed using automated tools and applying appropriate security measures. The Data will be processed and stored by the Data Controller for the period of time necessary to pursue the indicated purposes, taking account of the nature of the underlying services, subject, in any case, to the withdrawal of your consent or the exercise of your rights of objection and erasure of the Data. You may withdraw your consent by sending a communication to the Data Controller at the addresses specified in this information notice. The right to withdraw consent at any time does not affect the lawfulness of processing based on consent before its withdrawal.
The Data will not be transferred to non-EU countries. However, if this occurs in future due to requirements linked to the pursuit of the aforementioned purposes, the Data Controller hereby guarantees that that transfer will occur only in respect of the requirements of the GDPR - particularly Chapter V thereof - sending to you an appropriate communication. In relation to your personal data, we hereby inform you that you may exercise the rights envisaged by Regulation (EU) 2016/679 (rights of access, rectification, erasure, restriction of processing, notification, data portability, opposition to processing) as well as the right to withdraw consent by contacting the Data Controller, and thus by writing to BFF Bank S.p.A., Via Domenichino, 5, 20149, Milan. We also inform you of your right to lodge a complaint with the supervisory authority if you believe that the rights indicated here have not been granted to you.
The Data Controller has also appointed a Data Protection Officer which can be contacted at the following email address: DPO@bff.com.