Privacy Notice

PIB Italia Broker S.p.A. (di seguito “la Società”) presta la massima attenzione alla tutela e alla sicurezza delle informazioni in proprio possesso, in relazione ai dati personali dei clienti, potenziali clienti e dei soggetti con cui entra in contatto.

This document, drafted pursuant to Articles 13 and 14 of EU Regulation No. 679/2016 of 27 April 2016 (hereinafter the “Regulation” or “GDPR”), provides detailed information on the protection of your personal data as processed by the Company, with the aim of informing you, in particular, which of your data we process, the purposes for which we process and share them, what your rights are and how you can exercise them, in line with the provisions of the Regulation.

Potremmo avere la necessità di modificare o integrare tale documento, per obblighi normativi o in conseguenza di mutamenti organizzativi. In tal caso te ne daremo notizia tramite i nostri canali (ad esempio sito web). Puoi in ogni momento consultarne la versione più aggiornata sul sito web www.pibgroupitalia.it.

The information notice is provided and is valid only for the Company’s websites and not for other websites that may be accessible via external links. Additional information may be provided to you, where necessary, at the time of requesting a specific product or service.

DATA CONTROLLER AND DATA PROTECTION OFFICER

Il Titolare del trattamento è PIB Italia Broker S.p.A.

Registered Office: Corso Venezia no. 37, 20121 Milan – Tel. 028055157

e-mail: [email protected] certified e-mail (PEC): [email protected]

Contact details of the Data Protection Officer (DPO): [email protected]

PERSONAL DATA PROCESSED

The personal data that we process and protect belong to the following categories:

Personal data such as, for example, personal and identification data like first name and surname, place and date of birth, tax code, identity document number, and contact details such as telephone number, e-mail; Any other personal data provided directly by you (e.g. information entered in the forms on the website or on the mobile application).
Browsing data: the IT systems and software procedures used to operate this website acquire, in the course of their normal operation, certain identification data whose transmission is implicit in the use of Internet communication protocols, such as, for example, IP addresses or domain names of the computers used by users who connect to the site. This information is not collected in order to be associated with identified individuals-test, but, by its very nature, could make it possible to identify users. These data are used solely for the purpose of obtaining statistical information on the use of the site and to check that it is functioning correctly.
Cookies: please refer to the cookie policy available on the website.

SOURCE OF PERSONAL DATA

The Company may collect information directly from you when:

You request a service from us;
You use our websites and our mobile application;
Apply for a job position at our Company;
You contact us for a complaint or a claim.

PURPOSES AND LEGAL BASES

The processing of personal data is lawful only if its purpose is supported by a valid legal basis, as provided for by Art. 6 GDPR. Below we present the purposes we pursue when we process your data and the related legal bases.

Legal and regulatory obligations The collection and use of your personal data are necessary to allow us to comply with the regulations to which we are subject, such as financial regulations. In this context, we process your personal data to fulfill legal obligations and comply with requests from Authorities, bodies, and public entities to which the Company is subject.

Contractual and pre-contractual obligations Your personal data are processed in order to perform a contract to which you are a party or pre-contractual measures adopted at your request, for the following purposes:

Manage your interaction with the website/App and with the sections contained therein (for example, access to the restricted areas of the website/App as well as the publication by you of contributions on Social Network pages), including the sending of so‑called “transactional” emails connected to the registration procedure on the website/App;
Respond to your requests for information and/or assistance;
Allow the provision of the requested services and the management of activities connected and instrumental to said services, including (i) providing quotes for the insurance products/services offered by the Company, (ii) enabling the purchase, renewal or management of insurance products, (iii) enabling the reporting of claims and the handling of complaints.

Consent of the data subject The processing activities listed below are possible only if you have given consent for the specific purpose. You always have the right to revoke all or part of the consents you have provided. The data collected with the explicit and freely given consent of the data subjects are processed in order to pursue the following purposes:

Management of cookies and similar technologies installed on the websites and the App, in accordance with the provisions of the cookie policy.

Legitimate interest of the Data Controller or of third parties The data collected to pursue our legitimate interest are processed for the following purposes:

Allow navigation of the website/App, analyze and improve the Company’s services;
Manage disputes and any litigation;
Prevent and detect fraudulent activities or misuse of the website/App.
Where we rely on the legal basis of legitimate interest to collect and use your personal data, we will take appropriate measures to ensure that the processing does not infringe the rights and freedoms granted to you by applicable data privacy laws.

RECIPIENTS OF THE DATA

We may disclose your data to other parties, such as:

Public authorities or institutions to which we are required to disclose data in order to respond to their request or to protect our rights in court or in the course of legal proceedings.
Employees and/or collaborators of the Data Controller who, operating under the latter’s direct authority, will be authorised to process your personal data.
PIB Group companies, the Company, as part of the Group, works closely with the other companies. Your personal data may, therefore, be shared with the Parent Company, where necessary, in order to:

Comply with our legal and regulatory obligations described above;
Fulfil our legitimate interests such as managing, preventing and detecting fraud or for administrative purposes.

External recipients outside the Group, in order to fulfill some of the purposes described in this Privacy Notice, we may, where necessary, share your personal data with:

Data processors who perform services on our behalf (e.g. IT services, consulting) and with whom the Company has defined specific obligations regarding the processing of personal data;
Insurance market operators with whom we have relationships, where necessary, in order to offer, administer and manage the services provided to you, such as brokers, intermediaries, loss adjusters, independent agents, financial institutions, counterparties;
Medical professionals, for example, when you provide us with health information in relation to a claim made under your insurance policy;
Professionals such as lawyers, notaries, or auditors when necessary in specific circumstances (litigation, auditing, etc.).

The parties belonging to the above-mentioned categories act as Data Processors or operate in complete autonomy as separate Data Controllers, as the case may be. The list of Data Processors is constantly updated and available through the Data Controller’s contact details.

TRANSFER OF DATA OUTSIDE THE EEA

In the event of international transfers of personal data originating from the European Economic Area (EEA) and destined for a non-EEA country, the transfer may take place if the European Commission has recognized that a non-EEA country provides an adequate level of data protection; in this case, your personal data may be transferred on this basis.

I tuoi dati personali potranno essere trasferiti al di fuori dello Spazio Economico Europeo, vale a dire al di fuori dell’Unione europea e Islanda, Norvegia e Liechtenstein per essere condivisi con la Capo Gruppo PIB che ha sede in UK. Il trasferimento è attuato da PIB Italia Broker, che adotta adeguate misure di tutela per garantire la liceità e sicurezza dei trasferimenti di dati personali facendo affidamento sulle decisioni di adeguatezza della Commissione europea o su altre garanzie o condizioni ritenute adeguate per i trasferimenti in oggetto. A riguardo, l’interessato potrà ottenere ulteriori informazioni scrivendo una mail a [email protected]

The GDPR grants you the following rights:

Il GDPR ti riconosce i seguenti diritti:

Access

(Art. 15 GDPR)

You have the right to obtain confirmation from us as to whether or not personal data concerning you are being processed, to obtain information about the processing in progress, and to receive a copy of the data.

Rectification

(Art. 16 GDPR)

You have the right to obtain the rectification of inaccurate personal data concerning you and the completion of incomplete data

Erasure

(Art. 17 GDPR)

The GDPR provides for a number of cases in which you have the right to obtain the erasure of personal data concerning you (for example, if the data are no longer necessary in relation to the purposes for which they were processed, or if you have withdrawn the consent on which the processing is based and there is no other legal basis for carrying it out).

Restriction

(Art. 18 GDPR)

The GDPR provides for a number of cases in which you have the right to obtain the restriction of the processing of personal data concerning you (for example, for the period necessary to carry out the appropriate checks on the personal data whose accuracy you have contested).

Portability

(Art. 20 GDPR)

The GDPR provides for a number of cases in which you have the right to receive the personal data that you have provided to us and that concern you in a structured, commonly used and machine‑readable format. The GDPR also protects your right to transmit this data to another data controller without hindrance from us.

Objection

(Art.21 GDPR)

If your personal data are processed by us on the legal basis of consent and/or legitimate interest, you have the right to object at any time to the processing and to any related activity; if you exercise this right, the processing of your personal data will no longer be carried out, unless there are reasons that oblige us to proceed or the processing is necessary to establish, exercise, or defend a right in legal proceedings.

Automated decision-making process

(Art.22 GDPR)

If your data is used through automated analysis tools, you can request it in a structured, commonly used and machine-readable format.

Complaint

(art.77 GDPR)

If you believe that the processing of your data by us is taking place in violation of the regulations on the processing of personal data, you have the right to lodge a complaint with the competent Data Protection Authority of the Member State in which you habitually reside/work or of the State in which the alleged violation occurred.

To exercise your rights, you can contact us directly at the following e-mail address [email protected]

METHODS OF PROCESSING AND RETENTION PERIOD

The processing will be carried out by persons authorized by the Data Controller using IT and manual tools, according to logics strictly related to the purposes indicated and, in any case, in such a way as to ensure the security and confidentiality of the data. In compliance with the provisions of art. 5 paragraph 1 letter e) of the GDPR, the data will be stored in a form that allows the identification of the data subjects according to the following criteria:

for a period of time not exceeding the achievement of the purposes for which they are processed, unless otherwise provided for by legal or contractual obligations;
to comply with specific regulatory or contractual obligations;
where applicable and lawful, until any request for erasure by the data subject.

To exercise your rights, you can contact us directly at the following e-mail address [email protected]