Information pursuant to art. 13 of Legislative Decree 196/2003
Purpose and method of data processing
UniCredit Leasing S.p.A. hereby informs its Customers that the personal data in its possession, obtained directly from the interested party, or in the possession of third parties, may be processed, even by third parties appointed as data processors for:
I) Compliance with obligations envisaged by legislation, regulations and Community law, or by provisions issued by legally empowered authorities and by Supervisory and control bodies.
The provision of the personal data required for said purpose is compulsory and the relative processing does not require the consent of the interested party.
- Purposes strictly associated and instrumental to managing relations with customers (e.g. the acquisition of preliminary information in order to finalise a contract, performance of transactions on the basis of the obligations resulting from the contract signed with the customer, checks and assessments on the results and the performance of accounts, as well as on the risks associated with the same, etc.).
The provision of the personal data required for said purpose is not compulsory, however, refusal to provide it may, in terms of the relationship between the data and the service requested - make it impossible for UniCredit Leasing SpA to provide the service in question. The processing of the same does not require the consent of the interested party.
- Purposes associated to the business activities of UniCredit Leasing S.p.A., such as:
a) measuring the degree of customer satisfaction on the quality of the services provided and the activities of UniCredit Leasing S.p.A. and by the Italian UniCredit Group, acquired through personal or telephone interviews, questionnaires etc.
b) the promotion and the sale of products and services of UniCredit Leasing S.p.A., of the Italian UniCredit Group or of third parties, made by means of letters, by phone, advertising material, automated communication systems etc.
c) the production of studies and market research, made by means of personal or telephone interviews, questionnaires etc.
d) public relations activities.
The provision of the personal data required for said purpose is not compulsory and the relative processing requires the consent of the interested party.
Processing is performed using manual, IT and on-line tools, whose logic is strictly correlated to the above-cited purposes and, in any event, in such a way as to guarantee the security and confidentiality of the data.
II) Sensitive data
UniCredit Leasing S.p.A. processes sensitive data of its customers only in order to carry out specific services or transactions requested by the same (for example, the payment of membership fees to a political or trade union organization). In these cases, UniCredit Leasing S.p.A. may only make these transactions after having obtained the written consent of the requesting interested party.
III) Categories of entities to whom the data may be communicated or that may become aware of such as data processors or persons in charge of processing.
- UniCredit Leasing S.p.A. may communicate, without the consent of the interested party, the personal data in its possession to:
a) entities to whom said communication must be made in order to comply with an obligation envisaged by legislation, regulations or Community law. In particular, certain personal data of borrowers, parties requesting loans, or guarantors of credit exposure that exceeds the maximum threshold established for consumer credit transactions (currently € 31,246.00) but is below the minimum assessed threshold envisaged by the Risks Centre of the Bank of Italy (currently € 75,000.00), must be communicated to the centralised risk assessment system managed by Società Interbancaria per l'Automazione S.p.A. (SIA) and to the Risks Centre of the Bank of Italy for amounts that exceed said threshold. Those managing said files will process the data for the sole purpose of assessing credit risk, and in turn, will communicate it in an aggregate form to intermediaries that are part of the system that generate reports of this nature, who will process the data for the same purposes;
b) companies belonging to the Italian UniCredit Group, namely subsidiaries or affiliates pursuant to art. 2359 of the Italian civil code, which may process data for the same purposes for which the same was acquired.
- Furthermore, UniCredit Leasing S.p.A., with the consent of the interested party may communicate date regarding its customers to external companies, entities or consortia that process data on its behalf:
a) for the purposes set forth in point 2, Section I
b) for the purposes set forth in point 3, Section I.
A detailed list of the entities to whom data may be communicated can be consulted at UniCredit Leasing S.p.A. offices, open to the public, at the offices of financial advisers and on the website by clicking on the links below.
- As data processors, the natural and legal persons on the list referred to in point V below may become aware of the data, as well as persons in charge of processing data required to perform the duties assigned to them, namely natural persons belonging to the following categories: employees of UniCredit Leasing S.p.A. or on secondment; temporary workers; placement students; financial advisers; consultants; employees of external companies appointed as data processors.
IV) Rights of the interested party.
The law attributes specific rights to the interested party, including that of knowing what personal data of the same is in UniCredit Leasing S.p.A.’s possession and how the same are used, to obtain the cancellation, transformation, anonymously or to block the unlawful processing of data, as well as the updating, rectification, or, if in the party’s interest, to add data and to challenge the processing for legitimate reasons.
Lastly, at any time, the interested party may object to processing for the purpose of sending sales or advertising material, direct sales or market research.
V) Data controller and Data processor.
As regards the data processed by the Company, we hereby advise that:
- the data controller is UniCredit Leasing S.p.A.- Via Zamboni nr. 20 40126 Bologna;
- in addition to several Locat employees, the personal data processors appointed also include lawyer Alberto Sandrini, Head of the Legal Department, other categories of entities including, merely by way of example:
a) companies or bodies that transmit, fill envelopes, transport and sort communications to customers;
b) companies that provide document archiving services as regards accounts held by customers;
c) companies or professionals involved in credit collection or the recovery of assets.
A detailed list of all data processors is held, and regularly updated, at the registered offices, branches and agencies of UniCredit Leasing S.p.A., open to the public as well as on the website, by clicking on the link below.
