The privacy policy of the website of UniCredit Leasing SpA
Reasons for this notice
On this page the methods of managing the website of UniCredit Leasing S.p.a. are described, with reference to the processing of the personal data of the users who consult it. It is an information document which is also made pursuant to article 13 of Italian Legislative Decree no. 196/203 - Italian Code for the Protection of Personal Data (hereinafter called Privacy Code) for those who interact with UniCredit Leasing S.p.A.'s web services, which may be electronically accessed by visiting the address:
http://www.unicreditleasing.eu
which is the home page of the Company's site. The information document relates only to this site and not also to other websites which may be consulted by the user through links.
The information document is based on Recommendation no. 2/2001 which the European Authorities for the protection of personal data, jointly in the Group set up by article 29 of Directive no. 95/46/EC, adopted on 17 May 2001 to identify some minimum requirements for the collection of online personal data, and, in particular, the methods, time-frames and nature of information which the data controllers must provide to users when they connect to web pages, regardless of the purposes of connection.
The data "controller"
After using this site, data may be processed which relates to identified or identifiable persons. The Data "Controller" is UniCredit Leasing S.p.A., with registered office in Via Rivani 5, 40138 Bologna.
Place of data processing
The processing connected to the web services of this site takes place at the afore-mentioned Head Office and also at the registered office in Milan, at Viale Calabria 31, of the Company and is carried out only by the staff of UniCredit Leasing S.p.A., appointed to carry out the processing, or by the staff of Ugis, Unicredit's computer services consortium company.
No personal data deriving from the web service is disclosed.
The personal data provided by the users is used for the sole purpose of carrying out the provision of the service requested and are communicated to third parties only in the case where this is necessary for this purpose.
Type of data processed
Connection data
The IT systems and the software procedures used for the functioning of this website acquire, during normal use, some personal data, the transmission of which is implicit in the use of the internet network, which is based on the TCP/IP protocol.
It is information which is not collected in order to be associated with identified persons, but which by its very nature could, by being processed and associated with data held by third parties, allow the users to be identified.
In this category of data are the IP addresses or the domain names of the computers used by the users who connect to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code which indicates the status of the data response from the web server (successful, error, etc.) and other parameters relating to the operating system and the user's computer environment.
These data are used for the sole purpose of gathering anonymous statistical information on the use of the site and to check the correct functioning of the website. The data could be used for the ascertainment of liability connected or linked to them in the event of computer crimes which damage the website: apart from these circumstances, at present the web contact data are not kept for more than a few days.
Data provided voluntarily by the user
The request for emails to be sent to the addresses shown in the special section of UniCredit Leasing S.p.A's website involves the subsequent acquisition of some of the applicant's personal data, including the email address of the applicant, necessary for replying to the requests.
Specific summary information documents will be gradually added to or shown on the pages of the site reserved for particular services on request.
Cookies
None of the user's personal data is acquired by the site in this way. No use is made of cookies for sending the information of a personal nature, nor are so-called persistent cookies of any kind used, or systems for tracking users.
The use of so-called session cookies (which are not permanently saved on the user's computer and which vanish when the browser is closed) is strictly limited to the transmission of session identification numbers (consisting of random numbers generated by the server) necessary for allowing the secure and efficient exploration of the site.
The session cookies used on this site avoid the need to use other IT techniques which could potentially harm the privacy of the users' connections and do not allow the identifying personal data of the user to be acquired.
Optional data provision
Apart from what is specified for the connection data, the user is free to choose whether to provide the personal data requested.
If they are not provided it could be impossible to obtain what has been requested.
Processing methods
The personal data are processed with automated instruments for as long as they are strictly necessary for achieving the purposes for which they have been collected.
Specific security measures are observed to prevent the loss of data, unlawful and incorrect uses and unauthorised access.
In particular, in the sections of the website relating to particular services, where personal data are requested from the user, the data are encrypted by security technology called Secure Sockets Layer, abbreviated to SSL. The SSL technology encodes the information before it is exchanged via the internet between the processor of the user and the central systems of UniCredit Leasing S.p.A., making it incomprehensible to unauthorised parties and guaranteeing in this way the privacy of the information transmitted.
The use of the SSL moreover requires a compatible browser which is capable of "exchanging” a security key with a minimum length of 128 bits, necessary for establishing the afore-mentioned secure connection with the central systems of UniCredit Leasing S.p.A..
Rights of the parties concerned
The parties to which the personal data relate have the right to at any time obtain confirmation of the existence or non existence of that data and to know its contents and origin, check its accuracy or request it be added to, updated, or rectified (art. 7 of Italian Legislative Decree no. 196/2003).
Pursuant to the same article they have the right to request the cancellation, transformation into anonymous form, or the blocking of the data processed in breach of the law, as well as oppose in each case, for lawful reasons, their processing.
Such requests are to be sent to the Company.
Minors
UniCredit Leasing S.p.A. does not knowingly use its website to request data from persons under the age of 18.
Version of the privacy policy
Considering that the state of completion of the automatic control mechanisms means that they are not currently without errors and malfunctions, it is pointed out that this document constitutes the "Privacy Policy" of the website of UniCredit Leasing S.p.A. and will be subject to updates (the various versions of it will in any case be made available).
Information document for customers pursuant to article 13 of Italian Legislative Decree 196/2003 ("Italian Code for the Protection of Personal Data" or "Privacy Code")
