This section provides information concerning the processing of the personal data of the users who visit the pages of the Gruppo MutuiOnLine S.p.A. website.
This information is given pursuant to article 13 of Legislative Decree No. 196 of 30 June 2003 (the "Personal Data Protection Code") to those who avail of the information services offered by Gruppo MutuiOnline S.p.A. (the "Group"), accessible telematically from the home page of official site of the Group at http://www.gruppomol.it/. This information statement is valid solely for the processing of the personal data done through the Group's site and not for other websites that users may reach through a link from the Group's site.
This information statement is given also in compliance with the provisions of Recommendation 2/2001 that the European personal data protection authorities, in the working party established pursuant to article 29 of Directive 95/46/EC, adopted on 17 May 2001 to indicate certain minimum requirements for collecting personal data on-line, in particular, what information data controllers should give users when they access web pages (regardless of the purpose of the visit), how the information should be given and when.
The data controller
Data on identified or identifiable persons may be processed as a result of consulting this site. The controller of the processing of the personal data of users of the site is Gruppo MutuiOnline S.p.A, VAT No. 05072190969, with registered office at Corso Buenos Aires 18, 20124 Milan, Italy.
Place of data processing
The processing in connection with the web services of this site takes place at the aforementioned registered office of the Group and is handled solely by technical staff from the office in charge of processing or by persons that may be hired to perform maintenance work. No personal data processed within the context of supplying the services offered through this site is communicated to third parties or disseminated. The personal data provided by users who request that informative material (bulletins, CD-ROM, newsletters, reports, replies to queries, etc.) be sent to them is used by the Group solely to provide the service or attend to the matter requested and may be communicated to third parties where such is functional to meeting the user's request.
Categories of processed data
Browsing data
The computer systems and software procedures that this site relies on for its functioning collect some personal data in the ordinary course of their operation whose transmission is implicit in the use of Internet communications protocols. The information is not gathered to be associated with identified persons although by its very nature such information could identify the users through the processing of and association with data held by third parties. Included in this category of data are IP addresses or the domain names of the computers used by the users who connect to the site, the URI (Uniform Resource Identifier) form of the address of the requested service, the time of the request, the method used to put the request to the server, the size of the file obtained in response, the numeric code indicating the state of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's computer setting. Such data is used solely to obtain anonymous statistical information on the use of the site and to check that it is working correctly, and it is cancelled immediately after processing. The data could be used to ascertain liability in the event of the commission of computer crimes against the Group. Save for this latter eventuality, currently the data on web contacts is not stored for more than seven days.
Data supplied voluntarily by the user
The optional, express or voluntary sending of e-mail to the addresses indicated on this site entails the subsequent recording of the sender's address (necessary to respond to the request) and whatever other personal data may be included in the e-mail. Specific information is set out in the website pages dedicated to special services on request.
Cookies
Save for what was stated above, no personal data on the users of the site is
gathered through the site. Cookies for the transmission of personal data are
not used and neither are any so-called persistent cookies used, i.e. systems
for the permanent tracking of users. The use of session cookies (which are not
stored long-term on the user’s computer and vanish as soon as the browser
session ends) is strictly limited to the purpose of transmitting session identification
information (made up of random numbers created by the server) which is needed
to allow the safe and efficient surfing of the site. The session cookies used
on the site avoid recourse to other computer methods that could potentially
compromise the confidentiality of a user's web-surfing and do not enable the
user's personal identifying data to be collected.
Optional provision of data
Apart from what has been specified above about browsing data, users are free
to give the Group the personal data set out in request forms or in any event
sent with a view to requesting informative material or other communications.
However, failure to provide this information may make it impossible to obtain
what has been requested.
Modalities of data processing
Personal data is processed in an automated manner solely for the time period
strictly necessary for attaining the objectives for which it has been gathered.
Specific measures are adopted to prevent data loss, unlawful or incorrect use
of data and unauthorised access.
Rights of interested parties
The persons that the personal data refers to may obtain confirmation as to the
existence or not of personal data concerning them, including any not yet recorded,
and the communication thereof in an intelligible from. Such parties are also
entitled to be informed of: a) the source of the personal data; b) the purposes
and method of the processing; c) the logic applied in the event of processing
with the aid of electronic means; d) the identifying particulars of the controller,
the processors and, if any, the controller's designated representative; and
e) the persons or categories of persons to whom the personal data may be communicated
or who may become aware of the personal data in their capacity as designated
representative in the State, processors or persons in charge of processing.
The interested parties are further entitled to obtain: a) the updating, rectification
or, where the interested party so desires, the completion of the data; b) the
cancellation or transformation into an anonymous form or blocking of any data
which has been processed unlawfully including data whose storage is not necessary
for the purposes for which it was initially gathered or subsequently processed;
and c) a statement that the operations specified in the preceding points a)
and b) have been notified, also as regards their contents, to those to whom
the data was communicated or disseminated, except when the provision of such
information proves impossible or involves a manifestly disproportionate effort
compared with the right that is to be protected.
The interested parties are also entitled to object in whole or in part: a) on
legitimate grounds, to the processing of personal data relating to the party
even though the data concerned may be pertinent to the purposes for which it
was initially gathered; b) to the processing of personal data relating to the
party which is carried out for purposes of sending advertising material, making
direct sales, performing market research or providing commercial information.
The foregoing rights may be exercised at any time in writing by faxing the relevant
request in this regard to the Group at the following number: +39 02 91390863.
Gruppo MutuiOnline S.p.A.