Alert Mail

Information required pursuant to Article 13 of Regulation (EU) 2016/679 and the national regulations in force on personal data protection

In accordance with Regulation (EU) 2016/679 (the “GDPR Regulation”, or the “GDPR”) and the national regulations currently in force on the protection of personal data (jointly with the GDPR, the “Data Privacy Regulations”), Mediobanca – Banca di Credito Finanziario S.p.A., with registered office at Piazzetta Enrico Cuccia 1, Milan, Italy (the “Controller”, or “Mediobanca”), in its capacity of Data Controller, is required to provide an information notice on the use of personal data.

The personal data held by the Data Controller are collected directly from the data subjects themselves through the latter completing the newsletter subscription form.

a)	Purposes of data processing and mandatory data provision

All personal data shall be processed, in accordance with the provisions of the law and any confidentiality obligations in force, for purposes strictly related and functional to the sending of the regular newsletter by email containing news, press releases, and events relating to Mediobanca. 

The provision of personal data for such purposes is optional, hence failure to provide it does not entail any negative consequences apart from the fact of being unable to receive the regular newsletter.

b)	Legal ground

The legal ground for the data processing is consent, which may be freely given or withheld and which may be withdrawn at any time, by clicking on the “Unsubscribe” link underneath the regular newsletter received via email or by the means referred to in point f) hereunder.

c)	Means of processing

Your personal data will be processed in accordance with the provisions of the Data Privacy Regulations, using paper-based, computer or electronic instruments, according to criteria closely linked to the purpose stated, and, without prejudice to the foregoing, by such means as to guarantee security and confidentiality in compliance with the Data Privacy Regulations.

d)	Communication and disclosure of data

In order to achieve the purposes listed under the foregoing letter a), your personal data will be visible to the employees of Mediobanca who shall operate as persons appointed/authorized to process the data.

Furthermore, your data may also be disclosed to other parties used by Mediobanca, for various reasons, in order to provide the service requested, and to parties that provide services in connection with the management of the Mediobanca information system.

Your personal data may be transmitted outside the European Union only pursuant to a decision by the European Commission or in the presence of other guarantees as provided by the Data Privacy Regulations (including binding corporate regulations and standard contractual clauses governing the transfer of personal data to third countries).

Personal data processed by the Bank is not published.

e)	Data retention

In accordance with the principles of proportionality and necessity, personal data will be stored in a form that allows the data subject to be identified for a period of time not exceeding the fulfilment of the purposes for which the personal data were processed, therefore taking into account:

•	The need to continue to retain personal data collected for the purpose of offering the services agreed with the user;
•	The existence of specific regulatory obligations (e.g. the Italian Civil Code, anti-money-laundering regulations, investment services regulations, tax monitoring laws, etc.) or contractual obligations that require data processing and retention for specific periods of time.

Mediobanca shall adopt reasonable measures to ensure that any inaccurate personal data is amended or deleted.

f)	Rights of the data subject

Data subjects are entitled at any time to obtain confirmation of the existence or otherwise of such data and to know its content and origin, to check its accuracy or ask for it to be supplemented, updated or rectified (cf. Articles 15 and 16 of the GDPR).

Furthermore, Data Subjects are entitled to request that their data be erased, its processing limited, withdraw consent, request data portability and make complaints to the regulatory authority or oppose the processing of their data for legitimate reasons (cf. Articles 17ff of the GDPR).

Such rights may be exercised by sending notice in writing to the following email address: privacy@mediobanca.com.

Mediobanca, inter alia through the appointed units, shall take steps to deal with your request and provide you with information regarding the action taken in response to your request without undue delay.

g)	Data Controller and Data Protection Officer

The Controller for the data processing is Mediobanca – Banca di Credito Finanziario S.p.A., with registered office in Piazzetta Enrico Cuccia 1, Milan, Italy.

Mediobanca has appointed a Data Protection Officer who may be contacted at the following email addresses:

•	DPO.mediobanca@mediobanca.com 
•	dpomediobanca@pec.mediobanca.com

MEDIOBANCA – BANCA DI CREDITO FINANZIARIO S.P.A.
CONSENT TO PROCESSING OF PERSONAL DATA
With reference to the purposes for which the email alert containing news, press releases and events involving Mediobanca is sent
I consent
I do not consent