Privacy Policy

The main elements of the Privacy Policy of this website are described below

Privacy Policy

Cassa Depositi e Prestiti S.p.A. (below, “CDP”) manages the data provided by the users while browsing in compliance with the prescriptions of the European Regulation 2016/679 (below GDPR).

The management procedures of the website www.cdp.it (reference website for the remote communication techniques offered by CDP) in relation to the processing of website user personal data are described below. The Privacy Policy is relative only to this website and does not concern any other websites connected by links and visited by the user.

CDP informs the website user of the purposes of and procedures for processing of the personal data. If the user requests registration in reserved areas of this website, he/she will receive a further information notice in relation to processing of the data provided for said purpose.

Data Controller

The Data Controller of the personal data is Cassa Depositi e Prestiti S.p.A., with registered office in Piazza Giuseppe Verdi 10, 00198, Rome.

The Personal Data Protection Officer can be contacted by writing to the address mail privacy@cdp.it.

Types of data processed

Browsing data

The IT systems and software procedures responsible for the functioning of this website acquire some personal data during normal operation; the transmission of this data is implicit in the use of the Internet communication protocols.

This information is not collected to be associated with identified data subjects but could, due to its very nature, by processing and associations with data held by third parties, allow identification of the users.

This data category includes the IP addresses or the domain names of the computers used by the users who log on to the website, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the dimension of the file obtained in response, the numeric code indicating the server response status (successful, error, etc.) and other parameters relative to the operating system and the user’s IT environment.

Cookie

Purpose and legal basis of the processing

Apart from what is specified for the browsing data, the user is free to decide whether or not to provide the personal data in the request forms. However, if the user does not provide said data, it may be impossible to satisfy the request.

Processing method

The personal data are processed using automated instruments for the time strictly necessary to achieve the purposes for which they have been collected. Specific security measures are observed to prevent data loss, unlawful or incorrect use and unauthorized access.

Data recipients

The processing connected with the web services of this website is carried out by the processing service technical personnel. No data deriving from the web service are communicated or disclosed.

The personal data provided by the users who request information material are used for the sole purpose of carrying out the service requested and are communicated to third parties only if necessary for said purpose.

Rights of the Data Subjects

You are informed that art. 15-22 GDPR entitle the Data Subjects to exercise specific rights; the Data Subject can obtain from the Data Controller: access, rectification, erasure, restriction of processing, withdrawal of consent, and portability of the data concerning him/her.

The Data Subject also has the right to object to the processing. In the event of the right of objection being exercised, CDP reserves the possibility of not following up the request, and therefore continuing the processing, if there are binding legal grounds for proceeding with the processing overriding the interests, rights and freedoms of the Data Subject.

The above rights can be exercised by informal request directly to the Personal Data Protection Officer, at the contacts provided in point 1.

The Data Subject also has the right to raise complaints with the Italian Data Protection Authority.