Pursuant to Legislative Decree No. 196 dated 30 June 2003 In accordance with Article 13 of Legislative Decree No. 196 dated 30 June 2003 – the Data Protection Code, Intesa Sanpaolo, in its capacity as Data Controller, is required to provide information regarding the processing of the personal data you have disclosed.
Purpose of data processing. All personal data are processed in compliance with the provisions of the Personal Data Protection Code, and with the confidentiality obligations that have always governed the business of the Bank. The personal data provided by you are processed for purposes connected with and instrumental to the appraisal of your application (for example: valuation of personal details, educational qualifications, knowledge of foreign languages, previous professional experience, etc.). The provision of such data is hence essential for us to comply with your specific request for appraisal of your application, and therefore we do not ask you to give your consent.
In the process of acquiring pre-contractual information, the Bank may need to process data which the law defines as "sensitive", namely “personal data allowing the disclosure of racial or ethnic origin, religious, philosophical or other beliefs, political opinions, membership of parties, trade unions, associations or organisations of a religious, philosophical, political or trade-unionist character, as well as personal data disclosing health and sex life”. Regarding the processing of these data, the law does not require consent where the processing is necessary to comply with an obligation imposed by a law, regulations or Community legislation. Your consent to the processing of sensitive data is instead required by law in the case of processing necessary for further compliance, within the limits and in conformity with the purposes of processing indicated in Authorisation no. 1 for the processing of sensitive data in employment contracts. We would therefore ask you to give, or withhold, your consent to the processing of such data. However, should you deny your consent, this may make it objectively impossible for the Bank to undertake the appraisal of your application. In this regard, we would specify that in any further phases of the selection process the consent to the processing of sensitive data will have to be provided in writing.
Modalities of data processing Your personal data will be processed manually and using electronic and automatic means, applying logics strictly related to the purposes of the processing and, in any case, in such a manner as to guarantee the security of the data and always in compliance with the provisions laid down in Section 11 of the Personal Data Protection Code. Data collected via internet will be kept for a period not longer than 24 months, after which, if not used, they will be destroyed.
Categories of entities to which the data may be disclosed The Bank may communicate the data provided by you to other companies of the Intesa Sanpaolo Group which might be interested in your application. Furthermore, in our own performance of certain activities related to the processing of your personal data, the Bank may also disclose your data to reliable external companies or entities. These companies collaborate directly with us and perform the functions of “data processor” or operate in an entirely independent manner as separate “data controllers”. The list of these entities is constantly updated and may be requested from the pro tempore Manager of the Human Resources Department, in his capacity as data processor for the data of the personnel and the external entities that have similar relationships with the Bank. Your personal data will also be disclosed to the employees and collaborators, even temporary, who in relation to the specific duties performed have been appointed by Intesa Sanpaolo S.p.A. as “persons in charge of the processing”./p>
Data subject’s rights. We would remind you that Section 7 of the Personal Data Protection Code grants the data subject specific rights. More specifically, for example, the data subject shall have the right to: obtain confirmation as to whether or not personal data concerning him/her exist and communication of such data in intelligible form; be informed of the source of the personal data, the purposes and modalities of the processing; obtain the updating, rectification or, where interested therein, integration of the data, the erasure, anonymisation or blocking of data that have been processed unlawfully; object, in whole or in part, on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection, or to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys. Finally, we would inform you that, for the exercise of the rights laid down in the aforementioned Section 7, and to obtain any other information, you may apply to the pro tempore Manager of the Human Resources Department in his capacity as data processor for the data of the personnel and the external entities that have similar relationships with the Bank.