Privacy and Cookie Policy

This page describes how this website is managed with regard to the processing of users' personal data. This information is also provided pursuant to Art. 13 and 14 of Regulation (EU) 2016/679 to those who interact with web services electronically accessible from the address: www.up2stars.com.

This document also takes into account Recommendation no. 2/2001 adopted by the European authorities for the protection of personal data to identify the minimum requirements for the online collection of personal data.

The information notice is provided only for this website and not for other websites that may be consulted by the user through links.

The Data Controller is Intesa Sanpaolo Innovation Center S.p.A. with registered office in Torino, Corso Inghilterra 3 - 10138.

DATA PROCESSING

The processing operations relating to the web services of this site are carried out only by the technical staff of the department in charge of data processing and by third parties only if necessary for that purpose.

The personal data provided by users who request informative material are used for the sole purpose of performing the service or provision requested and are communicated to third parties only if necessary for this purpose.

PROCESSING METHODS

Personal data are processed by automated tools for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent the loss of data, unlawful or incorrect use and unauthorised access.

DATA PROVIDED VOLUNTARILY BY THE USER

The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site entails the subsequent acquisition of the sender's address, which is necessary to respond to requests, as well as any other personal data included in the message. The provision of personal data is optional, but it is a strictly necessary condition to manage  the data subject's requests and for the performance of the services offered.

BROWSING DATA

During their normal operation and for the sole duration of the connection, the computer systems and software procedures used to operate this website may acquire some personal data whose transmission is implicit in the use of internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the website, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error etc.) and other parameters relating to the user's operating system and computer environment.

These data are processed for the following purposes:

  • to comply with the requirements of national and EU regulations and with the provisions issued by the Supervisory and Controlling Bodies, also in relation to the obligatory monitoring of operational and credit risks at banking Group level; the processing of your personal data to comply with regulatory requirements is mandatory and your consent is not required.
  • to pursue a legitimate interest of Intesa Sanpaolo, Group companies or third parties where such interests do not conflict with the interests or fundamental rights and freedoms of the data subjects (Article 6.1 letter f of EU Regulation No. 679/2016), namely:
    • to ascertain responsibility in the event of hypothetical cyber-crimes against the site and for investigations in the event of any legal disputes.
    • to obtain anonymous statistical information on the use of the site and to check its correct functioning, and to measure and improve the services offered and the site.
    • to pursue any other legitimate interests. In the latter case, the Data Controller may process your Personal Data only after having informed you and ascertained that the pursuit of its own legitimate interests, or those of third parties, does not override your fundamental rights and freedoms.

In these cases, your consent is not required.

The browsing data collected through the website will remain on the servers for a period of 12 months. Personal Data may also be processed for a longer period if an act interrupting and/or suspending the statute of limitations justifies the extension of data storage.

COOKIES

Cookies are short strings of text that are sent from the site server to the site user's browser and are automatically saved on the user's computer. The text stores information that the site is able to read when it is consulted at a later date. The main purpose of these cookies is to make browsing the site more user-friendly.

Cookies can be first or third party.

First-party cookies are those that are saved directly by the website you visit. They record information such as the number of sessions or page views. Third party cookies, on the other hand, can be sent to a site other than the one you visit.

This website uses the following types of cookies:

Technical cookies 

These are used to save the user's session and to carry out other activities strictly necessary for the operation of the site. The site may also use cookies to save browsing preferences and optimise the browsing experience. These cookies include, for example, those to set the language and currency or to maintain the browsing session.

Your consent is not required for these cookies, as they are necessary for the use of the site and the provision of services.

Anonymised analytical cookies

The site uses the Analytics tool, provided by Google, which allows web analysis of user interactions and provides a series of statistics (number of visitors, average dwell time, origin, most viewed content, etc.). In order to protect our users, we have chosen to set up the anonymisation function, so as to prevent the third party from collecting individual information and processing it for its own profiling and personalised advertising purposes.

For more information you can consult the following Google Analytics link: https://support.google.com/analytics/answer/2763052?hl=it

This website functions optimally if cookies are enabled. However, you can prevent cookies from being set on your computer via your browser's configuration tools. If cookies are completely disabled, this may disable certain features of the site or prevent it from working properly altogether. Even with all cookies disabled, your browser will still store a small amount of information, which is necessary for the basic functionality of the site. You can refer to the website of the manufacturer of the browser you are using for information on how to change your cookie settings.

RIGHTS OF THE DATA SUBJECTS

The data subjects may at any time exercise the rights provided for in the Regulation, towards the Data Controller (right of access, rectification, erasure, restriction of processing, data portability, objection) by sending a specific request in writing to the email address dpo@intesasanpaolo.com or by post to Intesa Sanpaolo S.p.A., Piazza San Carlo, 156 - 10121 Turin, making explicit reference to the website www.up2stars.com.

This document constitutes the "Privacy Policy" of this website, which will be subject to updates.