Privacy Policy

Legislative Decree 196/2003 ("Data protection code"). In keeping with the commitment and care that CBA devotes to the protection of your personal data, we would like to inform you of our methods, objectives and fields of communication and circulation regarding your personal data and your rights, in accordance with Article 13 of Legislative Decree 196/2003.

TYPES OF DATA PROCESSED
Browsing Data. As part of their standard functions the IT systems and software procedures that operate this website acquire some personal data, the transmission of which is implicit in the use of Internet communication protocols. This information is not collected in order to be associated to identify interested parties, but by its very nature may, through processing and association with data held by third parties, allow the users to be identified. This data category includes IP addresses or domain names from computers used to connect to the website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the state of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and platform. This information is only used in order to gather anonymous statistical information about use of the site and in order to monitor operations and is deleted immediately after it is processed. This data may be used to ascertain culpability in case of any IT crimes that damage the site, but currently, apart from this eventuality, data on web contacts is not kept for more than seven days.

COOKIES
No personal user data is acquired by the website. Cookies are not used to transmit personal information, nor are so-termed persistent cookies, in other words user tracking systems. The use of persistent session cookies (which are not permanently saved on the user's computer and vanish when the browser is closed) is strictly limited to the transmission of identifying details of the session (consisting of random numbers generated by the server), which are required for safe and efficient browsing of the website. So-termed session cookies are used on this website to avoid recourse to other IT techniques that might be potentially detrimental to user browsing privacy and do not permit the collection of identifying personal user data.

PROCESSING METHODS
Personal data is processed with authorised instruments only for the time strictly necessary to achieve the objectives for which it was gathered. Specific security measures are observed to prevent the loss of data, illegal or incorrect use and access to unauthorised persons.

DATA PROCESSING LOCATION
Data processing for the web services provided by this website takes place at the CBA offices and is only handled by the technician responsible for data processing or occasional maintenance personnel. No data obtained from the web service is communicated or circulated. DATA CONTROLLER: The Data Controller is CB'A Srl, with legal headquarters in Via S. Primo 4, Milan.

DATA SUBJECT'S RIGHTS
The subjects of the personal data are entitled at any moment to find out whether any of their personal data is being processed and its contents and origin, to verify the contents or request integration or updating or rectification (Article 7, Legislative Decree 196/2003). Under that same article, the subject has the right to request the deletion, transformation into anonymous data or blocking of any data processed in violation of the law, as well as opposing for legitimate reasons its processing in any case. All requests must be made to the Data Controller.