ADDITIONAL INFORMATION NOTICE ON THE PROCESSING AND PROTECTION OF PERSONAL DATA RELATING THE USE OF IMAGE VIA VIDEOCALL
In addition to the information notice related to the use of personal data, already provided and available by following the "Privacy" path Information notice for clients in the footer of the website Privacy, which we refer to for any further information not expressly provided herein, UniCredit S.p.A. (hereinafter also the "Bank"), as Data Controller, informs you about the processing of Your Image that may occur by activating the Videocall feature via identified chat, if you decide to initiate a conversation with a Bank assistant.
1. Data controller and data protection officer
The Data Controller is UniCredit S.p.A., with registered office in Milan, Piazza Gae Aulenti n. 3, Tower A, 20154 Milan.
You can contact the Data Protection Officer at UniCredit SpA, Data Protection Office, Piazza Gae Aulenti n. 3, Tower A, 20154 Milan; E-mail: Group.DPO@unicredit.eu; PEC: Group.DPO@pec.unicredit.eu.
2. Purpose and legal basis of processing
UniCredit processes your personal data only if the following legal basis and purpose of processing exist:
| LEGAL BASIS | PURPOSE OF PROCESSING |
Consent Processing for the purpose described here is lawful only if you have given your consent.
|
After providing specific consent, the Bank uses your image throughout the videocall you initiated via chat identified with the agent, in order to handle your support requests and/or subscription to the Bank's products/services. The provision of data for the purpose described above is not mandatory and refusal to supply it does not determine any negative consequence, except for the impossibility of using the Videocall service for the assistance requested. In any case, you can continue to talk to the agent by writing in the identified chat without activating the Videocall function described above. |
3. Categories of personal data processed
- Personal identification data (e.g., name, surname, tax code, VAT number, residential/domicile address, date and place of birth, nationality, data relating to identification documents)
- Contact details (e.g., landline/mobile phone number, email address)
- Information about financial situation (e.g., financial situation, credit information relating to credit requests/relationships)
- Voice and image data (e.g. videocall)
- Other data attributable to categories indicated above
UniCredit reminds you not to communicate and/or insert Special Data (e.g. ethnic origin, political, religious, sexual, trade union, and philosophical orientation, health status, etc.) related to you and/or third parties into identified chat, and in general, not to communicate informations that are not necessary to manage Your assistance request and/or subscription to products/service.
4. Data subject rights
GDPR grants you specific rights including:
- Withdrawal: this is the possibility to withdraw, where given, your consent to the processing of your image for the above-mentioned purposes. The consent may be withdrown by you at any time up to the activation of the chat viedocall
- Erasure: this is the possibility of the deletion of your image as specified in the following paragraph 5
5. Data retention period and right to erasure (i.e. right to be forgotten)
UniCredit processes and keeps your personal data for the entire duration of the contractual relationship, for the execution of the inherent and consequent fulfilments, for the observance of the applicable legal and regulatory obligations, as well as for its own or third-party defensive purposes and until the expiry of the applicable legal prescription period, starting from the date of the closing of the relationship.
At the end of the applicable retention period, personal data relating to Data Subject will be deleted or stored in a form that does not permit identification of the Data Subject (e.g., irreversible anonymization), and will be retained in a form that does not permit identification of th Data Subject, irreversible anonymization) , unless their further processing is necessary for one or more of the following purposes: i) resolution of pre-litigation and/or litigation initiated before the expiry of the retention period; ii) to follow up investigations/inspections by internal control functions and/or external authorities initiated before the expiry of the retention period; iii) to follow up requests from Italian and/or foreign public authorities received/notified to the Bank before the expiry of the retention period.
6. Exercise of rights
In order to exercise the rights set forth in paragraphs 4 and 5 you can apply to: UniCredit S.p.A., Claims, Via Del Lavoro no. 42, 40127 Bologna, fax +39 051.6407229, email address: diritti.privacy@unicredit.eu.
The deadline for the reply is one (1) month, witch may be extended by two (2) months in particular complex cases; in these cases, the Bank will provide at least one interim communication within one (1) month.
The exercise of the rights is, in principle, free of charge; the Bank reserves the right to charge a fee in the event of manifestly unfounded or excessive requests (including repetitive ones).
The Bank has the right to request information necessary for the identification of the data subject.
PRIVACY CONSENT TO IMAGE PROCESSING
Read and understood the above information provided by the Bank, in order to authorize the Bank to process your image through the Videocall functionality, write "I AGREE" in the identified chat or, if you do not wish to give the above consent, write "I’DO NOT AGREE". In the second case, you may still continue to chat with the agent in the identified chat without activating the Videocall functionality described above.