Home » Privacy Policy

Privacy Policy

This privacy policy describes how CA Auto Bank S.p.A.,Irish Branch, the Irish branch of CA Auto Bank SpA – (hereinafter: “CA Auto Bank”), collects and processes personal data, taking into account applicable legislation.
Personal data includes any information relating to an identified or identifiable natural person.
This is information that can reasonably be traced back to an individual.

1. DATA CONTROLLER

CA Auto Bank S.p.A., Irish Branch, 15/16, Holly Avenue, Stillorgan Industrial Park, Stillorgan Co Dublin A94 XA72 Ireland, the Irish Branch of CA Auto Bank SpA, Corso Orbassano 367, Turin, Italy, is the controller of personal data.

2. TYPE OF DATA PROCESSED

2.1) Browsing data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses, type of browser, operating system, domain name and addresses of websites from which access or exit was made, information on the pages visited by users within the site, access time, time spent on a single page, internal path analysis and other parameters relating to the operating system and the user’s IT environment. Such technical/IT data are collected and used in an aggregate and anonymous manner for the sole purpose of:

  • improve the quality of service and optimize the functionality of the site;
  • understand user behavior in order to improve online communication;
  • prepare statistical information concerning the use of the site. This data may also be used:
  • to ascertain responsibility in the event of hypothetical computer crimes against the site and for investigations in the event of any disputes. The provision of the data described above is necessary for browsing the website, and any refusal to provide them will make it impossible to carry out this activity. The data provided will be processed for the time necessary to carry out the operations described here.

3. RECIPIENTS OF PERSONAL DATA

For the purposes described here, the Owner may communicate your data, always in compliance with the rights and guarantees provided by current legislation, to subjects who carry out maintenance and management activities of the site. Where required, the subjects indicated will be adequately appointed as Data Processors in the forms required by current legislation.

4. METHODS OF PROCESSING

The data processing is carried out using automated methods for the time strictly necessary to achieve the purposes for which the data is collected, in compliance with current regulations on the matter. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access. The provision of personal data by minors under 16 years of age is also expressly prohibited.

5. RIGHTS THAT CAN BE EXERCISED

In relation to the processing of personal data listed above, you may request:

  • confirmation as to whether or not personal data concerning you is being processed and, where that is the case, to obtain access to the personal data as well as the origin of such data, the purposes, methods of processing and the logic applied in the event of processing carried out with the aid of electronic instruments;
  • the updating, integration, rectification, cancellation or transformation into anonymous form of personal data concerning you;
  • to limit or oppose the processing of personal data concerning you;
  • to receive in a structured, commonly used and machine-readable format, the personal data concerning you or to transmit them to another data controller (so-called right to portability);
  •  certification that the requested operations have been brought to the attention of those to whom the data has been communicated or disclosed.

You may exercise your rights by contacting the following address:

The Data Controller will respond to your requests within 30 (thirty) days of receiving them, unless extended by 60 (sixty) days, taking into account their complexity and number; after the above-mentioned terms, you have the right to lodge a complaint with the Personal Data Protection Authority in the forms and ways provided for by current legislation.
The Owner may make changes to this policy and it is the user’s responsibility to check it regularly.

6. TRANSFER OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA

Your data will not be transferred by us to a third country outside the EU or to an international organization, except in exceptional and strictly necessary cases. If necessary, for technical or operational reasons, the same data may be processed in countries outside the European Union, provided that an adequate level of protection is guaranteed, for which there is a specific adequacy decision by the European Commission. Any transfers of your personal data to non-EU countries, in the absence of an adequacy decision by the European Commission, will be possible only if adequate contractual or pact guarantees are provided by the Data Controllers and Processors involved, including standard contractual clauses for data protection, or for brevity “SCC”.

CA Auto Bank may make changes to this policy and it is your responsibility to review it regularly.