WORDS book

Please enter your details in order to download your copy of the book.
If you need more information or assistance, email marketing@mediobanca.com.

Information required pursuant to Article 13 of Regulation (EU) 2016/679 and the national regulations in force on personal data protection In accordance with Regulation (EU) 2016/679 (the “GDPR Regulation”, or the “GDPR”) and the national regulations currently in force on the protection of personal data (jointly with the GDPR, the “Data Privacy Regulations”), Mediobanca – Banca di Credito Finanziario S.p.A., with registered office at Piazzetta Enrico Cuccia 1, Milan, Italy (the “Controller”, or “Mediobanca”), in its capacity of Data Controller, is required to provide an information notice on the use of personal data. The personal data held by the Data Controller are collected directly from the data subjects themselves through the latter completing the newsletter subscription form. a) Purposes of data processing and mandatory data provision All personal data shall be processed, in accordance with the provisions of the law and any confidentiality obligations in force, for purposes strictly related and functional to the sending of the regular newsletter by email containing news, press releases, and events relating to Mediobanca. The provision of personal data for such purposes is optional, hence failure to provide it does not entail any negative consequences apart from the fact of being unable to receive the regular newsletter. b) Legal ground The legal ground for the data processing is consent, which may be freely given or withheld and which may be withdrawn at any time, by clicking on the “Unsubscribe” link underneath the regular newsletter received via email or by the means referred to in point f) hereunder. c) Means of processing Your personal data will be processed in accordance with the provisions of the Data Privacy Regulations, using paper-based, computer or electronic instruments, according to criteria closely linked to the purpose stated, and, without prejudice to the foregoing, by such means as to guarantee security and confidentiality in compliance with the Data Privacy Regulations. d) Communication and disclosure of data In order to achieve the purposes listed under the foregoing letter a), your personal data will be visible to the employees of Mediobanca who shall operate as persons appointed/authorized to process the data. Furthermore, your data may also be disclosed to other parties used by Mediobanca, for various reasons, in order to provide the service requested, and to parties that provide services in connection with the management of the Mediobanca information system. Your personal data may be transmitted outside the European Union only pursuant to a decision by the European Commission or in the presence of other guarantees as provided by the Data Privacy Regulations (including binding corporate regulations and standard contractual clauses governing the transfer of personal data to third countries). Personal data processed by the Bank is not published. e) Data retention In accordance with the principles of proportionality and necessity, personal data will be stored in a form that allows the data subject to be identified for a period of time not exceeding the fulfilment of the purposes for which the personal data were processed, therefore taking into account: • The need to continue to retain personal data collected for the purpose of offering the services agreed with the user; • The existence of specific regulatory obligations (e.g. the Italian Civil Code, anti-money-laundering regulations, investment services regulations, tax monitoring laws, etc.) or contractual obligations that require data processing and retention for specific periods of time. Mediobanca shall adopt reasonable measures to ensure that any inaccurate personal data is amended or deleted. f) Rights of the data subject Data subjects are entitled at any time to obtain confirmation of the existence or otherwise of such data and to know its content and origin, to check its accuracy or ask for it to be supplemented, updated or rectified (cf. Articles 15 and 16 of the GDPR). Furthermore, Data Subjects are entitled to request that their data be erased, its processing limited, withdraw consent, request data portability and make complaints to the regulatory authority or oppose the processing of their data for legitimate reasons (cf. Articles 17ff of the GDPR). Such rights may be exercised by sending notice in writing to the following email address: privacy@mediobanca.com. Mediobanca, inter alia through the appointed units, shall take steps to deal with your request and provide you with information regarding the action taken in response to your request without undue delay. g) Data Controller and Data Protection Officer The Controller for the data processing is Mediobanca – Banca di Credito Finanziario S.p.A., with registered office in Piazzetta Enrico Cuccia 1, Milan, Italy. Mediobanca has appointed a Data Protection Officer who may be contacted at the following email addresses: • DPO.mediobanca@mediobanca.com • dpomediobanca@pec.mediobanca.com MEDIOBANCA – BANCA DI CREDITO FINANZIARIO S.P.A.

I declare that I have read and understood the privacy policy

send