Contatti

Information Notice in accordance with articles 13 and 14 of Regulation (EU) 2016/679 and current national legislation on personal data protection 

In accordance with Regulation EU 2016/679 (hereinafter the “GDP Regulation” or the “GDPR”) and current national legislation in force on the protection of personal data (hereinafter, together with the GDPR, the “Privacy Legislation”), MBFACTA S.p.A., with registered office in Milan, at via Siusi 7 (hereinafter “MBFACTA” or the “Financial Intermediary”), as data controller pursuant to the Privacy Legislation (hereinafter, “Data Controller”), is required to provide an Information notice on the use of personal data. 

The personal data held by MBFACTA is generally collected directly from the data subject and may occasionally be supplied by third parties (e.g. head hunters, personnel search and selection companies, employment agencies). 

a) Purposes and methods of the processing 

Your data will be processed by MBFACTA for purposes connected with or instrumental to the search and selection of candidates and to proceed to the verification of conditions for hiring, taking into account the internal procedures of MBFACTA. 

The legal basis for processing is the need to carry out the precontractual measures adopted at the request of the data subject, in view of the potential subsequent stipulation of a contract of employment and/or collaboration as well as, again at the request of the Data Subject, for any special categories of personal data. Data is processed using manual, computer and telematic tools, with logics that are strictly linked to the purposes specified. Processing shall in any case take place in such a way as to guarantee the security and confidential nature of said data, in compliance with the provisions of current legislation. 

b) Legal basis 

The legal basis for the data processing lies in the fulfilment of precontractual obligations adopted at the request of the data subject as well as, again at the request of the Data Subject, for any special categories of personal data. 

c) Disclosure and dissemination of data 

This data will not be disseminated and may be disclosed, if applicable, to other Mediobanca Group companies for the purpose of staff selection and to external companies collaborating with the Mediobanca Group to supply processing, instrumental or support services to the management of candidates. 

Authorised Processors/Officers of MBFACTA and other Mediobanca Group companies may also become aware (of all or part) of your data, where appointed to pursue the above-described purposes. 

d) Categories of data processed 

In connection with the above purposes, MBFACTA processes your personal data such as contact and photographic data. 

e) Data retention 

In compliance with principles of proportionality and need, personal data will be kept in a manner that enables the data subjects to be identified for no longer than the period necessary for the purpose for which it was processed, or rather considering: 

• the need to continue to store the personal data collected for purposes strictly connected with and instrumental to the examination of applications received and the potential staff selection process or to protect the legitimate interests of the Controller, as described in the above purposes; 
• the existence of specific regulatory (codes, money laundering legislation, investment services legislation, tax monitoring legislation, etc.) or contractual obligations making the processing and storage of data necessary for specific periods of time.

f) Compulsory nature of data conferral 

Conferral of the data is compulsory in order to pursue the above purposes; therefore, any refusal to supply your data may prevent MBFACTA from carrying out the search and selection and will prevent your application from being considered. 

g) Rights of the data subject 

Data subjects shall have the right to obtain confirmation from the controller at any time as to whether or not personal data concerning them are being processed, and to know the relative content and source, verify that they are correct or request that they be supplemented or updated or amended (articles 15 and 16 of the GDPR). 

Moreover, data subjects shall have the right to request erasure, the restriction of processing, revocation of consent, data portability and to complain to the supervisory authority and object, in any case, on legitimate grounds, to their processing (articles 17 et seq. of the GDPR). 

These rights can be exercised by sending a written communication to MBFACTA S.p.A. at its registered office at via Siusi 7, 20132 Milan or to the email address privacy@mbfacta.it 

The Data Controller, directly or through designated facilities, shall process your request and provide you without undue delay with full information on the action taken in respect of your request. 

h) Data Controller and Data Protection Officer 

The Data Controller is MBFACTA S.p.A., with registered office in Milan, at via Siusi 7.
MBFACTA has appointed a Data 

Protection Officer.
The Data Protection Officer can be contacted at the following email addresses: 

• DPO.mediobanca@mediobanca.com.

dpomediobanca@pec.mediobanca.com