Personal data protection notice relating to the sanctions of Banca d'Italia

In accordance with European and national privacy legislation, notice is hereby given that Banca d'Italia, Via Nazionale 91, Rome, processes personal data, including special categories of data and data relating to criminal convictions and offences, regarding individuals involved in Banca d'Italia's sanctioning procedures.

Purposes of processing and legal basis

The processing of data is necessary to carry out sanctioning activity on the basis of national and European legislation, as referred to in Banca d'Italia's Measure of 18 December 2012, as subsequently amended, concerning 'Supervisory provisions on sanctions and administrative sanctioning procedures'.

Processing methods

Data are processed electronically, employing appropriate security measures to ensure the confidentiality of the personal data and to prevent unauthorized access to said data by third parties or unauthorized personnel.

Authorized recipients

Collected data may be disclosed to third parties as provided for by law or regulation, such as the European Central Bank and other supervisory and resolution authorities, foreign financial intelligence units, administrative authorities (including foreign ones), judicial authorities and investigative authorities, as well as the "Organismi" established under sector-specific legislation.

Retention period

Personal data shall be retained for the time necessary to achieve the purposes for which they are collected, as well as for the pursuit of further purposes that are compatible with those initial ones, insofar as they are connected thereto, such as archiving purposes in the public interest.

Data subject rights

Data subjects may exercise their rights under Articles 15 to 22 of Regulation (EU) 2016/679, without prejudice to Article 2-undecies of Legislative Decree 196/2003, by requesting access to their personal data and the rectification or erasure thereof, or the restriction of processing said data, by contacting the Data Controller - Servizio Organizzazione, Via Nazionale 91, 00184 Rome, e‑mail: org.privacy@bancaditalia.it - or Banca d'Italia's Data Protection Officer, who may be contacted at Via Nazionale 91, 00184 Rome, or at the following e‑mail address: responsabile.protezione.dati@bancaditalia.it.

Data subjects who consider that the processing of their personal data infringes the law may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).