Privacy Statement for activities relating to limited-use payment instruments

In accordance with EU and national legislation on privacy, please note that Banca d'Italia, Via Nazionale 91, Rome, processes personal data referring to the contact persons of issuers of limited-use payment instruments, collected in connection with the verification of compliance with the exemption requirements laid down in Article 2 (2) (m) and (n) of Legislative Decree 11/2010.

Processing purposes and legal basis

Personal data are processed for the purposes of promoting and monitoring the smooth functioning of the payment system. Processing is necessary for handling information relating to the verification of compliance with the aforementioned exemption requirements. Banca d'Italia processes personal data pursuant to Legislative Decree 11/2010.

Means of processing

The data shall be processed electronically using appropriate security measures to ensure their confidentiality and prevent unlawful access by unauthorized third parties or personnel.

Storage of data

Personal data collected will be stored only for so long as the issuer remains registered in the list of companies or the data subject continues to be the contact person of the issuer.

Disclosure of data to third parties

The data collected shall not be disclosed or disseminated to third parties.

Persons authorized to process personal data

Personal data may be processed by authorized personnel, in accordance with Article 29 of the General Data Protection Regulation and Article 2-quaterdecies of the Italian Privacy Code.

The Retail Payment Instruments and Services Directorate is responsible for processing the data.

Rights of the data subject

Data subjects have the right to access their personal data and any and all rights recognized by law, including the right to obtain the rectification, completion, erasure and anonymization of personal data, as well as the right to object, on legitimate grounds, to the processing, in whole or in part, of such data or to request processing restrictions. Data subjects may exercise such rights by contacting the Data Controller - Banca d'Italia - Organization Directorate - Via Nazionale 91, 00184 Rome, email: org.privacy@bancaditalia.it.

Should data subjects deem that their data have been handled in breach of the law, they can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

Data Protection Officer

The Data Protection Officer for Banca d'Italia can be contacted at Via Nazionale 91, 00184, Rome, or at the following email address: responsabile.protezione.dati@bancaditalia.it.