INTESA Privacy Statement
This Privacy Statement is effective as of 4 Novembre 2021.
The previous version of this Statement is available here (PDF, 1284 KB ).
At In.Te.S.A. SpA (hereinafter INTESA) we recognize the importance of protecting your personal information and are committed to processing it responsibly and in compliance with applicable data protection laws in all countries in which INTESA operates.
This Privacy Statement describes INTESA’s general privacy practices that apply to personal information we collect, use and share about our clients, business partners, supplier and other organizations with which KYNDRYL has or contemplates a business relationship as well as the individuals working for them.
This Privacy Statement is supplemented by the INTESA Online Privacy Statement, which provides more information in the online context, including recruitment. We may provide additional or more specific information on the collection or use of personal information on websites or related to a specific product or service.
Why and how we collect and use your personal information
We may collect your personal information as an individual for various purposes, such as the following:
- Access and use of websites or other online services
When entering one of our websites, or using an online service, we will record information necessary to provide you with access, for the operation of the website and for us to comply with security and legal requirements in relation to operating our site, such as passwords, IP address and browser settings. We also collect information about your activities during your visit in order to personalize your website experience, such as recording your preferences and settings, and to collect statistics to help us improve and further develop our websites, products and services. - Responding to your request for information, order, or support
When you contact us (online or offline) in connection with a request for information, to order a product or service, to provide you with support, or to participate in a forum or other social computing tool, we collect information necessary to fulfill your request, to grant you access to the product or service, to provide you with support and to be able to contact you. For instance, we collect your name and contact information, details about your request and your agreement with us and the fulfillment, delivery and invoicing of your order and we may include client satisfaction survey information. We retain such information for administrative purposes, defending our rights, and in connection with our relationship with you.
When you provide your name and contact information to register in connection with such a request, the registration may serve to identify you when you visit our websites. - Your use of INTESA services
We collect information about your use of INTESA services to enable product features to operate, improve your user experience, tailor our interactions with you, inform our clients on the overall use of the services, provide support and improve and develop our products and services. For details regarding the technologies we employ, the personal information we collect, as well as how to control or block tracking or to delete cookies, please refer to the INTESA Online Privacy Statement. - Contacting employees of our clients, prospects, partners and suppliers
In our relationship with clients or prospects, partners and suppliers, they also provide us with business contact information (such as name, business contact details, position or title of their employees, contractors, advisors and authorized users) for purposes such as contract management, fulfillment, delivery of products and services, provision of support, invoicing and management of the services or the relationship. - Visitor information
We register individuals visiting our sites and locations (name, identification and business contact information) and use camera supervision for reasons of security and safety of persons and belongings, as well as for regulatory purposes. - Marketing
Most information we collect about you comes from our direct interactions with you. When you register for an event we may collect information (online or offline) in relation to the event organization, and during an event, such as participation in sessions and survey results. We combine the personal information we collect to develop aggregate analysis and business intelligence for conducting our business and for marketing purposes. You can choose to receive information by email, telephone or postal mail about our products and services. When visiting our websites or using our services we may provide you with personalized information. You can always opt-out from receiving personalized communication from INTESA by submitting an opt-out request form. For subscriptions, please follow the unsubscribe instructions provided at the bottom of each email. More information can be found in the INTESA Online Privacy Statement. We may use third-party tools and services, as external processors, wherever located, for managing marketing contacts.
Where we reference that we use your personal information in connection with a request, order, transaction or agreement (or preparing for the same), or to provide you with services that you requested (such as a website), we do this because it is necessary for the performance of an agreement with you.
Where we reference that we use your personal information in relation to marketing, improvement or development of our products or services, for reasons of safety and security, or regulatory requirements other than in connection with your agreement or request, we do this on the basis of our or a third party’s legitimate interests, or with your consent. When we collect and use your personal information subject to the EU Privacy Legislation this may have consequences for Your Rights.
Sharing of Personal Information
As a part of a global organization (Kyndryl Corporation, hereinafter “KYNDRYL”) offering a wide range of products and services, with business processes, management structures and technical systems that cross borders, INTESA has implemented global policies, along with standards and procedures, for consistent protection of personal information. As a subsidiary of a global company, we may share information about you with our subsidiaries world-wide and transfer it to countries in the world where we do business in accordance with this Privacy Statement.
Between Kyndryl controlled subsidiaries we only grant access to personal information on a need-to-know basis, necessary for the purposes for which such access is granted. In some cases, INTESA uses suppliers located in various countries to collect, use, analyze, and otherwise process personal information on its behalf.
Where appropriate, INTESA may also share your personal information with selected partners to help us provide you, or the company you work for, products or services, or to fulfill your requests, or with your consent. When selecting our suppliers and partners, we take into account their data handling processes.
Please be aware that in certain circumstances, personal information may be subject to disclosure to government agencies pursuant to judicial proceeding, court order, or legal process. We may also share your personal information to protect the rights or property of INTESA, our business partners, suppliers or clients, and others when we have reasonable grounds to believe that such rights or property have been or could be affected.
International Transfers
KYNDRYL has implemented various safeguards including:
• contractual clauses, such as those approved by the EU Commission and accepted in several other countries. You can request a copy of the EU Standard Contractual Clauses (EU SCC) by clicking Contact Us;
• the APEC Cross-Border Privacy Policy (CBPR) system which provides protection of personal information that is transferred between participating APEC economies, with respect to online information collected through Kyndryl.com.
Information Security and Accuracy
We intend to protect your personal information and to maintain its accuracy. INTESA implements reasonable physical, administrative and technical safeguards to help us protect your personal information from unauthorized access, use and disclosure. For example, we encrypt certain sensitive personal information such as credit card information when we transmit such information over the Internet. We also require that our suppliers protect such information from unauthorized access, use and disclosure.
Retention Period
We will not retain personal information longer than necessary to fulfill the purposes for which it is processed, including the security of our processing complying with legal and regulatory obligations (e.g. audit, accounting and statutory retention terms), handling disputes, and for the establishment, exercise or defense of legal claims in the countries where we do business.
Because the circumstances may vary depending on the context and the services, the information provided in INTESA Online Privacy Statement or provided in a specific notice may provide more detailed information on applicable retention terms.
How to contact us
If you have a question related to this Privacy Statement, please contact us by using this form. Your message will be forwarded to the appropriate member of INTESA’s Data Privacy Team, such as the Data Protection Officer or members of the team.
Where this is relevant, the controller of your personal information is In.Te.S.A. SpA, Strada Pianezza 289, 10151 Torino – Italia.
Your Rights
You can request to access, update, delete or correct your personal information. You also have the right to object to direct marketing. You can access the request process here.
You may have additional rights pursuant to your local law applicable to the processing. More information can be found here.
Right to Lodge a Complaint
In the event you consider our processing of your personal information not to be compliant with the applicable data protection laws, you can lodge a complaint:
- Directly with INTESA by using this form.
- With the competent data protection authority. The name and contact details of the Data Protection Authorities in the European Union can be found here.
Changes to our Privacy Statements
We may update this Privacy Statement from time to time to reflect changes to our data governance practices. The revised Privacy Statement will be posted here with an updated revision date. We encourage you to check back periodically for any changes or updates. If we make a material change to our Privacy Statement, we will post a notice at the top of this page for 30 days. By continuing to use our websites after such revision takes effect we consider that you have read and understand the changes.