Privacy policy

Loreto Mutua may collect the following data:

1.BUSINESS CONTACT:

Providing assistance for queries and contact requests received by any means, of the services of Loreto Mutua, as well as the maintenance of business relations:

• • Data collected:full name, telephone, e-mail and query.
  • Purpose: responding to requests for information that the interested party has made by any means about Loreto Mutua products and services, and to establish and maintain business
    relations.
    o Legal basis: based on the provision of consent Loreto Mutua is entitled to process the data of the interested party provided through the contact request, and in accordance with the legitimate interest for the development and maintenance of business relations.
    o Storage period: the data will be kept for the time required until the data subject requests the cancellation or deletion of their data and once deleted, they will be kept at the disposal of the public administration, judges and courts, for the legal periods established for the handling and defence of possible liabilities arising from the processing.
  •  

2.MUTUAL AND PENSION PLAN MEMBERS (CLIENTS):

Data provided for the provision of services either off-line or on-line through the private area of Loreto Mutua. Services will be identified at the time of data collection and registration.

• • Data collected: full name, ID number, contact address, postal address, e-mail address, contact telephone number and other data necessary according to the service requested, and which will be exclusively necessary for the registration and the correct provision of services by Loreto Mutua.
  • Purpose: the registration of data subjects for the provision of services (application for membership of the Mutual Society or the pension plan either via the contributing or promoter company or individually, making extraordinary contributions to the products, processing the designation of beneficiaries, application for reinstatement, affidavit of life form, application for benefits either for covered contingencies or exceptional liquidity event or early provision in accordance with the contractual documentation of each product; fulfilment of the legal obligations arising from the legal relationship) as well as establishing and maintaining business relations.
  • Legal basis: the existing legal or contractual relationship necessary for the provision of the service and the legitimate interest for the development of commercial relations.
  • Storage period: the data will be kept for the time required for its processing, and once finished, it may be made available to the public administration, judges and courts for the handling and
    defence of possible liabilities arising from the processing.
  •  

3.REGISTRATION:

To obtain a password to access the Private Area that enables the contracting and management of Loreto Mutua products and services:

• • Data collected: full name, ID number, contact address, postal address, email, contact telephone and other additional data specified in the form for collecting data for the product or service requested.
  • Purpose: registration of users for the contracting and management of Loreto Mutua products and services.
  • Legal basis: legal relationship arising out of the service contracted.
  • Storage periods: the data will be held until you request that it be erased, after which the data may be stored for six years for providing it to the government and the courts for responding to and defending legal claims arising out of the data processing.
  •  

4. SERVICES:

Data provided for the provision of Loreto Mutua's services. Services will be identified at the time of data collection and registration.

• • Data collected: full name, ID number, contact address, postal address, e-mail address, contact telephone number and other data necessary according to the service requested, and which will be exclusively necessary for the registration and the correct provision of services by Loreto Mutua.
  • Purpose: the registration of data subjects for the provision of services and to establish and maintain business relations.
  • Legal basis: the existing legal or contractual relationship necessary for the provision of the service and the legitimate interest for the development of commercial relations.
  • Storage period: the data will be kept for the time required for its processing, and once finished, it may be made available to the public administration, judges and courts for the handling and defence of possible liabilities arising from the processing.
  •  

5. PREVENTION OF MONEY LAUNDERING:

Data provided for the formal identification of the client and investigation into the Prevention of Money Laundering and Financing of Terrorism by Loreto Mutua Group companies that are considered obliged to comply with the Prevention of Money Laundering and Financing of Terrorism regulations. Services will be identified at the time of data collection and registration.

• • Data collected: full name, ID number, contact address, postal address, e-mail address, contact telephone number and other data necessary for the formal identification of the client and investigation into the Prevention of Money Laundering and Financing of Terrorism.
  • Purpose: formal identification of the client and investigation for compliance with the Prevention of Money Laundering regulations.
  • Legal basis: the existing legal or contractual relationship necessary for the provision of the service, as well as the fulfilment of a legal obligation.
  • Storage period: the data will be kept for the time required for its processing (10 years), and once finished, it may be made available to the public administration, judges and courts for the handling and defence of possible liabilities arising from the processing.
  • Communication and transfer of data: in certain services provided by any of the Loreto Group companies, with the prior acceptance of the corresponding Special Conditions of the Service, personal data identifying the user in accordance with the provisions of Law 10/2010, of 28 April, on the prevention of money laundering and the financing of terrorism or any other related applicable regulations, may be communicated between Loreto Group companies in order to comply with the current regulations on the Prevention of Money Laundering. In any case, the transfer of data that may occur will be communicated in the Special Conditions of each Service and must be accepted prior to the use of this.
  •  

6. SUPPLIERS:

Professional personal data provided by Clients/Suppliers for the provision of services and management of the legal or contractual relationship.

• • Data collected: full name, ID number, professional contact address, e-mail address, contact telephone number.
  • Purpose: managing the contractual relationship of the service.
  • Legal basis: the existing legal or contractual relationship necessary for the provision of the service.
  • Storage period: the data will be kept for the time required for its processing, and once finished, it may be made available to the public administration, judges and courts for the handling and defence of possible liabilities arising from the processing.
  •  

7. ACCESS CONTROL AND SECURITY:
Data collected by video surveillance cameras or, where appropriate, provided for access control to the buildings of any of the Loreto Mutua Group companies:

• • Data collected: full name, ID number, and images.
  • Purpose: controlling access and managing the internal security of Lotero Mutua's facilities.
  • Legal basis: legitimate interest in guaranteeing security in the facilities on the part of the owner, which justifies the recording of data in the access control, and that the images are necessarily captured when accessing these facilities.
  • Storage period: the data will be kept for a period not exceeding 30 days, unless it is necessary to keep them for a longer period due to the need to clarify any infringement or unlawful act detected, and therefore they will be kept at the disposal of the public administration, judges and courts, for the legal periods established for the attention and defence of possible liabilities arising from the processing.
  •  

8. CURRICULUM OR EMPLOYMENT:

CV submission through the website or by any other means to Loreto Mutua.

• • Data collected: professional area, full name, telephone, e-mail, CV, cover letter and any other personal data associated with the CV or professional profile.
  • Purpose: managing the data subject’s candidacy for published selection processes or for other vacancies in line with their professional profile that may arise in the future within Loreto Mutua activities.
  • Storage period: The data will be kept until you are offered a job or until you ask us to delete your data. The data will be kept for the time required for its processing, and once finished, it may be made available to the public administration, judges and courts for the handling and defence of possible liabilities arising from the processing.
  • Legal basis: provision of the data subject's consent or the implementation of pre-contractual measures at the request of the data subject.
  • Recipients: the data provided and derived from the selection process may be transferred to third-party companies identified by the interested party for the request of references that may be necessary for the selection of the candidate.
  •  

9. MARKETING OR NEWSLETTERS:

Submission of information, news, notices, reminders and promotions that may be of interest to you, related to the activities of Loreto Mutua.

• • Data collected: e-mail address, full name, telephone number, city or country. As well as user metadata produced during browsing (browser, operating system, IP, among others).
  • Purpose: registration of data subjects for information, news and promotions submission to establish and maintain business relations.
  • Legal basis: provision of the data subject's consent to Loreto Mutua to register for promotional services, and legitimate interest in the development of commercial relations.
  • Storage period: the data will be kept for the time required for its processing, and once finished, it may be made available to the public administration, judges and courts for the handling and defence of possible liabilities arising from the processing.