When you use our services, you agree that our company collects some of your personal data. This page is intended to explain what data we collect, why, and how we use it.
We process two types of data:
- Data provided by the user
- Data we collect automatically
Data provided by the use
If you are an individual or a legal entity:
If you are an individual, or when you use our Quote Calculator, fill out our forms, or register in the reserved area, we ask you to provide some data necessary to use our service.
These include, for example, the following data:
- Name or company name
- Date of birth
- Gender
- City or municipality of reference
- Phone number
- Address, email
- Other data related to the product you are interested in (for example, if you want to calculate a quote for Professional Insurance, we ask for the revenue of the previous year and a forecast for the current year).
Third-party data
If you provide personal data of third parties, such as family members or friends, you must ensure that they have been properly informed and have consented to the relevant processing in the manner described in this notice.
Data of minors under 18
If you are under 18, you cannot provide any personal data to us nor register on ConvieneOnline.it, AssicurazioniRc.it, and AssicurazioniMutuo.com, and in any case, we do not assume any responsibility for false declarations provided by you. If we become aware of untrue statements, we will immediately delete any acquired personal data.
Data we collect automatically
We collect the following data through the services you use:
- Technical data: for example, IP address, browser type, computer information, and data relating to the current (approximate) location of the device you are using;
- Data collected using cookies or similar technologies: for more information, please visit the “Cookies” section (see below).
HOW DO WE USE THE DATA WE COLLECT?
We use the collected data to offer you our service every day, inform you about our commercial activities, or offer you a more personalized service aligned with your interests.
To ensure access to our services and improve their delivery
We use your data, even without your express consent (Art. 6 letters b) - e) of GDPR), to ensure access to our services and for the following service purposes:
- For sales purposes, thus for purposes strictly related and instrumental to the establishment, management, and execution of contractual relationships by the Controller;
- For preliminary activities (such as drafting quotes and identifying the "target market") or instrumental to the above (such as registering, organizing, and storing data collected for the treatments in question);
- For the exercise and defense of the Controller's rights and for purposes arising from regulatory obligations, to which the Controller is bound by law or regulation (e.g., anti-fraud activities, insurance supervision on claims, etc.);
- For communication to other subjects in the distribution chain and for processing and transfer abroad, including outside the EU, exclusively for the above purposes and for purposes arising from legal obligations.
These processes are necessary to correctly deliver the services of ConvieneOnline, AssicurazioniRc.it, and AssicurazioniMutuo.com to users who adhere to them.
To inform you about our commercial activities
In particular, we use the data for marketing purposes (via activities carried out through personal interviews, questionnaires, postal mail, phone—including mobile—via operator, or through automated calling systems, email, fax, MMS or SMS messages, or other types) aimed at improving or promoting the Controller's products/services, such as:
- Sending advertising material;
- Direct sales;
- Conducting market research;
- Commercial communication.
To offer you a personalized service
We process the collected data, if you have expressly given us consent, to analyze your habits or consumption choices to offer you an increasingly personalized service aligned with your interests and to improve our commercial offerings. These analyses are not in any case linked to an automated decision-making process.
In particular, we use them for the Controller's profiling purposes to prepare and send personalized marketing offers and communications through activities carried out via personal interviews, questionnaires, postal mail, phone—including mobile—via operator, and automated calling systems, email, fax, MMS or SMS messages, or other means, even using other companies—usually designated as Processors—and other companies like Heca Unipersonale S.r.l., with which there are specific agreements to provide services, also designated as Processors.
IS PROVIDING DATA MANDATORY?
Providing personal data is mandatory only for processing necessary for the provision of services offered by Menev.it (any refusal for service provision purposes (see point 1.1) makes it impossible to use the service itself); it is optional for promotional purposes (see point 1.2) and profiling (see point 1.3), and any refusal to give consent does not negatively affect the provision of the service offered on the website www.menev.it and related applications.
WHO ARE THE DATA PROCESSORS?
The Data Controller is Heca Unipersonale S.r.l. of Masciangelo Giuseppina, with registered office at Via Roma, 42/B 66026 Ortona (CH) - VAT no. 02505870697.
The Controller uses processors to achieve the purposes specified in point 1 and a Data Protection Officer (DPO) to oversee the protection of personal data. For any request regarding your personal data, please refer to point 3.2 below.
Data Protection Officer (DPO) and contact information
The designated Data Protection Officer (DPO) pursuant to Art. 37 of the GDPR is Dr. Emmanuele Menicucci.
Please remember that you can contact the DPO at any time and send any questions or requests regarding your personal data and privacy by writing to privacy@menev.it.
HOW CAN YOU ACCESS, MODIFY, DELETE, OR OBTAIN A COPY OF YOUR DATA?
Access to personal data from your reserved area and revocation of consent (opt-out)
You can view or modify your personal data by contacting us via email at privacy@menev.it.
Data export and deletion
To export your personal data or request its deletion, you can send a request to the email address privacy@menev.it.
Your personal data will be exported within 30 days or, if the export is particularly complex, within three months.
The deletion will be carried out within the technical time limits provided and in accordance with the retention period specified in point 5 below.
Exercise of your rights
Any natural person using our service can:
- Obtain from the Controller, at any time, information regarding the existence of their personal data, the origin of such data, the purposes and methods of processing, and, if present, access personal data and the information referred to in Article 15 of the GDPR;
- Request the updating, rectification, integration, deletion, or restriction of the processing of data when one of the conditions provided for in Article 18 of the GDPR is met;
- Object, in whole or in part, on legitimate grounds, to the processing of data, even if pertinent to the purpose of collection, and to the processing of personal data for commercial information purposes or for sending advertising material, direct sales, conducting market research, or commercial communication. Each user also has the right to withdraw consent at any time without affecting the lawfulness of the processing based on consent before its withdrawal.
- File a complaint with the Italian Data Protection Authority.
Please remember that for any questions or requests regarding your personal data and privacy, you can write to the dedicated email address privacy@menev.it.
HOW AND FOR HOW LONG WILL YOUR DATA BE STORED?
Personal data will be stored in paper and/or electronic/computer form for the time strictly necessary to fulfill the purposes outlined in point 1, in compliance with your privacy and current regulations.
The Controller will process personal data for the time necessary to fulfill the purposes mentioned above, even beyond the termination of the relationship, if necessary to comply with the service purposes outlined in point 1.1, and in any case, for no more than 20 years after the termination of the relationship for the service purposes specified in paragraph 1.1.
For direct marketing and profiling purposes, we retain your data for a maximum period provided by applicable regulations (respectively 24 and 12 months).
In the case of exercising the right to be forgotten through an express request for the deletion of personal data processed by the Controller, please note that such data will be retained, in a protected and restricted-access form, solely for crime detection and prosecution purposes, for no more than 12 months from the request date and will subsequently be securely deleted or irreversibly anonymized.
Finally, please note that for the same purposes, data related to telematic traffic, excluding the contents of communications, will be retained for no more than six years from the date of communication, pursuant to Article 24 of Law no. 167/2017, which implemented EU Directive 2017/541 on anti-terrorism.
HOW DO WE ENSURE THE PROTECTION OF YOUR DATA?
Data is collected by the subjects indicated in point 3, following the relevant legislation, with particular regard to the security measures provided by GDPR (Art. 32) for processing through IT, manual, and automated tools, with logic strictly related to the purposes indicated in point 1 and in any case in a way that ensures the security and confidentiality of the data itself.