This Privacy Policy transparently describes the policies and practices adopted by PRESTIVANA S.p.A. with regard to the collection, use, storage, protection, and transfer of personal data provided by users through the web platform, the mobile app, or authorized credit brokerage channels.
All processing operations are carried out in accordance with the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality, pursuant to Article 5 of the GDPR.
Data Controller and DPO
The data controller for the personal data collected in connection with credit brokerage, consulting, and preliminary simulations is:
Tax ID and VAT Number: 09876543210
R.E.A. Milan: MI - 2589631
OAM Registration: No. M492
Categories of Personal Data Processed
Depending on the type of loan being simulated or applied for (Personal Loans, Auto Loans, or Home Loans), PRESTIVANA collects and processes only the following categories of data:
Identifying and Personal Information
First name, last name, tax identification number, date and place of birth, residence and domicile, citizenship, details of a valid identification document, and health insurance card.
Financial, Income, and Balance Sheet Data
Employment status, length of service, recent pay stubs, Unico/CUD forms, bank statements, IBAN information, current financial obligations, and repayment history through Credit Information Systems (SIC).
Technical Data on Navigation and Authentication
IP addresses, unique device identifiers, browser user-agent strings, request timestamps, technical session cookies, and aggregated interaction metrics related to the use of the financial simulator.
Special Categories of Data (pursuant to Article 9 of the GDPR): PRESTIVANA does not request or process health data, biometric data, religious beliefs, or union membership information, except to the extent strictly necessary for the underwriting of optional supplementary policies (CPI) or salary-assignment loans, and only with prior explicit consent.
Purposes and Legal Bases for Data Processing
Every data processing activity carried out by PRESTIVANA is based on a solid legal foundation. The table below clearly summarizes the purpose, legal basis, and nature of the data provision:
| Purpose of the Processing | Legal Basis (GDPR) | Nature of the Contribution |
|---|---|---|
| Installment Calculator, Online Quotes, and Preliminary Credit Eligibility Check | Implementation of pre-contractual measures taken at the request of the data subject (Art. 6, para. 1, subparagraph b) | Required for the service |
| Practical review of financing applications; submission to participating lending institutions | Performance of the Credit Brokerage Agreement (Art. 6, para. 1, subpar. b) | Required for payment |
| Anti-money laundering (KYC) requirements, anti-fraud checks, and supervisory reports to the OAM and the Bank of Italy | Compliance with a legal obligation to which the Data Controller is subject (Art. 6, para. 1, subpar. c; Legislative Decree 231/2007) | Legal Requirement |
| IT Infrastructure Security, Cyberattack Prevention, and Business Continuity | Legitimate interest of the Data Controller in safeguarding systems and confidentiality (Art. 6, para. 1, subpar. f) | Automatic |
| Promotional communications about new preferential rates, newsletters, and satisfaction surveys | Free, specific, and revocable consent at any time (Art. 6, para. 1, subpar. a) | Optional |