Information on the processing of personal data through the website

1. Information about the data controller and contact details 

This Website is managed by Prelios società di gestione del risparmio S.P.A., Via Valtellina 15/17 - 20159 Milano (MI).
VAT number: 13465930157
Phone: +39
Certified E-mail:
Economic and Administrative Index (REA): MI - 1654303

hereinafter referred to as “Data Controller”.

The Data Controller resides in Italy, and therefore no representative has been appointed.

2. Contact details of the Data Protection Officer

The Data Controller has not appointed a data protection officer.

3. Processing method

3.1 Cookies and environmental data

3.1.1 Technical cookies

3.1.2 Non-technical cookies

Delete and disable cookies

Because cookies are normal text files, they may be accessed with a word processor.
You may set your browser preferences to turn off cookies.

Delete/disable cookies with Firefox:

Delete/disable cookies with Edge:

Delete/disable cookies with Chrome:


3.2 Data provided voluntarily by the data subject

The data the data subject provides optionally and freely when it sends an e-mail to the addresses on the website may be obtained for the purposes specified. Besides the email address which is required to reply to the sender, any other personal data contained in the message will be processed.

The data collected will be stored and processed only to file the message and will not be used for any other purpose.

4. Purpose and legal basis of processing

As regards the technical cookies specified by point 3.1.1 and browsing data, the personal data of the data subject are processed to ensure the proper use of the website; the use of the data is necessary for contractual purposes in order to make the website available in accordance with the relevant terms and conditions. In the latter case, the legal basis of processing is the need to comply with the provisions of the contract to which the data subject is party.

As regards the non-technical cookies, specified by point 3.1.1., the processing of personal data carried out through them ensures a personalised browsing experience through profiling. In the latter case, the legal basis of processing is the data subject’s consent.

As regards the data provided voluntarily by email, the processing of personal data carried out makes it possible to reply to the requests of the data subjects. The legal basis of processing is the legitimate interest of the Data Controller to reply to data subjects.

5. How to express consent

Consent to the processing of personal data using non-technical cookies may be given:

6. Source of the personal data 

Only data provided by the data subject in accordance with this policy, obtained through the website or sent by the data subject by email, will be processed. Data from sources available to the public will not be processed.

7. Recipients and categories of recipients of personal data

The data subject’s personal data may be sent to the following recipients:

8. Categories of data

The personal data of the data subject will be processed. No special data will be processed.

9. Transfer of data

The Data Controller intends to transfer the personal data to a third country or an international organisation. The above may include for example:

The transfer of personal data to these subjects, if these are established in a Third Country or an international organization, is carried out in the presence of an adequacy decision of the European Commission, which has verified how the Third Country, region or one or more specific sectors in the third country, or the international organization in question guarantees an adequate level of protection of the data subject's rights.  In any case, the Data Controller - if it deems this to be appropriate - reserves the right to conclude specific separate agreements which oblige such subjects to adopt adequate security measures, including organisational measures, aimed at providing appropriate guarantees regarding the data subject's rights. Google Inc., in particular, is required by contract to ensure adequate protection of the data subject’s rights. The data may thus be transferred to the following countries: United States of America. To obtain a copy of this data or the place where the data have been made available, simply send a request to the email address indicated.

10. Period of retention of personal data 

The personal data processed and retained for the purposes specified by this policy are processed and retained for a period not exceeding 12 months from the date they are obtained;

The Data Controller in any case reserves the right to ask the data subject to renew his/her consent to processing and/or to check consent already given.

11. Optionality of giving consent and consequences of refusing consent

As regards the personal data processed, in order to ensure proper use of the website, providing your personal data is a contractual obligation in the case of technical cookies, given that they are essential to ensure the proper functioning of the website, but is optional in the case of non-technical cookies. In the latter case, failure to provide your personal data only means that it will not be possible to provide a personalised service.

As regards data voluntarily provided by email, the processing of personal data is not a contractual obligation, but is based on the Data Controller’s legitimate interest to reply to the data subjects; without such processing it would not be possible to reply to the requests of the data subject.

12.Rights of the data subject

12.1 Right to object

The data subject, as an interested party, has the right to object, at any time on grounds relating to his/her particular situation,  to the processing of personal data concerning him or her, pursuant to point (e) or (f) of Article 6(1) of the GDPR, including profiling based on those provisions. The Data Controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

12.2 Other rights

The Data Controller also informs the data subject that it has the following rights:

13. Exercising your Rights

Requests to exercise the rights indicated by this policy, including, the right to erasure and the right to withdraw consent given, should be addressed directly to the Data Controller at the email address provided. Alternatively, you may exercise your rights by sending a registered letter with return receipt to the address of the Data Controller

Specific notes on contents, texts and images

All graphic documentation and texts are shown for illustrative purposes only and are not intended to be relied upon for, nor to form part of, any contract.

back to the site