DISCLOSURE ON COOKIES (more information: Protection of personal data, Legal notes)

In compliance with the measure by the Italian Authority for the Protection of Personal Data (hereinafter, the “PRIVACY AUTHORITY”) dated 8 May 2014 and following n. 231 10 June 2021, on the Identification of the simplified methods for disclosure and acquisition of consent for the use of cookies (hereinafter, the “COOKIES MEASURE”), VISA S.p.a. in its capacity of owner of the Website (also "Holder") intends to inform the user as follows.

Data controller
VISA S.p.a. s.u.
Via I Maggio 55
31043 Fontanelle (TV), Italy
PH: +39 0422 5091
Mail: visa@visa.it
Website: https://www.visa.it
VAT: IT02134890264

This disclosure, pursuant to art. 13 of EU Regulation 2016/679 of 27 April 2016 concerning the protection of natural persons regarding the processing of personal data (hereinafter, “Regulation”), explains to the user how these data are collected, for what purposes and what are their rights. This document is an integral part of the disclosure on personal data processing, which may be viewed at the following link: https://www.visa.it/en/privacy-policy.

The website https://www.visa.it (hereinafter the “WEBSITE”) uses cookies in order to improve the user’s navigation experience.

WHAT ARE COOKIES?

Cookies are small text files that the websites visited by the user send directly to their terminal (usually the browser), where they are stored before being sent back to the same websites at the next visit by the same user (so-called first-party cookies). While browsing a website, the user may also receive cookies from different websites or web servers on their terminal (so-called third-party cookies). This happens because the website they visit might contain elements such as, for example, images, maps, sounds, specific links to web pages of other domains that reside on servers other than the one where the requested page is located. In other words, these cookies are set up by a website other than the one you are currently visiting.

Cookies may have a duration limited to a single browsing session on the browser (so-called session cookies), in which case they are automatically disabled when the user closes the browser; or they may have a preset expiry, in which case, they will remain stored and active in the hard disk until said expiry date, continuing to gather information during different browsing sessions on the browser (so-called permanent cookies).

Cookies are used for various functions. Some are needed to make it possible to browse the Website and use its features (so-called technical cookies). Others are used to obtain statistical information, in aggregate form and otherwise, on the number of users accessing the Website and how the Website is used (so-called monitoring or analytics cookies). Finally, still others are used to draw up a profile of the consumer and show them ads on the Website that are in line with the user’s preferences and consumption habits and therefore might be interesting for them (so-called profiling cookies).

In order to find out more about these different categories of cookies, the user must continue reading this disclosure to find out how they work and what they are used for, then freely choose whether to consent to their use or block them.

FIRST PARTY COOKIES

The Website makes use of the following types of technical first party cookies, the installation of which does not require any consent by the user but for which the Data Controller is still required to provide adequate information:

(a) Navigation or session cookies: essential to allow the user to browse normally through the Website and to properly use the related services; since they are not stored on the user's computer, they disappear when the browser is closed;

(b) “Functionality” cookies: only used to improve and speed up navigation on the Website, by storing certain choices made by the user (such as language preferences).

Therefore, they are instruments used by the Data Controller to guarantee, among other things, efficient navigation, session stability, the persistence of the login throughout the session and the selected Country. They are also used to store the choices made by the user concerning certain page items that are displayed, such as information and communication banners.

The use of technical cookies and the processing connected thereto do not require prior consent by the user, pursuant to the regulations in force.

However, that is without prejudice to the user’s option to prevent the installation of technical cookies at any time through their browser’s settings, being aware that such a choice might complicate, slow down and even block navigation of the Website.

The Data Controller should be considered as such solely in relation to the first party cookies installed on the Website.

THIRD PARTY COOKIES

During a user’s navigation on the Website, some cookies that are not directly controlled and managed by the Data Controller might be stored on the user’s device. This is the case, for instance, when the user visits a page that includes the contents of a third party website.

In this connection, please note that the Data Controller does not have any role in processing the data derived from this type of cookies, since they act as a mere technical intermediary.

Third party profiling cookies are used to display personalised ads on the Website and on other websites and their operation is based on each user’s navigation activities. This type of cookies might also be used by third parties to show their products and services on the Website.
Where the user should wish not to receive third party cookies on their terminal, they may access the disclosures and consent forms of said third parties at any time through the links provided below, and disable their reception.

Videos from Youtube (www.youtube.com) or posts from Facebook (www.facebook.com) might be published on the website. Since these contents are taken directly from the websites of origin with proprietary features of said websites (API), functional cookies required to manage the contents or other cookies not directly under the control of *.visa.it might be issued by the third party websites. In this regard, please see the specific clauses in the websites of origin:

YOUTUBE https://policies.google.com
FACEBOOK https://it-it.facebook.com/policy.php

The following table sets out all the technical cookies on the Website and their specific features.

HOW TO DISABLE COOKIES?

On the visa.it website and all related subdomains, we d not carry out any user tracking and we do not issue cookies that contain user data that may be read and used by other websites. The cookies we use are required for proper navigation and security and we do not recommend disabling them in the browser. However, since most browsers are programmed so as to accept cookies automatically, the user may choose not to receive them, especially in the cases where the third party involved has not properly provided the opt-out option, by going to the browser’s settings and disabling them, according to the procedures described at the following addresses:

Internet Explorer:
http://windows.microsoft.com/it-it/windows7/block-enable-or-allow-cookies
Mozilla Firefox:
https://support.mozilla.org/it/kb/Attivare%20e%20disattivare%20i%20cookie
Google Chrome:
https://support.google.com/accounts/answer/61416?hl=it
Safari:
https://support.apple.com/it-it/HT201265
Opera:
http://help.opera.com/Windows/10.00/it/cookies.html

We shall store the user’s preferences on cookies thanks to a specific technical cookie, the features of which are specified in the table above.

PROCESSING METHODS AND DATA RETENTION PERIOD

As highlighted in the preamble to this disclosure, the Data Controller collects and processes certain personal data of the users directly on the Webserver. The Data Controller is to be considered as such with regards to these data, in compliance with the provisions of the Regulation. The Data Controller shall process the user’s data only with electronic instruments, in a wholly automated manner and with no human intermediation. Therefore, its employees and associates shall never access the content of the user’s personal data obtained through cookies, which means that they shall never be able to access and/or gain direct identification personal information (IPI).

Some of the Data Controller’s employees and associates, appointed as authorised subjects, might perform maintenance operations on the IT systems that hold the user’s personal data, without ever being able to access their actual content. The personal data might be stored on servers managed by third parties (e.g. IT system suppliers) or might be managed by subjects specialised in online advertising, who act as external data processors on the basis of a specific appointment in writing by the Data Controller. The Data Controller informs that, in compliance with the assumptions and guarantees set forth by the Regulation, the user’s data might be transferred to Countries that do not belong to the European Economic Area (EEA), and that might not offer a level of protection of the privacy and personal data equivalent to that guaranteed by Italian and European privacy laws, but in its capacity of Data Controller it shall adopt all the adequate guarantees to assure the protection and security of the transferred data.

The user’s personal data shall not be disclosed to third data controllers nor shall they be disseminated.

The personal data of the Website users shall be stored for the time strictly required to fulfil the primary purposes illustrated in this disclosure, or however as needed to protect the rights and interests of the users as well as of the data controller.

THE USERS’ RIGHTS

In order to exercise their rights, or to obtain any further information or clarification on this Cookies Disclosure, the user may contact the Data Controller as follows:

- VISA S.p.a. s.u., at the email address visa@visa.it, or by surface mail to the address of the registered office;

Pursuant to the Regulation, the Data Controller informs that users have the right to obtain the indication (i) of the origin of the personal data; (ii) of the purposes and methods of processing; (iii) of the logic applied in the event of processing performed with the aid of electronic instruments; (iv) of the identification details of the data Controller and Processors; (v) of the recipients or categories of recipients to whom the personal data may be disclosed or who might become aware of them in their capacity of processors or authorised subjects.

Furthermore, users have the right to obtain:
a) access, update, rectification or, when interested, integration of the data;
b) erasure, transformation into anonymous form or blocking of data processed in breach of the law, including those data the retention of which is not necessary for the purposes for which they were collected or subsequently processed;
c) proof that the recipients to whom the data have been disclosed or disseminated have been made aware of the operations under letters a) and b), also regarding their content, except where such fulfilment proves impossible or involves disproportionate effort with respect to the protected right.

Furthermore, users may revoke consent at any time, where precessing is based upon their consent;
b) (where applicable) the right to data portability (right to receive all the personal data that concern them in a structured, commonly used and machine-readable format), the right to restriction of personal data processing and the right to erasure (“right to be forgotten”);
c) the right to object:
i) wholly or in part, for legitimate reasons, to the processing of the personal data concerning them, although pertinent to the purpose for which they were collected;
ii) wholly or in part, to the processing of the personal data concerning them, for the purposes of sending advertising or direct sales material or to perform market surveys or commercial communications;
d) should they believe that the processing concerning them breaches the Regulation, the right to lodge a complaint with a controlling Authority (in the member State where they reside habitually, where they work or where the alleged breach took place). The Italian controlling Authority is the Authority for the Protection of Personal Data, based in Rome (http://www.garanteprivacy.it/).

The Data Controller is not responsible for updating all the links provided in this Cookies Disclosure, therefore every time a link does not work and/or is not up-to-date, the Users recognise and accept that they shall always refer to the document and/or section of the Internet websites that the link refers to.

By continuing to navigate the website https://www.visa.it and relevant subdomains, the user consents to installation of the cookies.