The current legislation on the processing* of personal data defined in accordance with the provisions contained in the EU Regulation 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter, the ‘Regulation’) contains provisions aimed at ensuring that the processing of personal data is carried out in compliance with the fundamental rights and freedoms of natural persons, with particular regard to the right to protection of personal data.

1. Purpose of processing

1.1.The data collected will be processed by YOLO GROUP S.p.A., together with its subsidiary YOLO S.r.l. (an insurance intermediary registered with the RUI section B), Joint Data Controllers (hereinafter, ‘Joint Data Controllers’) for the purposes described below:

  • To provide the services presented on the site https://yolo-insurance.com/ managed by YOLO GROUP S.p.A.;
  • To provide the services presented on YOLO GROUP S.p.A.’s partner sites;
  • To facilitate the use of the site https://yolo-insurance.com/ in its different sections;
  • To enable the purchase of the insurance products chosen by the user on the site https://yolo-insurance.com/ and offered by YOLO S.r.l.’s partner insurance companies and expressly indicated on the site;
  • To provide the partner insurance companies of YOLO S.r.l. with the information necessary for the provision of services requested by you or agreed with you;
  • For the administrative management of relations, including commercial relations, between YOLO GROUP S.p.A. and YOLO S.r.l. and its partners;
  • To respond to comments and reports sent by customers;
  • To generally fulfil legal obligations.

For the exclusive insurance purposes of the policy, your express consent is not required, since the legal basis of the processing is the fact that the processing is necessary for the performance of a contract to which the data subject is a party, or for the performance of pre-contractual measures taken at his or her request.

Should it be necessary to handle sensitive personal data strictly inherent to the provision of insurance services and/or products, you will be asked for your specific consent at the time of collection of such data, which will be processed within the limits strictly necessary in practice, by the relevant general authorisations issued by the Garante per la protezione dei dati personali. Such data may, however, be subsequently acquired and processed by insurance companies, always within the limits in which such processing is instrumental to the specific purpose pursued by the operation or services requested.

1.2. The data collected may be processed by the Contractors, subject to the explicit and free consent of the data subject, for the following purposes:

  • Promotional activities and market/statistical research: direct marketing activities, commercial offers relating to its own products and/or services or products and services of the Companies of YOLO GROUP S.p.A., promotional activities and initiatives (e.g. events, competitions with prizes, shows, etc.), statistical research and analysis, using ‘traditional’ or ‘automated’ forms of contact (art. 130 c. 1 and 2 of Legislative Decree 196/03 and subsequent amendments and integrations);
  • Disclosure to third parties for promotional purposes: the data provided by you may be disclosed to third parties for direct marketing activities by selected business partners who may use ‘traditional’ or ‘automated’ forms of contact (art. 130 c. 1 and 2 of Legislative Decree 196/03 and subsequent amendments and additions)
  • Profiling activities, in order to identify consumer habits and propensities, process individual or group profiles, so as to increase the responsiveness of the products or services provided to the needs of Customers and send commercial communications and customised promotional offers
  • Geolocation activities for commercial purposes: personalised communication activities on the basis of position and route data collected, for example in the form of GPS signals, combined with a timestamp, and other data sent by the mobile device on which the YOLO Application is installed and activated.

We inform you that, pursuant to Article 21(2) of the Regulation, you may object at any time ‘to the processing of personal data carried out for such purposes, including profiling’ insofar as it is related to such direct marketing.

Without prejudice to the processing described above by the Data Controllers, please also refer to the privacy policies of the partners.

2. Nature of data provision

2.1. We inform you that you are free to provide or not to provide your personal data for the above-mentioned purposes. However, it is our obligation to inform you that your refusal to do so will make it impossible for us to pursue the purposes indicated in point 1.1.

3. Processing methods and data retention periods

3.1. Your data will be processed by the Companies – in their capacity as Joint Data Controllers – by means of operations or series of operations, as envisaged by current legislation. The processing will also take place with the aid of electronic or automated means and will be carried out directly by the Joint Data Controllers and by external subjects in Italy or abroad, in the manner provided for by law. Furthermore, the data may be anonymised and processed on a statistical basis to infer information instrumental to the provision of the insurance service. These parties are, in turn, committed to processing the data using only methods and procedures strictly necessary for the specific purposes indicated in this information notice and in compliance with the law. We also inform you that, within the Company, the data will be processed by employees and collaborators within the scope of their respective functions and in accordance with the instructions received, always and only for the achievement of the specific purposes indicated in this policy.

3.2 All personal data concerning you shall be kept by the Joint Data Controllers for the time strictly functional to the management of the processing purposes indicated therein. The data that do not need to be kept due to legal obligations or to the legitimate interest of the Joint Data Controllers will be deleted after the lapse of the terms connected to any conservation obligations related to legal obligations or to prescriptive terms starting from the date of termination of the needs related to the purposes indicated in this information notice.
In particular, data processed for the purposes of marketing and profiling activities will be kept for 12 months, after which time such data will be deleted/anonymised. This is without prejudice to your right, which may be exercised at any time, even before the expiry of the 12-month period, to revoke the consent previously given to the processing of your data for marketing and profiling purposes in the manner indicated in Article 10 below.
The processing of the aforesaid data is also carried out with the aid of electronic and automated means, by means of terminals and personal computers connected in a network with a central computer and, in any case, by means of instruments suitable to guarantee security and confidentiality.

4. Scope of data communication and dissemination

4.1. In pursuance of the purposes described in Section 1.1, the data may be disclosed to some of the following entities:

Service companies for the settlement of claims; service companies entrusted with the management, settlement and payment of claims, including operational assistance centres, consultancy companies for legal protection, contracted clinics; computer and telematic service or filing companies; postal service companies (for transmission, enveloping, transport and sorting of communications to customers); auditing and consultancy companies; commercial information companies for financial risks; fraud control service companies; debt collection companies;
Companies providing insurance services with which YOLO S.r.l. has stipulated/will stipulate commercial agreements (mainly insurance companies and insurance intermediaries) for the provision of the services you have requested (the updated list of insurance companies and insurance intermediaries is published on the following page https://yolo-insurance.com/site/faq-contatti/);

Companies providing cloud services and/or other IT services that YOLO GROUP S.p.A. uses;
Associative bodies (ANIA) and consortia belonging to the insurance sector;
IVASS, Ministry of Industry, Trade and Crafts, CONSAP, UCI, Supervisory Commission for Pension Funds, Ministry of Labour and Social Security and other databases with respect to which the communication of data is mandatory.
Furthermore, taking into account that the data provided, within the scope of the existing or future insurance relationship, may be used to provide the service of quoting and issuing policies, for this purpose they may be processed and compared with other legitimately available databases, adopting appropriate precautions to ensure the utmost confidentiality of the data.

4.2. In the event that you give specific and separate consent, your data may be communicated to third party companies with which the Contractors have entered into commercial collaboration relationships, such as marketing and co-marketing companies.

In this case, with your consent, these subjects – acting as autonomous data controllers, providing separate information – may use your data to send you confidential offers and proposals.

Your data will not be disclosed, made available or given for consultation in any form whatsoever to parties other than those indicated in this paragraph 4 or to unspecified parties.

5. Joint data controllers

5.1. The co-owners of the processing are YOLO GROUP S.p.A., in the person of its Legal Representative pro tempore, and YOLO S.r.l., in the person of its Legal Representative pro tempore. The co-ownership agreement may be requested by you at any time to the addresses indicated in article 10 below.

6. Data Protection Officer

6.1. The Data Controllers have appointed Ms. Manuela Bianchi as Data Protection Officer (DPO). The Data Subject may contact the DPO to request explanations regarding this Notice or to exercise his/her rights under the Data Protection Act, which are described in the following text.

The contact details are as follows:

E-mail: dpo@yolo-group.com

Phone: +39 0284070731

7. Joint data controllers, data processors and persons in charge of processing

7.1. The data provided by you may be processed by employees and collaborators of YOLO GROUP S.p.A., duly appointed as data processors by the Joint Data Controllers.

7.2. The list of joint controllers and processors is constantly updated and can be requested by sending a communication in the manner indicated in Section 10.1 below.

9. Modalities of data processing

9.1. The data may be processed by means of manual, computerised or telematic tools designed to store, manage and transmit the data.

10. Rights of the data subject

10.1. The Regulation confers on you the exercise of specific rights, including the right to request from the Data Controllers

Confirmation as to whether or not your personal data is being processed and, if so, to obtain access to it (right of access)
The rectification of inaccurate personal data, or the integration of incomplete personal data (right of rectification)
The deletion of the data if one of the grounds provided for in the Regulation applies (right to be forgotten)
The restriction of processing when one of the cases provided for in the Regulation occurs (right of limitation)
To receive in a structured, commonly used and machine-readable format the personal data you have provided to the Data Controllers and to transmit such data to another data controller (right to portability).
You also have the right to withdraw your consent to the processing of your data, at any time, without prejudice to the lawfulness of the processing based on the consent given before the revocation and to object at any time to the processing for marketing purposes (right to object).
Requests may be addressed to:

YOLO GROUP S.p.a.

Via Della Moscova, 12 – 20121 Milano (MI)
Email: dpo@yolo-group.com
Phone: +39 0284070731
Website:
www.yolo-insurance.com

YOLO S.r.l.

Via Della Moscova, 12 – 20121 Milano (MI)
Email: dpo@yolo-group.com
Phone: +39 0284070731
Website:
www.yolo-insurance.com