Privacy Policy: Receive money securely through BANCOMAT Pay

‍

Dear User,

BANCOMAT Pay is a service provided by BANCOMAT S.p.A. (”ATM”) in favor of banks participating in the payment circuits managed by the same, which allow payments to be made to affiliated merchants and money transfers between individuals. In addition, users enrolled in the BANCOMAT Pay service (”Service”) may also have a money transfer to a beneficiary not registered with the same. In this case, BANCOMAT will process the latter's personal data for the sole purpose of allowing the latter to accept the money transfer arranged in its favor.

Therefore, read this communication because the sender of the message you received would like to send you money through the Service described above.

Pursuant to art. 13 and 14 of the General Regulation 2016/679/EU on data protection (”GDPR”) — and in accordance with current legislation relating to the processing of pro tempore personal data, including Legislative Decree no. 196/2003, as amended by Legislative Decree no. 101/2018 (collectively with the GDPR,”Privacy Policy”) — we would like to provide you with the appropriate information about the processing carried out by BANCOMAT, as the data controller, as part of the money transfer transaction of which you are an interested party.

‍

In particular, we will process the following personal data relating to you (”Data”): mobile number, first name, last name and IBAN. Specifically, the mobile phone number is communicated to BANCOMAT by the registered user who has ordered the payment in your favor, while the other data mentioned above will be processed only after your spontaneous communication. The Data communicated will be acquired by the computer systems responsible for providing the BANCOMAT Pay Service for the sole purpose, without prejudice to any storage imposed by the legal obligations incumbent on BANCOMAT S.p.A., to allow it to accept and collect the money arranged in its favor and will be communicated to the Bank of the sender who ordered the payment so that this operation can be completed correctly.

In any case, the Data will be processed by specially authorized and specifically trained personnel exclusively for the pursuit of the purposes indicated above and through the use of automated and non-automated tools, ensuring the adoption of technical and organizational measures aimed at preventing any security breaches that may result in their destruction, loss, modification, unauthorized disclosure or illegal access.

The legal basis for this processing consists of being the same as necessary for the execution of a contract to which you become a party (ex art. 6, paragraph 1, letter b of the GDPR) and that it is the necessary processing to comply with the legal obligations to which BANCOMAT is subject as the data controller (ex art. 6, paragraph 1, letter c of the GDPR).

The provision of the data indicated above is optional but necessary to collect the sums of money arranged in your favor; therefore, the refusal to provide them prevents the collection of the money itself, which will remain in the availability of the sender.

In order to accept the transfer in your favor, you must carry out a one-time operation to be carried out using the link received via SMS (https://bcmt.it/bpay) linked to the web page prepared for the execution of the operation itself. On this point, it should be noted that:

• You can activate the functionality”One Shot Enrollment” - Collect Money and, therefore, be able to accept the transfer arranged in your favor, only after entering your telephone number to verify your actual possession and having accepted terms and conditions related to the aforementioned functionality;
• the use of the functionality must be made within 30 days;
• this transaction will be independent of your Bank's membership in the circuits managed by BANCOMAT;
• the transfer can be completed only after entering your data (telephone number, first name, last name and IBAN), acceptance of terms and conditions relating to the above-mentioned functionality and confirmation of the transaction;
• your name and surname will be visible to the sender who ordered the transfer in your favor upon confirmation of the successful completion of the transaction, so that the sender can have correct and transparent reporting of the transactions carried out;
• the data you provide will be used for the sole purpose of following up on the transfer authorized by you and to allow BANCOMAT to carry out the consequent obligations.

Alternatively, if your Bank subscribes to the BANCOMAT Pay Service, you may decide to subscribe to the Service itself by signing the appropriate forms in the manner provided by the Bank itself. BANCOMAT Pay can be used through a special app that, if not integrated into the member bank's app, is made available by BANCOMAT (”Circuit app” or simply”app”) and downloadable from the appropriate online stores accessible via mobile devices (for example: iOS App Store, Google Play Android).

For any further information related to the BANCOMAT Pay Service and to consult the dedicated privacy policy, please visit the site www.bancomat.it.

You reserve the right to exercise at any time, free of charge and without formalities, the rights referred to in articles 15 to 20 of the GDPR, including, in particular, the right to request access to personal data, the correction or cancellation of the same, the limitation of processing, as well as the right to data portability. Requests relating to the exercise of the rights described above should be addressed to BANCOMAT at the address of the registered office, located in Piazzale Luigi Sturzo n.15, CAP 00144, Rome, or to the following e-mail address: privacy@bancomat.it. In response to these requests, the Data Protection Officer (“DPO”) appointed by BANCOMAT pursuant to articles 37 et seq. of the GDPR is appointed by the Data Protection Officer (“DPO”) appointed by BANCOMAT in accordance with articles 37 et seq. of the GDPR.

Finally, if interested parties believe that the processing of their personal data carried out in relation to the above-mentioned Services is carried out in violation of the provisions of the GDPR, they have the right to lodge a complaint with the Guarantor, as required by art. 77 of the GDPR itself or to take appropriate legal action (art. 79 GDPR).

BANCOMAT S.p.A.

‍