Privacy

INFORMATION ON THE PROCESSING OF PERSONAL DATA PROVIDED PURSUANT TO ARTICLES 13-14 OF THE GDPR (GENERAL DATA PROTECTION REGULATION) 2016/679

The undersigned company informs that for the management of commercial relations, it is the controller of your so-called “personal” data pursuant to and for the purposes of the Personal Data Protection Code (Legislative Decree 196/2003) and subsequent amendments and the EU Regulation 2016/679 (“GDPR”).
Therefore, we inform you that:

1. CONTACT DETAILS OF THE CONTROLLER

The Data Controller of personal data is MEDI4CARE S.R.L., represented by the legal representative pro tempore, with its registered office in Via II Strada Zona Ind.le 95032 Piano Tavola Belpasso (CT). You can contact the Data Controller by mail at the same address or via email at g.finocchiaro@medi4care.com, via Pec at medi4care@pec.it, or by phone at +39 0957131176.

2. PURPOSES OF THE PROCESSING

Your personal data is processed without your express consent (art. 24, letters a), b), c) of the Privacy Code and art. 6, letters b), e) of the GDPR) for the following Service Purposes:

    • To conclude any requests or contracts for the services/products of the Data Controller;
    • To fulfill pre-contractual, contractual, and fiscal obligations deriving from relations with you;
    • To comply with legal obligations, regulations, community norms, or orders from authorities (e.g., anti-money laundering regulations);
    • To exercise the Data Controller’s rights, such as the right to defend in court.

    3. METHODS OF PROCESSING

    The processing of your personal data is carried out through the operations indicated in art. 4 of the Privacy Code and art. 4, no. 2) of the GDPR, namely: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion, and destruction of data. Your personal data is processed both on paper and electronically.

    4. DISCLOSURE

    Your data may be made accessible for the purposes referred to in art. 2:

    • To employees, collaborators, and agents of the Data Controller who have been authorized beforehand;
    • To system administrators;
    • To third-party companies or other entities (such as banks, professional firms, consultants, insurance companies providing insurance services, etc.) that carry out outsourcing activities on behalf of the Data Controller, in their capacity as external data processors for the sole purposes indicated in point 2;
    • To companies operating in the transport sector.

    Without the need for express consent (pursuant to art. 24, letters a), b), d) of the Privacy Code and art. 6, letters b) and c) of the GDPR), the Data Controller may disclose your data for the purposes referred to in art. 2 to supervisory bodies (such as IVASS), judicial authorities, insurance companies providing insurance services, as well as those subjects to whom the disclosure is mandatory by law for the fulfillment of the purposes mentioned. These subjects will process the data in their capacity as independent data controllers.

    Your data will not be disseminated.

    5. NATURE OF DATA PROVISION AND CONSEQUENCES OF REFUSAL TO RESPOND

    The provision of data for the purposes referred to in art. 2 is mandatory. In their absence, we cannot guarantee the requested Services.

    The provision of data for ancillary purposes, during website navigation, must be accepted optionally. Therefore, you can decide not to provide any data or to subsequently deny the possibility of processing data already provided: in this case, you will not be able to receive newsletters, commercial communications, and advertising material related to the Services offered by the Data Controller.

    6. RETENTION PERIOD

    The Data Controller will process personal data for the time necessary to fulfill the purposes mentioned above and, in any case, for no longer than 10 years from the termination of the relationship for Service Purposes and no longer than 2 years from the collection of data for Marketing Purposes.

    7. PLACE OF PROCESSING

    The data is currently processed and stored at the registered office, in Via II Strada Zona Ind.le 95032 Piano Tavola Belpasso (CT). They are also processed, on behalf of the Company, by professionals and/or companies appointed to perform accounting-administrative and labor consultancy activities, as indicated above.

    8. RIGHTS OF THE DATA SUBJECT

    As a Data Subject, you have the opportunity to exercise all the rights recognized and guaranteed by art. 7 and ss. of the Privacy Code and the new provisions of the General Data Protection Regulation 679/16 (known as GDPR). In particular, you will have the right to obtain at any time:

    a) Confirmation of the existence or otherwise of a processing of personal data concerning you and, if affirmative, to access the personal data and information on the categories of personal data processed, on the recipients or categories of recipients to whom the personal data are or will be disclosed, on the planned retention period, on the existence of the right to request rectification, erasure, or restriction of processing, on the right to lodge a complaint with a supervisory authority, on the existence of automated decision-making, including profiling;

    b) The immediate rectification of inaccurate personal data and the completion of incomplete personal data;

    c) The immediate deletion of personal data concerning you when consent is withdrawn, they are no longer necessary for the purposes for which they were collected or otherwise processed, the legal basis for processing has ceased to exist, they have been processed unlawfully, or such obligation is imposed by law or judicial authorities;

    d) The restriction of the processing of personal data concerning you if you contest their accuracy or the processing is unlawful, or although the Company no longer needs them for processing purposes, the personal data is still necessary for establishing, exercising, or defending a legal claim;

    e) The personal data concerning you provided to the Company in a structured, commonly used, and machine-readable format, and to transmit those data to another data controller without hindrance from the Company, where the processing is carried out by automated means. If technically feasible, you have the right to obtain the direct transmission (so-called “data portability”) of your personal data from the Company to another data controller;

    f) The withdrawal of the consent provided for the processing of sensitive data.

    In addition to the above rights, the Data Subject always has the right to lodge a complaint for any issue regarding the processing of their personal data before the Data Protection Authority.

    The rights mentioned above can be exercised by sending a written request or email to the Company using the contact details provided in point 1 of this information notice.

    The Company will inform you if it intends to process the data you have provided for a purpose other than that for which it was collected.

    Belpasso (CT), May 25th, 2018