Dear User,
with this Privacy Policy we would like to inform you that we guarantee the safeguarding and confidentiality of the personal data you provide in accordance with the legislation on and protection of personal data (EU Reg. 2016/679 GDPR, Legislative Decree No. 196/2003 Personal Data Protection Code and to the Provisions of the Guarantor.
- IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER
The Data Controller is Sanitas Farmaceutici Srl (P.IVA 01799860067), with registered office in Via Emilia 168 Int. A – Tortona (AL), tel. 0131.822340, e-mail info@sanitas1931.it, hereinafter “Data Controller”, “Data Controller” or “SANITAS”.
- CONTACT DETAILS OF THE DATA PROTECTION OFFICER
The Data Controller has designated Mr. Rudy Caltagirone as the Data Protection Officer (DPO), whose contact information is: caltagirone@legaladvisory.it.
- PURPOSE, LEGAL BASIS OF PROCESSING AND COMMUNICATION OF PERSONAL DATA
The purpose is the objective, that is, the purpose for which personal data are processed. The data of users who use the site and e-commerce are used for the following purposes:
- BROWSING SERVICES AND INTERACTION WITH THE SITE AND E-COMMERCE:
PURPOSE OF THE PROCESSING: the correct and complete execution of the entrusted task and the fruition of the services, i.e. navigation on the site, response to messages, sale and shipment of goods through e-commerce, as well as the correct management of the fulfilments imposed by the regulations in force.
LEGAL BASIS OF THE PROCESSING: the processing is based on the execution of pre-contractual measures or contractual obligations, the communication of data is necessary for the establishment of the relationship and to be able to fulfill the mandate.
- PURCHASE OF GOODS AND PROCESSING OF SPECIAL CATEGORIES OF PERSONAL DATA THROUGH INTERACTION WITH THE SITE AND E-COMMERCE
PURPOSE OF THE PROCESSING: the sale of goods from which a collection of special categories of personal data may result: genetic data, biometric data intended to uniquely identify a natural person, data relating to the health of the person.
LEGAL BASIS OF THE PROCESSING: The processing is based on free, explicit and informed consent given for this specific purpose and until revocation, the communication of data is necessary for the establishment of the relationship and to be able to fulfill the mandate. This consent is mandatory in order to be able to provide the service of selling goods (pharmaceuticals and/or medical devices)
- MARKETING ACTIVITIES (NEWSLETTER):
PURPOSE OF THE PROCESSING: to receive, including through the newsletter, promotional communications, i.e. for the direct sale of products and services.
LEGAL BASIS OF THE PROCESSING: the processing is based on the free, explicit and informed consent given for this specific purpose and until revocation, the communication of data is not mandatory, but without the provision of data it will not be possible to provide the marketing service.
PARTICULAR CATEGORIES OF DATA: In general, special categories of personal data are: data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data intended to uniquely identify a natural person, data relating to a person’s health or sex life or sexual orientation
At any time you will be able to reread the policy and change the consents previously provided, check and/or change the status of active services and possibly request additional services.
- RECIPIENTS OF PERSONAL DATA
The data will not be disseminated, but communicated to Third Parties/Partners where necessary for the provision of the service, as well as to individuals who perform on behalf of SANITAS tasks of a technical or organizational nature instrumental to the provision of the services requested, these individuals have been authorized Data Processors through specific written deed. The categories of recipients of personal data are: medical health professionals, IT professionals, providers, communication agencies, professional firms and business consulting companies, academic institutions, banking and insurance companies.
- DATA RETENTION PERIOD AND CRITERIA USED FOR ITS DETERMINATION
Users’ personal data will be kept for a period of time no longer than necessary for the purposes for which they were collected and processed. In particular, user/customer personal data will be retained and processed as long as the user maintains his or her user account; data processed for marketing purposes will be retained and processed as long as the user/customer maintains his or her subscription to the newsletter, in accordance with the principles of proportionality and necessity.
- RIGHTS OF THE DATA SUBJECT AND RIGHT TO COMPLAIN TO THE SUPERVISORY AUTHORITY
The Data Subject may at any time, by sending a communication to the references listed above, exercise rights, including:
-revocation of consent
-access to personal data
-rectification of personal data
-the cancellation (so-called right to be forgotten) of personal data
-limitation of the processing of personal data
-the opposition to the processing of personal data and the portability of personal data,
-the lodging of a complaint with the Data Protection Authority and/or other Data Protection Authority, if he/she believes that his/her rights have been violated by the Data Controller and/or a third party.
- MODALITIES OF THE PROCESSING OF PERSONAL DATA
Personal data sent through the registration procedures for our services are processed using mainly electronic tools, recorded and stored on electronic databases and specific security measures are observed by the Data Controller to prevent data loss, illegal or incorrect use and unauthorized access. Processing for marketing purposes will take place by means of electronic mail that can also be used for the purpose of direct sales of requested products or services.
- PLACE OF PROCESSING
The personal data released by the data subjects may be processed at the registered office of the Data Controller and at the authorized Data Processors, stored on servers in the territory of countries belonging to the European Union (EU) in compliance with the legislation on the protection of personal data.
- VARIATION OF THE PRIVACY POLICY
SANITAS reserves the right to change the privacy policy or update its contents, we encourage you to check the information periodically.