Dear Sir/Madam, Clinicalfarma S.r.l. protects the privacy of its users. Any data communicated by the user through the website will be treated with the utmost care and with all the tools necessary to guarantee its security, in full compliance with current legislation. We wish to inform you that the “European Regulation 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data” (hereinafter “GDPR”) provides for the protection of individuals with regard to the processing of personal data as a fundamental right. Pursuant to Article 13 of the GDPR, we therefore inform you that:
DATA CONTROLLER: The data controller is Clinicalfarma S.r.l., with registered office in Via Sant'Ilario 32 A/2, 16167 Genoa, VAT number 02477590992.
DATA CATEGORIES: the subject of the processing may be your personal data such as:
- Data collected automatically. During normal operation, the IT systems and applications used to operate this website collect certain data (the transmission of which is implicit in the use of Internet communication protocols) that may be associated with identifiable users. The data collected includes the IP addresses and domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) etc.) and other parameters concerning the operating system, browser and IT environment used by the user, the name of the internet service provider (ISP), the date and time of the visit, the web page from which the visitor came (referral) and the exit page.
- Data provided voluntarily by the user. The voluntary and explicit sending of emails to the addresses indicated in the various access channels of this website does not require consent and involves the acquisition of the sender's address and data, which is necessary to respond to requests, as well as any other personal data included in the message. This data is considered to be voluntarily provided by the user at the time of requesting the service. By entering a comment or other information, the user expressly accepts the privacy policy, and in particular consents to the content entered being freely disclosed to third parties. On the contrary, specific summary information will be reported or displayed on the pages of the site set up for particular services on request (form). The user must therefore explicitly consent to the use of the data reported in these forms in order to send the request.
- Cookies. The website uses cookies. The data collected through cookies may be used to access parts of the website, for statistical purposes, or to make the browsing experience more enjoyable and efficient in the future, by attempting to evaluate user behavior and modify the content offered based on their behavior. For more information, please refer to the cookie policy
PURPOSE OF DATA PROCESSING AND LEGAL BASIS: the purpose and legal basis for the processing of your data is as follows:
For data collected automatically, the legal basis is the legitimate interest of the data controller and the purpose is to guarantee and improve the web browsing experience.
For data provided voluntarily by the user, the legal basis is specified in the individual privacy policies provided, depending on the various services requested and provided through the website.
For cookies: see the specific cookie policy.
DATA RECIPIENTS: Within the limits relevant to the purposes of processing indicated, your data may be disclosed to partners, consulting firms, private companies, third-party technical service providers, hosting providers, IT companies, and communication agencies. The recipients are appointed as Data Processors.
TRANSFER OF DATA TO THIRD COUNTRIES: your data will not be transferred to a third country. In the event of any processing of personal data outside the European Union, this will only take place after adequate safeguards have been put in place, as required by applicable law.
STORAGE PERIOD: in accordance with the principle of storage limitation (Article 5, GDPR), the obsolescence of the data stored in relation to the purposes for which it was collected is verified periodically. In particular:
- Automatically collected data is processed, for the time strictly necessary, for the sole purpose of obtaining statistical information on the use of the site and to verify its proper functioning, including for security purposes or in accordance with the deadlines set by law.
- Data provided voluntarily by the user will be stored for a period of time not exceeding the achievement of the purposes for which it is processed or in accordance with the deadlines set by law.
- Data collected through cookies: please refer to the specific cookie policy.
RIGHTS OF THE DATA SUBJECT: As a “data subject” in the processing, the user has the right:
- To access, rectify, erase, restrict, and object to the processing of data
- To obtain, without hindrance from the data controller, the data in a structured, commonly used, and machine-readable format for transmission to another data controller
- Withdraw consent to processing, without prejudice to the lawfulness of processing based on consent obtained prior to withdrawal
- Lodge a complaint with the Data Protection Authority.
- If it is not possible to request the erasure of data, you may still object to processing when justified by reasons relating to your particular situation.
The above rights may be exercised by sending a written communication via certified email to clinicalfarma@mypec.eu or by registered letter with return receipt to Via Sant'Ilario 32A/2, 16167, Genoa.
DATA PROCESSING METHODS: The personal data you provide will be processed in compliance with the aforementioned legislation and the confidentiality obligations that inspire the Data Controller's activities. The data will be processed using both computerized tools and paper-based media, as well as any other type of suitable media (e.g., cloud systems, digital archiving and storage systems, etc.), in compliance with the appropriate technical and organizational security measures provided for by the GDPR.
FINAL NOTES: this information is provided only for this website and not for other websites that may be consulted by the user via links contained in this site. The information may be subject to change due to the introduction of new regulations; users are therefore invited to check this page periodically to stay up to date.
AUTOMATED DECISION-MAKING PROCESSES: No automated decision-making processes are envisaged.