INFORMATION ON THE PROCESSING OF PERSONAL DATA
MADE PURSUANT TO ARTICLES 13-14 OF THE GDPR
(GENERAL DATA PROTECTION REGULATION) 2016/679
The undersigned Company informs you that for the management of business relations, it is the holder of your so-called “personal” data pursuant to and for the purposes of the Personal Data Protection Code (Legislative Decree 196/2003) and subsequent amendments and the EU Regulation 2016/679 (“GDPR”).
And therefore informs you that:
1. HOLDER’S CONTACTS
Il Data controller of personal data is BIOSANITY S.R.L. in the person of its legal representative pro tempore, with registered office in Rome Via Pian due Torri 19, which may be contacted by post at this address or: by e-mail at info@biosanity.it by means of or Pec to the address biosanity@pec.it also by telephone at +39 0698181728.
2. PURPOSE OF PROCESSING
Your personal data are processed:
without your express consent (Art. 24 lett. a), b), c) Codice Privacy e art. 6 lett. b), e) GDPR), for the following Service Purposes:
– conclude any requests or contracts for the Controller’s services/products;
– fulfil pre-contractual, contractual and tax obligations arising from existing relations with you;
– comply with obligations laid down by law, regulation, EU legislation or an order of the Authority (such as anti-money laundering);
– exercise the rights of the Controller, such as the right of defence in court;
3. METHODS OF TREATMENT
The processing of your personal data is carried out by means of the operations indicated in Art. 4 Privacy Code and Art. 4 n. 2) GDPR and specifically: collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction of data. Your personal data are processed both on paper and electronically.
4. COMMUNICATION
Your data may be made accessible for the purposes set out in Art. 2:
– to previously authorised employees, collaborators and agents of the Controller
– system administrators;
– third party companies or other entities (by way of example, credit institutions, professional firms, consultants, insurance companies for the provision of insurance services, etc.) that perform outsourcing activities on behalf of the Data Controller, in their capacity as external data processors for the sole purposes indicated in point 2.
– companies operating in the transport sector;
Communication of data without the need for express consent (ex art. 24 lett. a), b), d) Codice Privacy e art. 6 lett. b) e c) GDPR), the Controller may communicate your data for the purposes set out in Art. 2 to supervisory bodies (such as IVASS), judicial authorities, insurance companies for the provision of insurance services, as well as to those persons to whom disclosure is required by law in order to fulfil the said purposes. These parties will process the data in their capacity as autonomous data controllers.
Your data will not be disseminated.
5. NATURE OF PROVIDING DATA AND CONSEQUENCES OF REFUSAL TO ANSWER
The provision of data for the purposes of Art. 2 is compulsory. In their absence, we will not be able to provide you with the requested Services.
Providing data for ancillary purposes while browsing the site is optional.
You may therefore decide not to provide any data or to subsequently refuse the processing of data already provided: in this case, you will not be able to receive newsletters, commercial communications and advertising material relating to the Services offered by the Controller.
6. STORAGE TIMES
The Data Controller shall process personal data for the time necessary to fulfil the above purposes and in any case for no longer than 10 years from the termination of the relationship for the Service Purposes and for no longer than 2 years from the collection of the data for the Marketing Purposes.
7. PLACE OF PROCESSING
The data are currently processed and stored at the registered office in Rome, Via Pian due Torri, 19. They are also processed, on behalf of the undersigned, by professionals and/or companies appointed to carry out accounting-administrative and labour consultancy activities, as indicated above.
8. RIGHTS OF THE DATA SUBJECT
As a Data Subject, you have the possibility of exercising against the Company all the rights recognised and guaranteed by Art. 7 et seq. of the Privacy Code and the new provisions of the European General Regulation 679/16 (so-called GDPR), you will in particular have the right to obtain at any time:
a) confirmation as to whether or not personal data relating to you are being processed and, if so, to obtain access to the personal data as well as information on the categories of personal data processed and the recipients or categories of recipients to whom the personal data are or will be disclosed, on the intended retention periodon the existence of the right to request rectification, erasure or restriction of processing, on the right to lodge a complaint with a supervisory authority, on the existence of an automated decision-making process, including profiling;
b) the immediate rectification of inaccurate personal data and the supplementation of incomplete personal data;
(c) the immediate deletion of personal data concerning you when your consent is withdrawn, it is no longer necessary for the purposes for which it was collected or otherwise processed, or the legal basis for its processing has ceased to exist, it has been processed unlawfully, or such an obligation is imposed by law or the judicial authorities;
d) the restriction of the processing of personal data relating to you if you dispute the accuracy of the data or if the processing proves to be unlawful or although the Company no longer needs the data for processing purposes, the personal data are nevertheless necessary for the establishment, exercise or defence of a legal claim;
e) personal data concerning him/her provided to the Company in a structured, commonly used and machine-readable format and to transmit such data to another data controller without hindrance by the Company, if the processing is carried out by automated means. If technically feasible, you also have the right to obtain the direct transmission (so-called ‘data portability’) of your personal data from the Company to another data controller;
(f) revocation of the consent given for the processing of sensitive data.
In addition to the above-mentioned rights, the data subject always has the right to lodge a complaint on any matter concerning the processing of his or her personal data before the Data Protection Authority.
The above rights may be exercised by sending a written or e-mail request to the Company using the contact details provided in section 1 of this notice.
The company will take care to inform you if it intends to further process the data you provide for a purpose other than that for which they were collected.
Rome 16/05/2022
The Data Controller