Information Browsing the Website
Dear User, pursuant to EU Reg. 679/16 this page describes the modes in which personal data is processed after browsing the Data Controller’s website which can be accessed at the following addresses:
The information on this page does not concern other websites, pages or online services that may be accessed via hypertext links that may be published on the websites, but which may refer to resources outside the data controller’s domain.
After consulting the website above, data may be processed that refers to identified or identifiable people.
The Data Controller is Pierpaoli Exelyas Srl, Piazza del Liberty, 8 , 20121 Milano, Italy, Tel. +39 02 800 16 564, VAT no. and Tax Code 10383650966 , REA MI-2527039 in the person of the pro tempore legal representative.
This website was developed by Valuebiz srls with registered office in Via Modonesi, 12 29122 – Piacenza tel: tel. +39 0523.591667- VAT no. 01693030338. www.valuebiz.it – e-mail: firstname.lastname@example.org – Certified email: email@example.com, formally appointed data processor pursuant to art 28 of the EU Reg. 679 / 16 Ue 679/16.
WHICH DATA DO WE PROCESS?
After browsing this website, we process the data that you voluntarily provide us with on the contact form and the browsing data that are acquired automatically to make website navigation possible.
TYPE AND ORIGIN OF PROCESSED PERSONAL DATA.
Data provided by the user
As a user, you can voluntarily leave your personal data by sending message on the “contact form” on the website, to request general information, or on the “receive new articles” form to stay updated on the Data Controller’s publications. If the user is a partner pharmacy of the Data controller/company, personal data may be processed that could be provided by filling out the specific form (e.g. In addition to the contact person’s name and address, also the email address containing the pharmacy contact’s name).
Personal data processing by the Data Controller is described in this information sheet.
During their normal working practice, information systems and software procedures behind the functioning of this website acquire some personal data, the sending of which is implicit in the use of internet communication protocols. IP addresses, or the domain names of the computers and terminals used by the users, the URI/URL addresses (Uniform Resource Identifier/Locator) addresses of the required resources, the time of the request, the method used in submitting the request to the server (POST or GET), the size of the file obtained in response, the numerical code indicating the response status given by the server (successful, error, etc), information on the pages used and other parameters relating to the user’s operating system and the computer environment, for example the browser used, all come under this category of data.
Cookies are small text files that are stored on the user’s device when they browse a determined website. Data about the user can be collected via the cookies issued by the site visited. Data about the user can be collected via the cookies issued by the site visited.
Data communicated to data subjects
In reference to the data communicated by data subjects on forwarding requests via the contact form, the personal data that you voluntarily provide us with are only collected for the purposes of contacting you to respond to your requests.
When you fill out the specific form found in the “contact form” or “stay informed” section, we ask you to also provide your consent for the data processing of particular data, before proceeding with sending the message.
This is because you may accidentally enter data in the message text that comes under the category of special data, which deserve suitable protection and require your consent to be processed by us. For example, we may come into contact with data that reveal your state of health, data that come under the category of special data.
You must therefore mark the consent box, as the positive action required by European legislation to provide proof that the sending of special data is the result of an informed, deliberate and aware choice.
In all cases, you will always have the right to revoke your consent, without prejudicing the legality of the processing that was carried out before revoking, by contacting the Data Controller through the contact details (Tel. +39 02 800 16 564, email firstname.lastname@example.org)
Browsing data and technical cookies
With regard to browsing data and technical cookies, they are processed for the purpose of:
• Obtaining statistical information about the user of services (most visited pages, number of visitors in each hourly or daily time bracket etc);
• Checking the correct function of the services offered.
They are processed based on our legitimate interest to ensure the correct functioning of our web pages, their content and to guarantee maximum usability of the service.
DATA RETENTION TIMES
The data communicated by the user will be stored by the Data Controller for the time required to provide an answer to the question. After 12 months, the data will be deleted or rendered anonymous.
Browsing data do not last longer than 7 days, except for any need of verification of crimes by the judicial authorities.
PROCESSING METHOD AND REALM OF DIFFUSION AND COMMUNICATION OF DATA
The log and data communicated by the user will not be distributed or communicated to third parties other than those appointed by the Data Controller and Data Processors and formally nominated.
The browsing logs are accessible via controlled, protected access solely to the Data Controller and the formally nominated external Data Processor.
Solely for the purposes stated above, your data could be sent to external collaborators that process data on our behalf, by stipulating an agreement for appointment to Processor in which the delegated operations and the safety measures that must be adopted to best protect your information are defined.
The website is hosted by SOFTWISE srl, Via Modonesi, 2, 29122 Piacenza (PC), Tel +39.0523609794, Fax +39.0523645135, Tax Code and VAT no. 01431870334, Company Reg. PC 01431870334, REA 161789, Share Capital € 10,000 entirely paid up, certified email: email@example.com
formally appointed external data processor pursuant to article 28 of the EU Regulations 679/2016 (GDPR).
Data communicated by users in contact forms. The legal basis is established by your consent, acquired via the box on the section of the form that must be ticked after reading the information sheet.
Browsing data The legal basis is established by the Data Controller’s legitimate interest pursuant to article 6.I letter f) of the EU Reg. 679/16 and therefore your consent is not required.
DATA SUBJECT’S RIGHTS.
You can, at any time, exercise your rights as recognized in EU Reg 679/16 by sending a request to the addresses provided in the heading of this information sheet.
Right to access personal data
You have the right to obtain confirmation from the Data Controller regarding whether or not your personal data is being processed. If the answer is affirmative, you have the right to obtain access to your personal data and a copy of the personal data being processed, except in the case that releasing a copy would be harmful to the rights and liberties of other data subjects.
Right to rectification.
You have the right to have the Data Controller rectify your incorrect personal data, and also add to any incomplete data.
Right to erasure.
You have the right to obtain erasure of your personal data by the Data Controller, if said data is no longer necessary for the purpose for which it was collected or processed; if you revoke consent required for processing and there are no other legal grounds for processing; if you oppose processing and there is no prevailing legitimate reason to proceed with processing; if personal data was illegally processed; if personal data must be erased to fulfil an obligation imposed by national or EU provisions.
Right to restriction of processing:
You have the right to restrict processing if you contest the correctness of your personal data, for the period required for the Data Controller to check the correctness of said personal data; if processing is illegal and you ask for restriction of use in place of erasure; if you require the personal data for verifying, exercising or defending a right in court, although the Data Controller no longer requires it; if you oppose processing while awaiting to verify any prevalence of the Data Controller’s legitimate reasons. If processing is restricted, your personal data is only processed, except for storage, with your consent or for verifying, exercising or defending a right in court, or for protecting another individual or legal entity’s rights or for reasons of public interest.
Right to revoke consent.
You have the right to revoke your consent at any time, by sending a request to the addresses provided above. Revoking consent does not however prejudice the legality of processing based on consent that was carried out prior to revocation;
Right to data portability:
You have the right to receive your personal data provided to a data controller in a structured, commonly used and machine-readable format and have the right to send said data to another data controller without being prevented by the data controller to whom it was provided, if processing is based on consent to processing for one or more specific purposes and if processing is carried out automatically and exercising the right to portability is not harmful to the rights and liberties of third parties.
Right to lodge a complaint with the Data Protection Authority.
You have the right to lodge a complaint with the Data Protection Authority, delivering said complaint by hand to the Data Protection Authority Offices (at the address below) or by recorded post with proof of receipt, addressed to the Data Protection Authority, Piazza di Montecitorio, 121, 00186 Rome, or by certified email to firstname.lastname@example.org