Privacy
PRIVACY POLICY – INFORMATION ON THE PROCESSING OF PERSONAL DATA
We invite you to read this Privacy Policy carefully before providing any personal data. This policy is prepared in accordance with Articles 13 and following of EU Regulation 2016/679 (hereinafter also GDPR): it contains important information about the processing of your Personal Data. The data controller informs you that it will process your personal data in compliance with privacy regulations and the principles of lawfulness, fairness, transparency, purpose limitation and storage, data minimization, accuracy, integrity, and confidentiality. Therefore, in relation to the above, the data controller provides the following information.
1. DATA CONTROLLER
The data controller is TUSCANY HEALTH ECOSYSTEM – THE SCARL, P.za San Marco, 4 – 50121 Florence, Email: info@tuscanyhealthecosystem.it, represented by its legal representative.
2. PURPOSE AND LEGAL BASIS OF PROCESSING
Your personal data will be processed for the pursuit of the following purposes: a) Navigation on the website. Article 6, paragraph 1, letter f, and Recital 47 of the GDPR: the processing is necessary for the pursuit of the legitimate interest of the data controller or third parties, provided that the interests or rights and fundamental freedoms of the data subject requiring protection of personal data do not prevail, taking into account the reasonable expectations of the data subject based on their relationship with the data controller. Activities strictly necessary for the functioning of the website and the provision of navigation services on the platform are required.
3. RECIPIENTS OF THE DATA
The personal data processed by the data controller will not be subject to dissemination. However, your personal data may be made known to: a) subjects who can access the data by virtue of legal provisions established by national law of the State to which the data controller belongs and by Community law; b) those authorized to process data duly appointed pursuant to Article 29 GDPR and Article 2-quaterdecies of Legislative Decree 196/2003 and amendments; c) subjects who process data on behalf of the data controller who have been appointed, through a contract or other legal act, as data processors pursuant to Article 28 GDPR.
4. DATA TRANSFER
The management and storage of personal data will take place on servers located within the European Union, and therefore, your personal data will not be transferred to countries outside the European Economic Area.
However, if it becomes necessary to move the location of the servers, the data controller ensures that the transfer of data outside the European Economic Area will be carried out in accordance with the law and by entering into agreements that guarantee an adequate level of protection and/or adopting the standard contractual clauses provided by the European Commission if necessary.
5. DATA RETENTION PERIOD
Personal data will be processed by the data controller only as long as necessary to pursue the purposes for which they were collected (retained until the revocation of your previously given consent). Specifically, they will be processed for a period equal to the minimum necessary pursuant to Recital 39 of the GDPR, without prejudice to any additional retention period that may be imposed by legal provisions pursuant to Recital 65 of the GDPR.
6. RIGHTS OF THE DATA SUBJECT, COMPLAINT
JUDICIAL APPEAL
With regard to the personal data mentioned above, the data subject, or a person delegated in writing, may exercise the following rights: a) the right of access pursuant to Article 15 of EU Regulation 2016/679; b) the right to rectification as provided by Article 16 of EU Regulation 2016/679; c) the right to erasure pursuant to Article 17 of EU Regulation 2016/679; d) the right to restriction of processing when one of the cases provided for by Article 18 of EU Regulation 2016/679 applies; e) the right to request the confirmation that the operations performed in accordance with Articles 16, 17, and 18 of EU Regulation 2016/679 have been brought to the attention of those to whom the data have been communicated or disclosed, except where such fulfillment proves impossible or involves a disproportionate effort compared to the protected right; f) the right to data portability as provided by Article 20 of EU Regulation 2016/679; g) the right to object to the processing of personal data pursuant to Article 21 of EU Regulation 2016/679; h) the right to withdraw consent at any time, as provided by Article 7 of EU Regulation 2016/679; i) the right to lodge a complaint pursuant to Article 77 of the GDPR; j) the right to bring a judicial appeal pursuant to Article 79 of the GDPR.
If you wish to exercise your rights, you can contact the data controller at the contact points indicated in this policy prepared in accordance with the currently applicable privacy regulations.
Furthermore, the list of data processors is available at the data controller’s office, and you can request it from one of the contacts mentioned in point 1 of the policy titled “DATA CONTROLLER.”
In any case, the data controller remains available for any clarifications and, if the processing is modified compared to what is described in this document, the data controller will immediately provide a specific updated notice.
