Privacy & Cookie Policy

Please note that by clicking on the social network icons in the footer of the site, you will be redirected to the LinkedIn, Twitter and Facebook pages, where you can find links to their respective privacy policies.

DATA TRANSFER OUTSIDE THE EUROPEAN UNION

Data is not transferred outside the European Union. In the event that data is transferred outside the European Union, this will be done in one of the ways permitted by applicable law, such as the adoption of Standard Clauses approved by the European Commission or other safeguards that ensure an adequate level of protection. For processing involving cookies, please refer to the relevant privacy statement.

DATA RETENTION

The Data Controller will retain personal data for a period of time no longer than is necessary to achieve the purposes for which it is being processed. Specifically, the data will be kept for the period of time users browse the site and for the time necessary to perform the requested service. At the end of this period, the Data Controller will erase the data irreversibly – by means of destruction or secure deletion methods – or store them in an anonymous form that does not allow, even indirectly, the identification of the user.

PROFILING

Under no circumstances will the data be used to obtain information relating to the preferences or behaviour of users, nor will users be subjected to any decision based solely on the automated processing of their personal data. For any processing involving cookies, please refer to the specific privacy statement.

USERS’ RIGHTS

Users have the following rights

• Right of access to data: the right to obtain confirmation from the Controller as to whether or not personal data concerning them is being processed and, if so, to obtain access to their personal data – and a copy thereof – and to receive information relating to the processing;
• Right to rectification of data: the right to obtain from the data controller the rectification of inaccurate personal data concerning them without undue delay and the integration of incomplete personal data, including by providing a supplementary declaration.
• Right to data erasure: the right to obtain from the data controller the erasure of personal data concerning them without undue delay if one of the following reasons applies
  • personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  • users object to the processing and there is no overriding legitimate ground for the processing;
  • personal data have been unlawfully processed;
  • personal data must be deleted in order to comply with a legal obligation to which the Controller is subject;
• Right to restrict processing: the right to obtain from the Controller the restriction of processing when one of the following occurs
  • users contest the accuracy of personal data, for the period necessary for the Controller to verify the accuracy of such data
  • the processing is unlawful and users object to the deletion of personal data and request instead that its use be restricted;
  • although the Controller no longer needs the personal data for processing purposes, the personal data are necessary for the users to establish, exercise or defend a right in court;
  • users have objected to the processing pending verification as to whether the data controller’s legitimate reasons prevail over those of the data subject.
• Right to data portability: the right to receive in a structured, commonly used and machine-readable format the personal data concerning them provided to the Controller and to transmit such data to another controller where the processing is based on consent or contract and is carried out by automated means.
• Right to object to processing: the right to object to processing carried out for the performance of a task carried out in the public interest or in the exercise of official authority or on the basis of the legitimate interest of the controller or a third party, as well as the right to object to the processing of personal data concerning you carried out for direct marketing purposes, including profiling insofar as it is related to such direct marketing.
• The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or significantly affects them in a similar way.

Users may exercise their rights by sending a request to the Controller’s e-mail address (dpo@advicepharma.com), which will reply as soon as possible and, in any event, no later than 30 days after the request.

COMPLAINTS

If users wish to lodge a complaint regarding the manner in which their personal data are processed by the Controller or regarding the handling of a proposed complaint, they have the right to lodge a complaint directly with the Supervisory Authority in accordance with the procedures set out on www.garanteprivacy.it.

UPDATES

This text is subject to periodic updates. The latest version is dated 11 July 2022.