INFORMATION ON THE PROCESSING OF PERSONAL DATA
pursuant to and for the purposes of Regulation (EU) 2016/679 (hereinafter “GDPR”), of Legislative Decree 30 June 2003, n. 196, containing the “Code concerning the protection of personal data” and the remaining applicable legislation regarding the protection of Personal Data
The protection of Personal Data is a constant in the Vision and in mission of our Company.
The national and European regulations in force on the matter provide that, in order for a treatment to be defined as correct and transparent, it is necessary to provide the interested party with adequate information on the existence of the treatment itself and its purposes, and to collect his/her consent, in the cases established by law.
Pursuant to art. 13 of Regulation (EU) 2016/679, we hereby inform you of the following.
Definitions
- “Personal Data” means any information relating to an identified or identifiable natural person (“data subject”).
The Personal Data that will be collected and stored by the Company during navigation on our site relate exclusively to the personal and address data of the users, their possible educational qualifications and professional specializations possessed.
- “Processing of Personal Data” means the operations applied to Personal Data, carried out with or without the aid of automated processes, such as collection, recording, organization, structuring, storage, adaptation, modification, extraction, consultation, use, communication by transmission, dissemination or otherwise making available, comparison, interconnection, limitation, cancellation, destruction.
- By “Data Controller” we mean the entity that determines the purposes and means of processing the requested Personal Data. For the purposes of this information notice, it is specified that the Data Controller is OTISrl Officine Terapie Innovative, with registered office in Carsoli (AQ), SS Tiburtina Valeria, Km 69+300, in the person of the Legal Representative pt (086399381 – pec: otisrl@pec.terapieinnovative.com) and that the internal contact for the protection of Personal Data is the lawyer Daniela Marcangeli (privacy@otiterapieinnovative.com - 0863993814).
Collection and Use of Personal Data
OTI collects Personal Data in the following situations:
- When you visit our website we store and process information about your use of the site. The purpose is to improve the user experience.
- When you create an account and sign up for our newsletter, we store and process your first name, last name, email, country and additional information you may choose to provide us, such as address, interests, products, etc. We also store information about how you use the newsletter, such as whether you read it or not. The purpose is to adapt and improve the way we treat our customers and our service.
- when you send us an email, using the “Contacts” section
The personal information we collect is used to:
- Create and manage your account.
- Grant access permissions to restricted areas.
- Send you important notices, such as purchase-related communications and changes to our terms, conditions, and policies.
- Send you newsletters, offers and other news about upcoming products and events. If you do not want to be on our mailing list, you can simply unsubscribe by clicking the unsubscribe link at the bottom of the newsletter.
- Develop, deliver and improve our products, services, content, advertising and customer communications through internal audits, data analysis and research of the personal data and preferences you have provided to us in connection with registration, purchase or other promotional programs, if you participate in such events.
- To establish and enrich the data base corporate of professionals, in order to disseminate scientific and promotional material, as well as commercial offers on line, also personalized based on the type of registration, account created and in relation to the receipt of our digital marketing material.
- The Personal Data collected may finally be processed in a non-automated manner in order to increase the range of services and offers provided by our company.
- Comply with legal obligations, such as tax and accounting regulations.
The legal basis for the processing of Personal Data collected is essentially based on the voluntary and non-mandatory consent given by the interested party, in addition to the fulfillment of the legal obligations incumbent on our company, where required by current legislation and the legitimate interest in pursuing our business objectives.
If you do not wish to provide OTI the information requested, we may not be able to provide you with our services.
Disclosure to third parties
OTI may disclose and share certain Personal Data with strategic partners who collaborate with it to provide or improve its services and products or who help OTI to sell its services and products to customers.
Particularly OTI may disclose and share Personal Data with our service providers, i.e. companies that provide services such as information processing, fulfilling customer orders, delivering products, managing and enhancing customer data, providing customer service, assessing your interest in products and services, accounting, and conducting customer research or customer satisfaction surveys.
These companies are required to protect Personal Data in compliance with European and national regulations in the sector.
OTI may also be required by law, legal process, or litigation and/or requests from public or government authorities within or outside your country of residence to disclose your personal information. We may also disclose information about you to meet national security, legal requirements, or other public interest requirements. Finally, in the event of a reorganization, merger, or sale, we may transfer any personal information we collect to a third party who will use that information for the same purposes and under the same terms and conditions as set out in this Privacy Policy.
Protection of personal information
Personal Data will be stored in such a way as to ensure confidentiality, avoid destruction or use by unauthorized third parties, in full compliance with the security measures required by current legislation; they will be processed using paper, computer and telematic media, only by authorized and identified personnel pursuant to EU Reg. 2016/679. The processing will be based on the data in our possession, with the commitment of the interested party to promptly communicate any corrections, additions and/or updates.
In no case may the Personal Data collected be made available, in any form, not even anonymously, to unspecified subjects or to the public.
Duration of treatment
We will retain the Personal Data collected during navigation on our institutional website for five (5) years from the last contact and, where required by current legislation, only for the period imposed for compliance with the laws and will be destroyed immediately thereafter.
At any time, the interested party may ask the Data Controller for access to their Personal Data collected, their rectification or cancellation, limitation or opposition to the processing.
Third-party websites and services
The websites, products and services of OTI may contain links to third-party websites, products and services. OTI cannot be held responsible for the contents of such third-party websites and invites you to obtain information regarding the privacy policies of the latter.
Transfer to third countries
Personal data may be transferred to or accessed by entities within OTI or other companies in other countries for the purposes and as described in this Privacy Policy. Transfers to third countries are made in accordance with the provisions of Chapter V of the GDPR. Where necessary, OTI uses the standard data protection clauses adopted by the European Commission to ensure safe transfers to third countries.
The rights that can be exercised by the interested party
The interested party has the right to exercise the rights provided for in articles 15 – 22 of Regulation (EU) 2016/679 and reported below:
- RIGHT OF ACCESS: «The interested party has the right to obtain from the data controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, to obtain access to the personal data and information» specified in art. 15, paragraph 1, letters a) to h) (art.15 GDPR);
- RIGHT TO RECTIFICATION: «The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement» (art. 16 GDPR);
- RIGHT TO ERASURE [«RIGHT TO BE FORGOTTEN»]: «The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the grounds» indicated in art. 17, paragraph 1, letters a) to f) applies. (art. 17 GDPR);
- RIGHT TO LIMIT PROCESSING: «The interested party has the right to obtain from the data controller the limitation of processing when one of the hypotheses» indicated in art. 18, paragraph 1, letters a) to d) applies (art. 18 GDPR);
- RIGHT TO DATA PORTABILITY: «The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and shall have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where one of the hypotheses» indicated in art. 20, paragraph 1, letters a) and b) applies ( 20 GDPR);
- RIGHT TO OBJECT: «The data subject shall have the right to object at any time, for reasons relating to his or her particular situation, to processing of personal data concerning him or her which is based on Article 6, paragraph 1, letters e) or f), including profiling based on those provisions» (art. 21 GDPR);
- RIGHT NOT TO BE SUBJECT TO AN AUTOMATED DECISION-MAKING PROCESS, INCLUDING PROFILING: «The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her» ( 22 GDPR).
Our Company may update its Privacy Policy from time to time by giving you adequate notice in compliance with the requirements of Regulation (EU) 2016/679.
Other
OTI may update its Privacy Policy from time to time without notice.