Information document pursuant to and for the purposes of Article 13 of Regulation (EU) 2016/679 (GDPR)

In compliance with the provisions of EU Reg. 2016/679 (European Regulation for the protection of personal data), we provide you with the necessary information regarding the processing of the personal data provided. The information is not to be considered valid for other websites that may be consulted via links on the websites in the domain of the owner, who is not to be considered in any way responsible for the websites of third parties.
This information is provided pursuant to art. 13 of EU Reg. 2016/679 (European Regulation for the protection of personal data) and is also inspired by the provisions of Directive 2002/58/EC, as updated by Directive 2009/136/EC, regarding Cookies as well as the provisions of the Provision of the Authority for the protection of personal data of 08.05.2014 regarding cookies.
Processable personal data: «personal data»: any information relating to an identified or identifiable natural person («data subject»); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person; (C26, C27, C30).

Browsing data

The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of computers and terminals used by users, URI/URL (Uniform Resource Identifier/Locator) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment.

Data communicated by the interested party

The optional, explicit and voluntary sending of messages to the contact addresses, as well as the compilation and forwarding of the forms on the Data Controller’s website, involves the acquisition of the sender’s contact data, necessary to respond, as well as all personal data included in the communications.

Specific information

Specific information will be present on the pages of the Site in relation to particular services or processing of the Data provided.

Cookies

For more information on the cookies used by this website, see the Cookie Policy.

1- Who is the Data Controller? How to contact them?

The Data Controller, pursuant to articles 4 and 24 of EU Reg. 2016/679 is Bioformula S.r.l., with registered office in VIA DEL LAVORO 4A/6 – 20865 USMATE-VELATE (MB ) e-mail privacy@bioformula.it.

2- Purpose of the processing, legal basis, data retention period and nature of the provision

Purpose A) Browsing the website

  • LEGAL BASIS: legitimate interest art. 6 lett. f) and recital 47: processing is necessary for the purposes of the legitimate interests pursued by the controller or by third parties, provided that the interests or fundamental rights and freedoms of the data subject which require protection of personal data do not prevail, taking into account the reasonable expectations of the data subject based on his or her relationship with the controller. Activities strictly necessary for the functioning of the site and the provision of the navigation service on the platform.
  • DATA RETENTION PERIOD: until the duration of the navigation session. For navigation, see cookie policy.
  • NATURE OF THE PROVISION: except for what is specified for navigation data (which are necessary in order to allow navigation of the website), the user is free to provide personal data.

Possible compilation of data collection form for medical contacts and accreditation.

  • LEGAL BASIS: based on the execution of pre-contractual measures adopted also at the request of the interested party
  • DATA RETENTION PERIOD: 2 years
  • NATURE OF THE PROVISION: the provision of data is optional or necessary depending on the specific purpose for which the data is processed. Failure to provide data marked with the symbol * or wording (required), will make it impossible to obtain what is requested or to use the services of the data controller.

Purpose B) Direct Marketing:

In the event that the interested party fills in dedicated forms for data collection, in specific areas for Direct Marketing purposes: with prior consent and until opposition for direct marketing activities of the Data Controller, market research, direct sales, satisfaction surveys, sending of newsletters and promotional, commercial and advertising material or relating to events and initiatives, by the Data Controller via automated means of email, fax, SMS or other types of messages, as well as by telephone calls via operator, including automated and paper mail and other information material.

In order to compare and possibly improve the results of communications, the Data Controller uses systems for sending newsletters and promotional communications with reports. Thanks to the reports, the Data Controller will be able to know, for example: the number of readers, openings, unique “clickers” and clicks; the devices and operating systems used to read the communication; the details of the activity of individual users; the details of the emails sent, emails delivered and not, of those forwarded; All this data is used for the purpose of comparing, and possibly improving, the results of communications.

  • LEGAL BASIS: Consent art. 6 par. 1 lett. a): the interested party has given consent to the processing of their personal data.
  • DATA RETENTION PERIOD: Until opposition (opt-out/withdrawal of consent)
  • NATURE OF THE PROVISION: The provision of data for purpose B) is optional and in the absence of the same, your data will not be processed for the pursuit of this purpose, the denial of the provision will not affect the usability of the purposes referred to in point A).

3- To whom will the personal data collected be communicated?

The personal data provided will be shared with subjects, who will process the data as data processors (art. 28 of EU Reg. 2016/679) and/or as natural persons acting under the authority of the Data Controller and the Data Processor (art. 29 of EU Reg. 2016/679), for the purposes listed above.

Specifically, the data will be shared with:

  • subjects that provide services for the management of the information system used by Bioformula S.r.l. and telecommunications networks; including e-mail, newsletters and website management, such as ActiveCampaign; freelancers, firms or companies in the context of assistance and consultancy relationships;
  • authorities competent for compliance with legal obligations and/or provisions of public bodies, upon request.

The list of Data Processors is constantly updated and available by writing to privacy@bioformula.it or at the registered office of Bioformula S.r.l.

4- Does Bioformula transfer data outside the EEA?

The personal data provided will not be transferred to countries outside the EEA.

5- Is there an automated process?

We do not use decision-making processes based on automatic processing, including profiling.

6- What are your rights? How can you exercise them?

You may exercise your rights as expressed in articles 15, 16, 17, 18, 19, 20, 21 of EU Regulation 2016/679 by writing to privacy@bioformula.it.

You have the right, at any time, to ask the Data Controller for access to your personal data, rectification, erasure of the same, limitation of processing and portability of your data, if applicable. Furthermore, you have the right to object, at any time, to the processing of your data based on consent and/or legitimate interest.

To no longer receive automated direct marketing communications (e.g. e-mail, text messages) it will be sufficient to write an e-mail at any time to privacy@bioformula.it with the subject “cancellation from automated” or use our automatic cancellation systems provided for e-mails only. To stop receiving traditional direct marketing communications (telephone calls with operator and postal mail) it will be sufficient to write an email at any time to privacy@bioformula.it with the subject “cancellation from traditional”. Without prejudice to any other administrative and judicial appeal, if you believe that the processing of data concerning you violates the provisions of EU Reg. 2016/679, pursuant to art. 15 letter f) of the aforementioned EU Reg. 2016/679, you have the right to lodge a complaint with the Guarantor for the protection of personal data (Supervisory Authority www.garanteprivacy.it).

Further information

The owner reserves the right to modify, update, add or remove parts of this privacy policy at its discretion and at any time. In order to facilitate this verification, the policy will contain the update date.