INFORMATION PURSUANT TO EU REGULATION
2016/678 (GDPR)
This information is given pursuant to art. 13 of the EuropeanRegulation 2016/679 on the protection of personal data (hereinafter“GDPR”) and subsequent amendments and additions and the Italianreference legislation, including Legislative Decree no.101 of August
10, 2018, by the company ICE SPA - VIA SICILIA, 8/10 - 42122
REGGIO EMILIA - VAT NUMBER 01227810353 (hereinafter also only“Company “), in its capacity as Data Controller, and is provided tothose who interact with the web services of the Company accessibleat the address https://www.icepharma.com.
Where you have elected to submit information in order to get intouch with NZP through the website www.icepharma.com/nzp, thenreferences in this statement to the ‘Data Controller’ and ‘Company’will be references to New Zealand Pharmaceuticals Limited (NZCN:25651) of 68 Weld Street, RD 2 Palmerston North 4472 New Zealand(“NZP”).
This information is provided with the aim of informing the user about
the methods of processing of the relevant personal Data .
This Data may be collected because you voluntarily disclose it (forexample, by writing to the Company through the “contact” section) or
simply by analyzing the pages you browse on the site. The Personal
Data processed through the site are specified in the followingparagraphs.
TYPES OF DATA COLLECTED AND PURPOSES
While browsing the site https://www.icepharma.com theData Controller may acquire information about the visitor, in thefollowing ways.
1. 	BROWSING DATA
The computer systems and software procedures used torun this website acquire, during their normal operation,some data whose transmission is implicit when using
Internet communication protocols. This data category onlyincludes IP addresses, URI (Uniform Resource Identifier)addresses of the resources requested, the time of therequest, the method used to submit the request to theserver, the size of the file obtained as answer, the numericalcode indicating the status of the answer given by the server(successful, error, etc.) and other parameters relating to theoperating system and the user’s computer environment.

acquisition by the Company of the sender’s e-mail address
and any other data eventually requested such as name,surname, address, telephone number (landline or mobilephone).	The data acquired in this way will be used only to process
the user’s request; to send the information specificallyrequested; to fulfil any obligations laid down by current laws,regulations or Community legislation and to satisfy any
requests from the Authorities (tax, judicial, etc.)	They will not be used for marketing purposes without yourprior express consent and will not be sold, transmitted,
given or passed on to third parties in any way.	The legal basis for the processing of Personal Data for thepurposes set out in the preceding sections is containedin Articles 6(1)(b); 6(1)(c), 6(1)(f), 9(2)(a), 9(2)(b) of EURegulation 2016/679.
3. 	OPTIONALITY OF DATA PROVIDING
Apart from that which is specified for browsing data, theuser is free to provide or not personal data and browse
anyway the various sections of the site, but failure toprovide them will make it impossible to obtain any reply torequests made to ICE SPA.
4. 	COOKIES
Cookies are used on our website to provide users with abetter service and experience. For any information about
this type of data and its Processing, please refer to thespecific section https://www.icepharma.com/cookies-policy.
5. 	PROCESSING RULES AND MODALITIESPersonal data are processed by computer and/or telematic
tools for the time strictly necessary to achieve the purposes
for which they were collected. Specific security measures
are observed to prevent the loss of data, illicit or incorrect
use and unauthorized access.	The Processing is carried out by means of organizational
methods and logic strictly related to the purposes indicated.

2. 	DATA PROVIDED VOLUNTARILY BY THE USER
The optional, explicit and voluntary sending of electronic
mail to the addresses mentioned on this site involves the6. 	DATA RECIPIENTSIn addition to the Data Controller, the data may be accessedby some internal staff tasked with processing involved in
the organization of the site or in the provision of services(administrative staff, system administrators or otheremployees, all of whom are committed to confidentiality
where they are not subject to specific formal legalobligations) formally appointed as Authorized Persons to
the Data processing i.e. external persons/entities (such as
third party technical service providers, hosting providers, ITcompanies, business partners responsible for processing
online requests or other external consultants) formallyappointed as Data Processors by the Data Controller.
The updated list of the Data Processors can always be68 Weld Street, RD2
Palmerston North 4474

Phone:	This data is used for the sole purpose of obtaining
anonymous statistical information on the use of the Website
and to check its correct functioning and are deleted
immediately after Processing; currently the data on web
contacts do not persist for more than 30 days.

PO BOX 1869
Palmerston North 4440, New Zealand+64 6 952 3800

www.icepharma.com/nzp

categories of recipients to whom the Personal Data havebeen or will be disclosed, in particular if they are recipientsfrom third countries or international organizations; -wherepossible, the proposed storage period of Personal Dataor, if this is not possible, the criteria used to determine that
period -if the Data are not collected directly from the data
subject, any available information on their source; -theexistence of an automated decision-making , including
profiling and, at least in such cases, significant informationon the logic used, as well as the importance and theenvisaged consequences of such processing for the datasubject.

requested from the Data Controller by sending a specificcommunication to the addresses indicated in the “Contactdetails” section of this information.	Where you have submitted data to NZP as the DataController, NZP may share that data with, and/or it may beaccessed by, ICE S.P.A.
7. 	PERSONAL DATA PROTECTION
The Data Controller has implemented a study on the impact
and risk assessment in relation to the Data processing
according to GDPR regulations: it has, therefore,
implemented specific security measures, observed by all
staff tasked with the processing, to prevent data loss, illegal
or incorrect use and unauthorized access.
These measures take into account:- state-of-the-art technology;- the costs of its implementation;- the nature of the data;- the risk of processing.	The purpose is to protect them from accidental or unlawfuldestruction or alteration, accidental loss, unauthorized
disclosure or access, and other forms of unlawfulprocessing. Moreover, when managing your personal data,
ice spa:- c ollects and processes personal data that are adequate,
relevant and not excessive, as required to meet the abovepurposes;	- e nsures that such personal data remains up-to-date,accurate and appropriately erased
8. 	RETENTION TIMES
Browsing data are deleted immediately after processing; atpresent, web contact data are not retained for more than 30
days.	Personal data are processed by computer and/or
automated tools for the time strictly necessary to achieve
the purposes for which they were collected. The data of
the User who interacted through the section “Contacts” or“request for online services” will be erased after 12 months
from the completion of the last useful contact.
9. 	RIGHTS OF THE DATA SUBJECT
AAs Data Subject, you enjoy the rights under Art. 15 et seq.
GDPR, namely the following rights:	a. to obtain from the Data Controller confirmation as towhether or not your personal Data are being processed
and, if so, to obtain access to the Personal Data and thefollowing information: -the purposes of the processing; -thecategories of Personal Data concerned; -the recipients or

68 Weld Street, RD2
Palmerston North 4474

PO BOX 1869
Palmerston North 4440, New Zealand	b. to obtain from the Data Controller the rectification of yourincorrect Personal Data without undue delay. Taking into
account the purposes of the processing, the data subject
has the right to obtain the integration of incomplete personal
Data, even by providing a supplementary declaration.	c. to obtain from the Data Controller the erasure of your
Personal Data without undue delay, if any of the following
reasons apply: (a) the Personal Data are no longer
necessary in relation to the purposes for which they werecollected or otherwise processed; (b) the data subject
withdraws the consent on which the processing is based inaccordance with GDPR Article 6(1)(a) or Article 9(2)(a), andif there is no other legal ground for the processing; (c) thedata subject objects to the processing pursuant to Article
21(1) and there is no overriding legitimate grounds for theprocessing, or the Data Subject objects to the processing
pursuant to GDPR Article 21(2); (d) the Personal Data havebeen unlawfully processed; (e) the Personal Data must beerased for compliance with a legal obligation imposed bythe Union or Member State law to which the Data Controller
is subject; (f) the Personal Data have been collected inconnection with the offer of information society services
referred to in GDPR Article 8(1).	d. to obtain from the Data Controller the restriction of theprocessing when one of the following applies: (a) theaccuracy of the personal data is contested by the data
subject, for a period enabling the Controller to verify
the accuracy of the Personal Data; (b) the processing
is unlawful and the data subject opposes the erasure of
the Personal Data and requests the restriction of theiruse instead; (c) the Data Controller no longer needs thepersonal Data for processing purposes, but the Personal
Data are necessary for the establishment, exercise or
defence of legal claims; (d) the Data Subject has objectedto the processing pursuant to GDPR Art. 21(1), pending theverification as to whether the legitimate grounds of the Data
Controller prevail over those of the Data Subject.

Phone:+64 6 952 3800

www.icepharma.com/nzp

	e. to receive in a structured, commonly used and machinereadable format your Personal Data provided to a Data
Controller and transmit such Data to another Data
Controller without hindrance from the Data Controller towhich the Personal Data have been provided where: a)the processing is based on consent or on a contract; b)
the processing is carried out by automated means. Inexercising his or her rights in relation to Data portability,
the data subject has the right to have the Personal Datatransmitted directly from one Data Controller to another,where technically feasible.	f. to object at any time, on grounds relating to your particularsituation, to the processing of your Personal Data pursuant
to GDPR Art. 6(1) (e) or (f), including profiling on the basisof those provisions.	g. not to be subject to a decision based solely on automatedprocessing, including profiling, which produces legal effects
concerning you similarly significantly affects you.	h. to lodge a complaint with a supervisory authority
Where you have submitted data to NZP, you have rights of access
to, and correction of your personal information under the Privacy Act
2020.

CONTACT DETAILSFor any need or to exercise the rights referred to in the precedingarticle write to the Data Controller OF ice s.p.a. - sicilia, 8/10 - 42122
reggio emilia or send an e-mail to privacy@icepharma.com

CHANGES TO THIS PRIVACY POLICY
Any future changes or additions to the processing of personal data as
described in this Privacy Policy will be posted on the following site:
Privacy Policy – ICE Pharma

68 Weld Street, RD2
Palmerston North 4474

PO BOX 1869
Palmerston North 4440, New ZealandPhone:+64 6 952 3800

www.icepharma.com/nzp