Source: https://www.columbus3c.com/en/privacy-centralino/
Timestamp: 2019-04-18 21:05:43+00:00

Document:
In compliance with the provisions of EU Reg. 2016/679 (European Regulation for the protection of personal data) we hereby provide the necessary information regarding the processing of personal data collected during the telephone call with the Clinic.
Personal Data: any information concerning the Data Subject, with particular reference to identifiers such as the name, identification number, geographical position, online identification or to one or more factors specific to his or her physical, physiological, genetic, psychic, economic, cultural or social identity – please refer to art. 4, c. 1, no. 1 GDPR.
Personal data processing refers to: “any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction.” .
Data Subject is: “any identified or identifiable natural person”.
– book any appointments, services, medical appointments and related activities (in-house activities and activities for the fulfilment of contractual and pre-contractual obligations).
The processing of data will be in compliance with the conditions of law pursuant to Article 6, paragraph 1, letter f): (with reference to 47) taking into account the reasonable expectations of the data subject at the time of and with reference to the collection of personal data, whenever it is reasonably expected that data processing is being carried out for these purposes.
– firms or companies providing services for the management of the information system and communication networks (telephone connectivity); – authorities competent for the carrying out of relevant laws and/or regulations of public bodies, upon request.
The subjects belonging to the aforesaid categories are either considered Data Processors, or they act independently as separate Data Controllers. The list of the data processors is constantly updated and available at our headquarters: 48, Via Michelangelo Buonarroti, 20145 Milan.
The Personal Data provided will not be transferred to countries of the European Union, nor to third countries outside the European Union.
Data processing will be carried out in an automated and / or manual way, with methods and tools aimed at guaranteeing maximum safety and confidentiality, by subjects specifically appointed to do so.
Pursuant to art. 5 paragraph 1 letter e) of Reg. UE 2016/679, the personal data collected will be retained in a form that allows identification of data subjects for a period of time not exceeding the achievement of the purposes for which the personal data is processed. The retention of personal data provided depends on the purpose of the processing and the User can view any criterion used by consulting the Data Retention Policy of the Data Controller.
The provision of data for the purposes referred to in paragraph 3. is necessary for the purpose of pursuing your legitimate interest, i.e. receiving feedback on the information requested and possibly booking a service through telephone contact with our operator. Failure to provide the data will make it impossible to offer the service and fulfil your requests.
You can assert your rights as expressed in articles 15, 16, 17, 18, 19, 20, 21, 22 of EU Regulation 2016/679, by referring to the Data Controller, or the Data Processor, or the Data Protection Officer, pursuant to article 33 paragraph 4, by contacting dpo@columbus3c.com. You have the right, at any time, to ask the Data Controller to access your personal data, to rectify it, to delete it or limit its processing. Furthermore, you have the right to object, at any time, to the processing of your data (including automated processing, e.g. profiling) based on legitimate interest and, lastly, you have the right to data portability. Without prejudice to any other administrative and judicial appeal, if you believe that the processing of your personal data is violating the provisions of EU Reg. 2016/679, pursuant to art. 15 letter f) of the aforementioned EU Reg. 2016/679, you have the right to lodge a complaint with the Guarantor for the protection of personal data and, with reference to art. 6 paragraph 1, letter a) and art. 9, paragraph 2, letter a), you have the right to revoke the consent given at any time. In the case of request for data portability, the Data Controller will provide, in a structured, common and legible format, by automatic device, the personal data concerning you, without prejudice to paragraphs 3 and 4 of art. 20 of the EU Reg. 2016/679.

References: art. 4
 art. 5
 art. 15
 art. 6
 art. 9
 art. 20