MEDICAL HOSPITAL SUPPLY Italiano TERMS AND CONDITIONS USE OF PERSONAL DATA – Terms And conditions Privacy policy ex art. 13 EU regulation 2016/679 and D.lgs. 196/2003 MEDICAL SPA PRIVACY POLICY – CUSTOMERS_SUPPLIERS – COMMON DATA – 00 00.DOC Pursuant to EU Regulation 2016/679 (GDPR) and Legislative Decree 196/2003, we provide this privacy policy, in order to define the methods of processing the personal data you provided. The processing of information concerning you will be based on principles of lawfulness and transparency, and in full protection of your privacy and your rights. For processing of personal data is meant “any operation or set of operations performed with or without the use of automated processes and applied to personal data or sets of personal data, such as collection, registration, organization, structuring, preservation, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other way of making accessible, comparison or interconnection, limitation, cancellation or destruction “. A) Who is appointed for the privacy policy? MEDICAL S.P.A., with registered office and headquarters in Viale Porto Torres, 64 – 07100 Sassari – Tel. 079 26 75 033 – e-mail info@medicalspa.it is appointed for the privacy policy. B) Data Protection Officer (DPO) The Owner has nominated the Person in Charge of Protection of Personal Data (i.e. Data Protection Officer, DPO) who can be contacted for requests and queries at the following addresses: RPD/DPO MEDICAL S.P.A., Viale Porto Torres, 64 – 07100 Sassari – Tel. 079 26 75 033 – e-mail info@medicalspa.it. C) How are personal data used? The data will be processed using instruments that guarantee security and confidentiality and may also be carried out using automated tools for storing, managing and transmitting the data. Automated decision-making processes including profiling are NOT foreseen as part of the policies and purposes pursued by the owner. D) Purpose and legal basis of the processing Your personal data, NOT including the particular categories defined by art. 9 of EU Regulation 2016/679 (personal data that reveal racial or ethnic origin, political opinions, religious or philosophical convictions, or union membership, genetic data, biometric data, data related to the health or to the sexual life or to the sexual orientation of the person) and from you freely communicated and acquired by MEDICAL S.P.A., will be processed, subject to the conditions of lawfulness provided for by art. 6 of EU Regulation 2016/679, for the following purposes: To fulfill contractual or regulatory obligations and for ordinary administrative and accounting purposes. The legal basis of the treatment is constituted by the fulfillment of legal and contractual obligations. The collected data WILL NOT BE TREATED for sending advertising material or for direct selling or for carrying out market research or commercial communication. E) Data Recipients Without prejudice to communications and disclosures made in implementation of legal obligations, your personal data processed in relation to the purposes described in point D can be communicated to: Persons authorized to process personal data under the direct authority of the person in charge (managers, employees and collaborators); Post office or other correspondence companies; Authorities and public administrations; Banks and credit institutions; Companies / professional firms that provide assistance, advice or collaboration to the appointed person for Privacy Policy, in this matter accounting, administrative, fiscal, legal, tax and financial, for the performance of the functions covered by the contract. For specific activities (IT Management, Software Maintenance, Website Management) MEDICAL S.P.A. makes use of policy responsible figures with enough guarantees to implement appropriate technical and organizational measures in order to meet the requirements of the GDPR and guarantee the protection of the rights of the interested party. F) Personal data transfer Your personal data will NOT be transferred to third countries or international organizations. G) Retention period of personal data MEDICAL S.P.A. will retain the data for the time necessary to fulfill the purposes set out in point D and in any case for no more than 10 years from the collection of the data. Any longer storage times will be respected if required by current legislation. H) Rights of the interested party At any time, you can exercise your rights towards the person appointed for the Privacy Policy (Chapter III of the GDPR and Article 7 of Legislative Decree 196/03): the access to personal data and their correction or deletion or the limitation of the processing that concern them or to oppose their treatment, in addition to the right to data portability and the right to file for complaint with the supervisory authority (Data Protection Authority – www.garanteprivacy.it). We inform you that for the exercise of these rights you will have to contact the DPO MEDICAL S.P.A., Viale Porto Torres, 64 – 07100 Sassari Tel. 079 26 75 033 – e-mail info@medicalspa.it. I) Nature of the conferment of data and consequence of a refusal to supply data Any refusal to provide data for the purposes set out in point D may prevent the conclusion or execution of contractual relationships or of the fulfillment of legal obligations. In thanking you for your attention and cooperation, we extend our best regards. MEDICAL S.P.A. Copyright © 2016 | MEDICAL s.p.a. | Privacy & Cookie RAGIONE SOCIALE: MEDICAL SPA | SEDE LEGALE: SASSARI (07100) – VIALE PORTO TORRES, 64 | C.F. E P.IVA: 00268210903 | PEC: MEDICALSPA@LEGALMAIL.IT | UFFICIO DEL REGISTRO (AGENZIA DELLE ENTRATE): SASSARI | REPERTORIO ECONOMICO AMMINISTRATIVO (R.E.A.): 59494 | CAPITALE IN BILANCIO : 800.000,00 I.V. | SOCIETA’ CON SOCIO UNICO SOGGETTA A DIREZIONE E COORDINAMENTO DA PARTE DI ALFAFIN S.R.L.