Privacy notice on the processing of personal data of users interested in the newsletter
This privacy notice describes how ProfiMed S.r.l. processes the personal data of users ("Users") who fill out the form to request subscription to the newsletter ("Newsletter Form"), available on the ProfiMed website ("Website"), in accordance with Regulation (EU) 2016/679 (the "GDPR") and in compliance with any other applicable privacy laws of the European Union or Member States (together, the "Privacy Legislation").
1. DATA CONTROLLER AND CONTACT INFORMATION
The Data Controller is ProfiMed S.r.l., with its registered office at Via Moia 86/90, 20861 Brugherio (MB), Tax Code and VAT number 07688980155, which can be contacted by email at info@profimed.it ("ProfiMed," "the Company," or "Data Controller").
2. CATEGORIES OF DATA PROCESSED, PURPOSES, LEGAL BASIS FOR PROCESSING, AND RETENTION PERIOD
| Purpose | Legal Basis | Categories of Data Processed | Retention Period |
|---|---|---|---|
i. To send editorial, scientific, and promotional communications related to dental hygiene and related topics via email |
The legal basis is the performance of a contract (art. 6, para. 1, letter b) GDPR), ensuring that the User receives editorial, scientific, and promotional communications from ProfiMed. |
User's email address provided when filling out the Newsletter Form |
Users' personal data will be retained for the entire duration of the service, until the User requests to revoke the subscription to the newsletter by clicking on the appropriate link present in each communication sent by email from ProfiMed. |
ii. To fulfill legal obligations and, in general, the applicable regulations |
The legal basis is compliance with a legal obligation to which ProfiMed is subject (Art. 6, para. 1, lit. c) GDPR). |
User's email address provided when filling out the Newsletter Form |
Users' personal data will be retained for the time necessary to fulfill legal obligations. |
iii. To manage potential disputes. |
The legal basis is the legitimate interest of ProfiMed in defending its rights (Art. 6, para. 1, letter f) GDPR). |
User's email address provided when filling out the Newsletter Form |
Users' personal data will be retained for the time necessary to protect the rights and/or interests of ProfiMed and/or third parties and to carry out any corporate operations, in compliance with the statutory limitation periods. |
Providing the data for the above purposes is necessary because, without it, ProfiMed will not be able to send the User the editorial, scientific, and promotional communications of the newsletter.
3. SCOPE OF DATA CIRCULATION AND RECIPIENTS OF PERSONAL DATA
Users' personal data will only be processed by authorized personnel from ProfiMed, solely for the purpose of fulfilling the aforementioned purposes, and such personnel will be given specific instructions for processing the data.
Users' personal data may also be disclosed to the following categories of recipients:
entities that provide services on behalf of ProfiMed, designated as data processors (e.g., IT service providers);
public or private entities (e.g., insurance companies, banks, legal advisors, public authorities, judicial bodies) that will process the data as independent data controllers.
Users' personal data will not be disclosed, unless required to fulfill legal obligations.
4. TRANSFER OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA
Users' personal data will not be transferred outside the European Economic Area (EEA).
5. RIGHTS OF DATA SUBJECTS
Under Articles 15-22 of the GDPR, the User, as the data subject, may exercise specific rights by contacting the Data Controller, including:
- Right of access: Request confirmation from the Data Controller whether personal data is being processed, and if so, access to information about the processing.
- Right of rectification: Request the Data Controller to rectify inaccurate or incomplete data.
- Right of erasure: Request the Data Controller to delete personal data.
- Right to restrict processing: Request the Data Controller to restrict processing.
- Right to data portability: Request the Data Controller to provide personal data in a commonly used, machine-readable format or to have it directly transmitted to another controller, where technically feasible.
- Right to object: Object to the processing of personal data in whole or in part, for legitimate reasons and in cases provided by the GDPR.
Without prejudice to any other administrative or judicial remedy, if the User believes that the processing of their data violates the GDPR, they have the right to lodge a complaint with the competent supervisory authority as provided by Article 77 of the GDPR.
The User may exercise the above rights at any time by sending an email to info@profimed.it.