Privacy policy
INFORMATION ON THE PROCESSING OF PERSONAL DATA
of users who visit the website of Rete Cardiologica
pursuant to Article 13 of Regulation (EU) 2016/679
WHY THIS INFORMATION
Pursuant to Regulation (EU) 2016/679 (“Regulation“), this page describes the methods for processing the personal data of users who visit the website of the IRCCS Rete Cardiologica, with registered office in Milan, Via Carlo Parea n. 4, CAP 20138, VAT/C.F. 97813820152 (“Rete Cardiologica” or “Data Controller”) www.retecardiologica.it (“Site”).
This information does not concern other sites, pages, or online services that can be reached via hypertext links that may be published on the Site but refer to resources outside the Rete Cardiologica’s domain.
DATA CONTROLLER
Following the consultation of the Site, data relating to identified or identifiable natural persons may be processed. The Data Controller is the IRCCS Rete Cardiologica, with its registered office in Milan, Via Carlo Parea n. 4, CAP 20138, VAT/C.F. 97813820152.
DATA PROTECTION OFFICER
The Data Protection Officer (DPO) can be reached at the following address: Rete Cardiologica – Data Protection Officer, Via Carlo Parea n. 4, 20138 Milan, email dpo@retecardiologica.it.
LEGAL BASIS OF THE PROCESSING
The personal data indicated on this page are processed by the Data Controller in the performance of its institutional activities, to provide the information or services requested by users, as well as to comply with legal obligations (Art. 6.1.b) and 6.1.c) of the Regulation).
TYPES OF DATA PROCESSED AND PURPOSES OF PROCESSING
Browsing Data
The IT systems and software procedures used to operate this site acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of the computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters related to the user’s operating system and IT environment.
These data, necessary for the use of web services, are also processed for the purpose of checking the correct functioning of the services offered. Browsing data do not persist for more than seven days (except for any need for the investigation of crimes by the judicial authorities).
Data Provided by the User
The optional, explicit, and voluntary sending of messages to the Rete Cardiologica’s contact addresses, as well as the filling out and sending of forms on the Site, entail the acquisition of the sender’s contact details. Specific information will be published on the pages of the Site prepared for the provision of certain services or participation in specific initiatives.
DATA RECIPIENTS
The recipients of the data collected following the consultation of some of the services listed above are the following parties designated by the Rete Cardiologica, pursuant to Article 28 of the Regulation, as data processors:
– NEXT-Health S.r.l., Corso Vittorio Emanuele II, 30, 20121 Milan (MI), as the marketing services provider;
– Agenzia Zero S.r.l., via Ermes di Colloredo n. 7, 33100 Udine (UD), regarding the management of the Site.
The personal data collected are also processed by the Rete Cardiologica’s staff, who act based on specific instructions provided regarding the purposes and methods of processing.
RIGHTS OF THE DATA SUBJECTS
Data subjects have the right to obtain from the Rete Cardiologica, in the cases provided, access to their personal data and the rectification or deletion of such data or the restriction of the processing that concerns them, or to object to the processing (articles 15 et seq. of the Regulation). The appropriate request can be submitted by contacting the Rete Cardiologica’s Data Protection Officer (Data Protection Officer, Via Carlo Parea n. 4, 20138 Milan, email dpo@retecardiologica.it).
RIGHT TO COMPLAIN
Data subjects who believe that the processing of personal data relating to them carried out through this Site is in violation of the Regulation have the right to lodge a complaint with the Supervisory Authority, as provided for by Article 77 of the Regulation, or to take appropriate legal action (Article 79 of the Regulation).