Information on the processing of personal data

Data controller

PAOLO RIZZI, Bergamo – gdpr[@]planethealthcheck.com

Following consultation of this site, data relating to identified or identifiable natural and/or legal persons may be processed.

Data processing location

The processing operations connected to the web services of this website take place in Bergamo (Italy) and are carried out only by personnel in charge of processing, or by persons in charge of occasional maintenance and secretarial operations. The data released may be communicated to third parties in relation to services performed for the data controller; these parties will be appointed as data processors pursuant to Article 28 of EU Reg. 2016/679.

Type of data processed

Browsing data: the computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct operation and is deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the site.

Data provided voluntarily by the user: the optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, which is necessary in order to reply to requests, as well as any other personal data entered in the contact form and the newsletter subscription form.

Cookies: this section of the sites sends visitors some files commonly known as cookies. Cookies will be used by your computer’s browser, solely to store the website user’s session information. The use of cookies is an industry standard and browsers store them in a special folder. If you prefer not to receive cookies or if you wish to be informed about them in advance, you can set your web browser accordingly. However, we would like to inform you that without this functionality active, it is not possible to access correctly the forum section on the Company’s websites.

Optional provision of data

Apart from that specified for navigation data, the user is free to provide the personal data indicated in the request forms, reserved area registration or in any case indicated in contacts. Failure to provide them may make it impossible to obtain what has been requested. It will be made explicit in specific notices when the data subject’s consent is required, and the data subject will be informed of the ways in which he or she may revoke a previously expressed consent.

Treatment modalities

Personal data are processed by computer for the time strictly necessary to achieve the purposes for which they were collected, and are compared with any data already in the possession of the data controller for the performance of activities or services. In the event of a discrepancy, the person in charge may contact the sender to verify the integrity of the data or arrange for its possible correction. Specific security measures are observed to prevent loss of data, unlawful or incorrect use and unauthorised access.

Additional information on treatment

Litigatio defence: The User’s personal data may be used for the defence by the Controller in legal proceedings, or in the preparatory stages of such proceedings, against abuses in the use of the same or related services by the User. The User declares that he/she is aware that the Data Controller may be required to disclose data at the request of public authorities.

Specific disclosures: At the User’s request, in addition to the information contained in this privacy policy, this Site may provide the User with additional and contextual information regarding specific services, or the collection and processing of Personal Data.

System logs and maintenance: For operation and maintenance purposes, this Site and any third-party services used by it may collect system logs, i.e. files that record interactions and which may also contain personal data, such as the User’s IP address.

Retention period

Personal data will be stored in compliance with legal obligations and for as long as it is strictly related to the purposes of processing.

Data recipients: Personal data will not be disclosed. On the other hand, personal data provided for the purchase and ordering of products may be disclosed to:

1. subjects to whom such communication must be made in order to fulfil or to require the fulfilment of specific obligations provided by laws, regulations and/or EU legislation;
2. natural and/or legal external persons who provide services instrumental to the Controller’s activities (e.g. call centres, suppliers, consultants, companies, professional firms). These subjects will act as data processors.

Information not covered by this policy

Further information in relation to the processing of personal data may be requested at any time from the Data Controller using the contact information.

Exercise of rights by users

The subjects to whom the personal data refer have the right at any time to obtain confirmation of the existence or non-existence of such data at the Data Controller, to be informed of their content and origin, to verify their accuracy or to request their supplementation, deletion, updating, rectification, transformation into anonymous form or blocking of personal data processed in violation of the law, as well as to object in any case, for legitimate reasons, to their processing. Requests should be addressed to the Data Controller, who can be contacted at email gdpr[@]planethealthcheck.com. It is also possible to lodge a complaint to the Data Protection Authority (www.garanteprivacy.it).