GDPR EU 2016/679 Information
The European Regulation UE / 2016/679 (hereafter “Regulation”) establishes rules concerning the protection of individuals with regard to the processing of personal data, as well as rules concerning the free movement of such data.
Ipermediale S.r.l., as Data Controller, provides the information required by articles 13 and 14 of the Rules.
The personal data provided will be processed according to the principles of correctness, lawfulness and transparency, protecting privacy.
The Data Controller undertakes to process personal data in compliance with the principle of “minimization”, or by acquiring and processing data limited to what is necessary with respect to the purposes set out below.
As regards the navigation data of the website, please refer to the cookie policy.

Purpose and legal basis of the processing
The data will be processed for the following purposes:
a) Management and execution of pre-contractual and contractual obligations;
b) Implementation in the databases in order to allow the monitoring of the execution of the contract;
c) Management of tax and accounting obligations;
d) Compliance with obligations under the law, regulations and EU legislation;
e) Direct marketing for: sending communications and newsletters, informative material, satisfaction survey, promotional, commercial and advertising material or events and initiatives, direct sales. The contact modalities can be: e-mail, SMS (Short Message Service) or other type of electronic instrument, as well as by telephone calls via operator and paper mail.
The legal basis of the processing is represented by the request that activates a pre-contractual, contractual or after-sales phase, in which case the processing of personal data is mandatory to proceed with execution.
When the legal basis of processing is represented by direct marketing actions, the processing of personal data is optional and subject to prior consent.

Nature of the data processed
In pursuing the aforementioned purposes, when the relationship is undertaken with a natural person, the following categories of data will be processed:
– Identification data: educational or professional qualification, name, surname, address;
– Contact details: telephone number, mail, pec;
– Data relating to the sales contract / services;
– Data relating to the interest for a product or service.
When the relationship is undertaken with a legal entity, the same categories of data are associated as the referent of the legal entity.
Personal data are never used for profiling.

Methods of Treatment
The processing of personal data will be carried out using IT tools and paper methods in compliance with the provisions on personal data protection and, in particular, the appropriate technical and organizational measures pursuant to art. 32.1 of the Regulations, and with the observance of every precautionary measure that guarantees its integrity, confidentiality and availability.

Sources of data source
The data are collected directly from the interested party or by sending them by means of web forms or by e-mail or by telephone relations activated by the interested party.
Personal data may be collected from public sources (Chambers of Commerce and companies that process the data) and in this case it will be communicated to the interested party.

Recipient categories
Personal data may be communicated, in strict relation to the purposes indicated above, to the following subjects or categories of subjects:
a) subjects of which Ipermediale S.r.l. it is a commercial partner and the last interface of the Customer for goods and services;
b) subjects that provide cloud services for the management of information and data, for the relationship and communication with stakeholders, for digital preservation;
c) professionals at the service of the company, for purposes strictly connected to the execution of contractual obligations;
d) competent authorities for the fulfillment of legal obligations.
The subjects referred to in subparagraph a) will process personal data as Data Controllers.
In relation to the categories of persons referred to in letters b) and c) the Data Controller undertakes to rely exclusively on persons who provide adequate guarantees regarding data protection, and will appoint them as Data Processors.
The list of Data Processors may be requested by the interested party upon request to the Data Controller.
Personal data may be processed for the above purposes by employees and / or collaborators, specifically authorized and instructed by the Data Controller.
Personal data will not be disseminated, except when required by a law or regulation or by community legislation.
In no case personal data are transferred or transferred to third parties to other subjects.

Transfer
Personal data will normally be processed within the European Union.
When, for technical or security reasons, one or more Data Processors apply policies containing the transfer of personal data abroad, the transfer will only be carried out in third countries for which the status of adequacy has been recognized or with standard clauses defined by the Commission European or with Binding Corporate Rules.

Retention period
The personal data that are part of the management of a contract and the personal data relating to the sale of goods and services are kept for eleven years for purposes of customer assistance, protection of credit and civil and tax compliance.
Personal data relating to the interest in a product or service is retained for a period of two years or less if the product or service is no longer marketed.

Rights recognized to the interested party
At any time the interested party may exercise, in relation to the Data Controller, the rights provided for by the Regulations. In particular, at any time, he will have the right to ask:
– access to personal data;
– their correction in case of inaccuracy of the same;
– cancellation;
– the limitation of their treatment
He will also have the right:
– to oppose their treatment if treated for the pursuit of a legitimate interest of the Data Controller, if it considers violated their fundamental rights and freedoms;
– to revoke your consent at any time in relation to the purposes for which this is necessary;
– the portability of their data, ie the right to receive them in a structured format, commonly used and readable by automatic device.
The interested party can make a request for opposition to the processing of his personal data in which to give evidence of the reasons justifying the opposition; the Owner reserves the right to evaluate the application, which would not be accepted in case of legitimate legitimate reasons to proceed with the processing that prevail over the interests, rights and freedom of the applicant.

Identity and contact details of the Data Controller
The data controller is Ipermediale S.r.l., fiscal code and VAT number 04354460489, with registered office in Florence, via Gelli 12; telephone number +39 348 7739278, fax +39 0588 709020, e-mail address info.sensano@ipermediale.it, certified e-mail address available on the appropriate government website.

Changes and updates
This information may be subject to changes and additions, also as a result of changes, additions or updates to the legislation on the processing of personal data.
Any changes will always be available by consulting this updated information.