HomePrivacy Policy

Data Protection Officer

The Data Controller has appointed a Data Protection Officer (DPO) in accordance with Article 37(2) of the GDPR. The DPO can be contacted at vincenzo@mondelli.eu or at the office of the data controller.

Purpose and legal basis of processing

a)  Handling of requests for information: the optional, explicit and voluntary sending of e-mail messages to the addresses indicated on this website entails the acquisition of the sender’s e-mail address or telephone number, which are necessary to reply to the requests, as well as any other personal data contained in the message or referred to by the customer. Failure to provide the requested data may make it impossible for the Data Controller to fulfil the request of the data subject. “Processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures taken at the request of the data subject” Article 6(1)(b) of Regulation (EU) 2016/679;

b) Profiling activities: subject to the explicit consent of the user, profiling activities will be carried out on the data collected through browsing. “The data subject has given his or her consent to the processing of his or her personal data for one or more specific purposes” Article 6(1)(a) of Regulation (EU) 2016/679.

c) Website browsing and improvement. For more details on these purposes and types of data, please visit the “Cookie Policy” section.

Category of personal data processed

For the purposes set out above, the main personal data that may be processed is the common personal data (e.g. name, surname, telephone number and e-mail address) provided when contacting us via the methods provided by the website, or data collected through cookies

Personal data processing methods

Processing will be carried out using manual, computerised and telematic tools, in accordance with the regulations in force and the principles of lawfulness, correctness, transparency, pertinence, completeness and non-excessive nature, accuracy and with organisational and processing logics strictly related to the purposes pursued, and in any case in such a way as to guarantee the security, integrity and confidentiality of the data processed, in compliance with the organisational, physical and logical measures provided for by the regulations in force. Your personal data and what you communicate through our channels may be communicated to other offices of the data controller for proper management.

Data Retention Period

Personal data will be kept only for as long as is necessary to pursue the purposes for which they were collected and processed, without prejudice to longer periods necessary to comply with the retention obligations to which the controller is subject by reason of the nature of the data or document or in order to fulfil specific legal obligations.

Dissemination, possible recipients or categories of recipients of the data

The data will not be disseminated in any way. The data provided will be processed exclusively by persons authorised to process such data and duly instructed, under the supervision of the data controller, and by data processors linked to the data controller by a specific contract (art. 28 of Legislative Decree 2016/679), such as: companies that provide services for the management of the website, that manage the various services/programs or, in any case, that provide services necessary for the proper management of the website. The data will be processed only for the purposes for which they are collected, therefore the persons in charge and responsible will process the data only when strictly necessary; in other cases, anonymous processing will be preferred. The data will be processed within the European Economic Area. An updated list of all data processors may be requested at any time from the aforementioned Data Processors. The data may also be communicated to third parties (public bodies, police forces, judicial authorities, etc.), but only for the purpose of fulfilling legal or regulatory obligations or EU legislation, in which case the third parties will act as autonomous data controllers.

Rights of the data subject

In order to exercise the rights set out in Articles 15-22 (including the right to obtain information on the data concerning you, access, update, rectification, portability or erasure of the data, as well as the right to restrict or object to the processing, the right to lodge a complaint with a supervisory authority, etc.), you may simply write to privacy.italy@euromed-pharma.com or to the DPO, who can be contacted at the following e-mail address: vincenzo@mondelli.eu.

You may also exercise your right to lodge a complaint with a Supervisory Authority (such as the Garante per la Protezione dei Dati Personali, with offices in Piazza Venezia 11 – 00187, Rome (RM), Italy (IT), E-mail: garante@gpdp.it, PEC: protocollo@pec.gpdp.it).

The data controller may make changes to this policy from time to time. Users are advised to periodically consult the “Privacy Policy” section to keep up to date with the processing methods.

Date last updated: 14/03/2024