Information pursuant to art. 13 and 14 of the European Regulation 679/2016 and consent

Pursuant to art. 13 and 14 of the European Regulation (EU) 2016/679 (hereinafter GDPR), and in relation to the personal data of which the Company will become available, we inform you as follows:

Data controller and person responsible for the protection of personal data

The data controller is Medic4All Italia S.r.l. (cf / p.iva 03548040967) in the person of the pro tempore legal representative (hereinafter also referred to as the "Company") with domicile elected in 20147 Milan, Via Raimondo Montecuccoli 20/1.

The Data Controller can be contacted by e-mail at servizioclienti@medic4all.it.

The Company has appointed a personal data protection officer (RPD or, Data Protection Officer, DPO) who can be contacted at the following e-mail address servizioclienti@medic4all.it, or to whom communications can be sent to the address 20147 Milan, Via Raimondo Montecuccoli 20/1.

Purpose of data processing

The treatment is aimed at the correct and complete provision of the service requested by the interested party.

Your data will also be processed in order to:

· comply with the obligations incumbent on the Company provided for by current legislation.

Personal data may be processed by means of both paper and computer archives (including portable devices) and processed in a manner strictly necessary to meet the purposes indicated above.

Legal basis of the processing

The Company processes your personal data lawfully, where the processing:

· it is necessary for the provision of the requested service;

· it is necessary to fulfil a legal or contractual obligation incumbent on the Company;

· is based on express consent (e.g., sending a newsletter containing updates on the services offered or promotions in progress).

Consequences of failure to communicate personal data

With regard to personal data relating to the provision of the service of which you are a beneficiary or applicant or relating to the fulfilment of a regulatory obligation (for example, the obligations related to the keeping of accounting and tax records), the failure to communicate personal data prevents the completion of the contractual relationship itself.

Data retention

Your personal data, processed for the purposes indicated above, will be kept for the period strictly necessary for the provision of the requested service.

Data communication

Your personal data may be disclosed to:

1. subjects who process data in execution of specific legal obligations;

2. judicial or administrative authorities, for the fulfilment of legal obligations, where provided;

3. the health facilities and / or the affiliated doctors who will provide the requested services;

4. the doctors of the operations centre who will provide the requested services.

Profiling and dissemination of data

Your personal data are not subject to disclosure or to any fully automated decision-making process, including profiling.

Rights of the interested party

The rights recognized to you by the GDPR include those of:

· ask the Company for your personal data and information relating to them; the correction of inaccurate data or the integration of incomplete ones; the cancellation of personal data concerning you (upon the occurrence of one of the conditions indicated in art.17, paragraph 1 of the GDPR and in compliance with the exceptions provided for in paragraph 3 of the same article); the limitation of the processing of your personal data (in the event of one of the hypotheses indicated in art.18, paragraph 1 of the GDPR);

· request and obtain from the Company - in the hypothesis in which the legal basis of the processing is the contract or consent, and the same is carried out by automated means - your personal data in a structured and readable format by automatic device, also for the purpose of communicate such data to another data controller (so-called right to the portability of personal data);

· oppose the processing of your personal data at any time in the event of particular situations concerning you;

· withdraw consent at any time, limited to cases in which the processing is based on your consent for one or more specific purposes and concerns common personal data (for example date and place of birth or place of residence), or particular categories of data (e.g., data revealing your racial origin, political views, religious beliefs, health or sex life). The treatment based on consent and carried out prior to the revocation of the same, however, retains its legitimacy;

· lodge a complaint with a supervisory authority (Authority for the protection of personal data - www.garanteprivacy.it).