Pursuant to Article 13 of Regulation (EU) 2016/679 (General Data Protection Regulation, so-called GDPR), we inform you that your personal data will be processed by Istituto Gentili S.r.l., the Data Controller, for the sole purpose of responding to your request to be contacted. If your request is not followed by further reports, your data will be stored for a maximum period of twenty-four months.
The legal basis of the processing is the execution of activities of a pre-contractual/contractual nature requested by the data subject (art. 6, paragraph 1, letter b) of the GDPR) consisting in sending the contact request. The provision of your personal data is free, however failure to provide the requested data will prevent us from effectively responding to your request.
If you decide to provide us with your data, we inform you that these will be processed by personnel authorized by the Data Controller, possibly also through outsourcers. Under no circumstances will your data be disseminated, but we inform you that they may be communicated to third parties who perform, on behalf of the Data Controller, specific services aimed at ensuring the correct pursuit of the aforementioned purposes.
The current legislation grants the Data Subject numerous rights; among these, the right to ask the data controller for access to the data and the rectification or erasure of the same or the limitation of the processing concerning him/her or to object to their processing, as well as the right to data portability; the right to withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given before the withdrawal.
To exercise the rights indicated, you can write an email to privacy@istitutogentili.com to the Data Controller at the address indicated in this policy. Alternatively, you can contact the Group DPO at the e-mail address dpo@mediolanum-farma.com. The GDPR also provides for the right to lodge a complaint with the Data Protection Authority or to take legal action if it believes that the processing is in violation of the provisions of the GDPR.
The Data Controller is Istituto Gentili S.r.l., with registered office in Milan, Via San Giuseppe Cottolengo n. 15, cap. 20143, Italy.