Privacy Policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ARTICLE 13 OF REGULATION (EU) NO. 679/2016 (GDPR)

THE CONTROLLER

Istituto Ganassini Spa di Ricerche Biochimiche, with headquarters in Via P. Gaggia 16, 20139 Milano – VAT 00885180158, hereinafter referred to as “Controller”, hereby informs you, pursuant to article 13 of Regulation (EU) No. 679/2016 (hereinafter “GDPR”) that personal data will be processed in the manner and for the purposes specified below.

PURPOSES OF DATA PROCESSING

Personal data will be processed only after specific and separate consent has been granted (article 7, GDPR), for one or more of the following purposes:

  • Management of the relationship with the data subject (Customer and/or potential Customer) in respect of the purchase of products placed on the market by the Controller and corresponding processing operations (delivery, invoicing, etc.)
  • Direct and indirect marketing activities, through the forwarding of promotional messages to the data subject by means of various communication methods indicated below.
  • Management of information for potential personnel recruitment.
  • Answering enquiries sent from contact pages and managing customer care.

Any refusal to disclose such personal data shall not entail any consequence, except for the inability to send you promotional and marketing messages and to use the described services (or part of them) provided by the Controller.

DATA RETENTION PERIOD

For these purposes, the data will be kept for the time strictly necessary for the implementation/management of the relationship with the Customer, including product recall requirements, in accordance with the provisions in force as well as, for direct and indirect marketing purposes only, for a period consistent with the purposes and commercial dynamics related to the nature of the product itself. Personal data will be processed until the data subject decides, at any given time, to object to their processing and/or to obtain the cessation of such processing and the erasure of the data. With regard to information for personnel recruitment, data will be automatically erased one year after receipt.

NATURE OF DATA CONFERRAL

The conferral of data is voluntary; however, refusal to provide certain data may make it impossible to carry out the services relating to the relationship with the customer.

Consent for marketing purposes may in any case be withheld without this entailing any burden or damage for the data subject in relation to his or her position vis-à-vis the Controller.

TYPE OF DATA PROCESSED

Personal data, billing data, as well as data relating to commercial choices, for marketing purposes only.

Professional data and Curriculum Vitae of recruitment applicants.

METHODS OF DATA PROCESSING

The data may be processed by manual, paper-based, computerised and telematic means with methods strictly related to the purposes indicated and, in any case, with methods suited to guaranteeing security and confidentiality in accordance with the provisions of Article 32 of the GDPR (security of processing).

SCOPE OF DATA DISSEMINATION

The data may circulate within the Controller’s company within the limits of what is necessary for the pursuit of the above-mentioned purposes and in any case in compliance with the security measures necessary to avoid loss or leakage of the data. The data or some of the data may be disclosed to other associate companies and service providers that process the data on behalf of the Controller. The data will not be disseminated in any other way.

The data will be processed within the European Union.

DATA SUBJECT’S RIGHTS

At any time, the data subject may exercise the rights set out in Articles 15 et seq. of the GDPR, including:

RIGHT TO ACCESS:

The right to obtain confirmation as to whether or not personal data concerning him or her are being processed and, where that is the case, access to the personal data – including a copy thereof – and inter alia, the following information:

  • the purposes of data processing.
  • the categories of personal data concerned.
  • the recipients to whom the data have been or will be disclosed.
  • the period for which the data will be stored or the criteria used to determine that period.
  • the existence of automated decision-making processes, including profiling.
RIGHT TO RECTIFICATION:

the right to obtain, without undue delay, the rectification of inaccurate personal data concerning him or her and/or the completion of incomplete personal data.

RIGHT TO ERASURE:

the right to have personal data concerning him or her erased without undue delay when:

a) the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
b) he/she has withdrawn his/her consent.c) the data have to be erased for compliance with a legal obligation.

The right to erasure does not apply to the extent the processing is necessary for compliance with a legal obligation or for the performance of a task carried out in the public interest or for the establishment, exercise or defence of legal claims.

RIGHT TO RESTRICTION OF PROCESSING:

the right to obtain restriction of processing, when:

a) the accuracy of the personal data is contested by the data subject.
b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead.c) the controller no longer needs the personal data for the purposes of the processing, but they are required for the establishment, exercise or defence of legal claims.d) the data subject has objected to processing.

RIGHT TO OBJECT:

the right to object, at any time to processing of personal data concerning him or her based on the condition of legitimate interest, including profiling, unless the Controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

THE RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY:

the right to lodge a complaint with the Italian Data Protection Authority.

THE RIGHT TO RECEIVE INFORMATION ON THE ORIGIN OF PERSONAL DATA:

if it was not collected from the data subject

The consent granted for data processing may be withdrawn at any time, resulting in the discontinuation of processing and preventing the Controller from continuing to use the data for the purpose for which consent was denied.

These rights may be exercised vis-à-vis the Controller as identified above by sending an email to the address “privacy@ganassini.it” or by registered letter with return receipt sent to “Privacy – Istituto Ganassini SpA di Ricerche Biochimiche, Via Gaggia 16 20139 Milano”.

COOKIE POLICY

The site uses cookie technology.

Cookies are used for various purposes, including managing the authentication process, monitoring browsing sessions, storing configuration information and preferences, and more. The processing of the data stored in the cookies is carried out with the aid of automated computer and telematic tools, with methods strictly related to the purposes expressed above and, in any case, so as to ensure the security and confidentiality of the data.

Cookies can be either technical or profiling.

Technical cookies (which do NOT require explicit consent)

According to current Italian legislation, technical cookies, i.e. those used for the sole purpose of managing navigation or to provide an explicitly requested service, do not require explicit consent.

Technical cookies include:

  • analytics cookies where used directly by the operator of the site to collect information, in pooled form, on the number of users and how they visit the site,
  • navigation or session cookies (to authenticate, to make a purchase, etc.),
  • functional cookies, which allow the user to navigate according to a set of selected criteria (e.g., language, products selected for purchase) in order to improve the service.

Profiling cookies (which require explicit CONSENT):

Profiling cookies are designed to create user profiles and are used to send advertising messages in line with the preferences expressed by the user while browsing.

Due to the particular invasiveness that such devices can have in the private life of users, the law requires users to be adequately informed about the use of such devices and to give their valid consent.

Profiling cookies require the prior acquisition of the user’s voluntary informed consent, which the Site acquires in the forms provided for by the Order by means of the banner that appears on the first visit as well as through the extended information notice that allows the user to grant or deny consent.

Blocking cookies

The User can select which cookies to authorise through the appropriate procedure, as well as authorise, block or delete (all or part of) the cookies also through the specific functions of his or her browser.
However, if all or some of the cookies are disabled, the website may not be available to you or some of the services or features of the site may not be available or may not function properly and/or you may be required to change or manually enter certain information or preferences each time you visit the site.

As already indicated in the banner that immediately appears on the first visit to the website, consent to the use of all the cookies used will be granted by the User by clicking the virtual acceptance button or by continuing to browse the website (e.g. by ignoring the banner/pop-up and carrying out further operations).
The User will also have free access to the link to the extended information notice, complete with all the information relating to cookies (description, purpose and storage), in which the User of the website will be able to express consent only for certain categories of cookies.