Privacy policy
Privacy Policy pursuant to Articles 13 and 14 of Regulation (EU) 2016/679
Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (the “Regulation”), Intermedical Srl hereby provides its customers, including potential customers, as well as third parties in general (e.g. delegates, legal representatives, etc.) who come into contact with the same on behalf of or on behalf of customers, including potential customers (the “Data Subjects”), the information required by law relating to the processing of their personal data (“Personal Data”).
1.- Data Controller and Data Protection Officer
Intermedical Srl ( VAT no. 03426331215) , with registered office at Via Antonio Genovesi 13, Villaricca (NA) , represented by its legal representative pro tempore, is the entity that processes the data of the interested parties and, for legal purposes, is considered the Data Controller. In this capacity, it is responsible for ensuring the application of appropriate organizational and technical measures to protect data in compliance with the provisions of current legislation.
Intermedical Srl has appointed a Data Protection Officer (DPO), responsible for ensuring compliance with privacy regulations. For questions regarding the processing of personal data, please contact: mail@intermedical.it
2.- Methods of collecting Personal Data
The Personal Data processed by the Data Controller may be acquired from the Data Subject, including through remote communication techniques used by the Data Controller (e.g., websites, smartphone and tablet apps, call centers, etc.);
3.- Categories of Personal Data processed
The Personal Data processed by the Data Controller include, by way of example:
i. navigation data (e.g., IP addresses or domain names of computers used by users connecting to the site, the time of the request, the method used to submit the request to the server, the numerical code indicating the status of the response given by the server and other parameters relating to the operating system and browser used by the user, logs);
ii. personal data (e.g. name, surname, tax code, address, date and place of birth, nationality);
iii. contact details (e.g., landline and/or mobile telephone numbers, email address);
iv. profiling and marketing data (e.g. interests and passions);
v. other data attributable to the categories indicated above.
4.- Purpose and legal basis of the processing
Personal Data, under the conditions specified, will be processed for the purposes indicated below:
- Registration on the website and management of contact requests and/or information material
The data subject’s personal data is processed to carry out preliminary and subsequent activities following the website registration request, if applicable, as well as to manage requests for information and contact and/or the sending of informational materials, as well as to fulfill any other obligations arising therefrom.
The legal basis for this processing is the fulfillment of the services related to the request for registration, information and contact and/or sending of informative material and compliance with legal obligations.
Providing data is optional, however, any refusal by the interested party to provide the data will make it impossible for the Data Controller to follow up on the requested service.
- execution of the contract
Personal Data will be processed to manage the contractual relationship (for example, to bill fees, manage payments, or handle any complaints you may submit to us) and to provide the requested services available through the website.
The legal basis for this processing is the fulfillment of the services inherent in the contractual relationship and compliance with legal obligations.
Providing data is optional, however, any refusal by the interested party to provide the data will make it impossible for the Data Controller to follow up on the requested service.
- fulfillment of legal obligations, defense of a right in judicial or extrajudicial proceedings and prevention of fraud
Personal Data will be processed to fulfill legal obligations, as well as to ascertain, exercise, or defend the Data Controller’s rights and/or defend against claims of others, in or out of court. Specifically, the Data Controller may process Personal Data to fulfill accounting and tax obligations and to comply with orders issued by judicial authorities aimed at preventing and suppressing crimes.
The legal basis for this processing is the pursuit of the legitimate interest of the Data Controller, taking into account the balancing of the rights of the Data Controller and the Data Subject.
- promotional activities on Services/Products similar to those purchased
The processing of the Data Subject’s personal data occurs for the purpose of sending communications relating to promotions and offers for the Data Controller’s Services/Products that are identical and/or similar to those covered by the contract in force with the Data Subject, unless the Data Subject has objected to such processing initially or in subsequent communications.
The legal basis for this processing is the legitimate interest of the Data Controller to promote products or services in which the customer may reasonably be interested, taking into account the balancing of the rights of the latter and the Data Controller.
The interested party has the right to object at any time, for reasons related to his or her personal situation, to the processing of personal data concerning him or her for the purposes in question.
- Promotional activities on Services/Products offered by Intermedical Srl
The processing of the Data Subject’s personal data occurs for the purpose of sending, with prior specific consent, communications regarding promotions and offers for the Data Controller’s Services/Products via traditional methods (e.g., regular mail, telephone calls with an operator) and/or automated methods (e.g., e-mail, SMS, MMS, fax, pre-recorded telephone calls).
The legal basis for this processing is the consent given by the interested party prior to the processing itself, which can be freely revoked at any time, without prejudice to the lawfulness of the processing carried out previously.
Any refusal by the interested party to provide consent will make it impossible to use the relevant services, without this having any detrimental consequences for the contractual relationship with the data controller.
- Marketing purposes relating to products or services of Intermedical Srl partners
The processing of the interested party’s personal data takes place for the sending, with prior specific consent, of communications regarding promotions and offers of Services/Products from commercial partners of Intermedical Srl through traditional methods (e.g., regular mail, telephone calls with an operator) and/or automated methods (e.g., e-mail, SMS, MMS, pre-recorded telephone calls).
The legal basis for this processing is the consent given by the interested party prior to the processing itself, which can be freely revoked at any time, without prejudice to the lawfulness of the processing carried out previously.
Any refusal by the interested party to provide consent will make it impossible to use the relevant services, without this having any detrimental consequences for the contractual relationship with the data controller.
- profiling
The processing of the Data Subject’s Personal Data, including location data and sociodemographic data acquired during the provision of electronic communication services and from public sources, occurs, with the prior specific consent, for profiling purposes, such as analyzing the data transmitted and the Services/Products purchased in order to deliver advertising messages and/or commercial offers in line with the choices expressed by the users themselves. This activity will be carried out in aggregate and anonymized form through the implementation of models for analyzing customer data using statistical algorithms, predictive models, and aggregations only for the time strictly necessary for the purposes pursued, the type of goods marketed, or the services rendered.
In any case, Personal Data will not be subject to decisions based solely on automated processing, including profiling, which produce legal effects or similarly significantly affect the data subject.
The legal basis for this processing is the consent given by the interested party prior to the processing itself, which can be freely revoked at any time, without prejudice to the lawfulness of the processing carried out previously.
Any refusal by the interested party to provide consent will make it impossible to use the relevant services, without this having any detrimental consequences for the contractual relationship with the data controller.
5.- Recipients of personal data
The personal data collected may be disclosed to entities acting, as appropriate, as independent Data Controllers or Data Processors, for the purposes set out above, in compliance with legal, regulatory, and/or EU legislation obligations, or because they hold a legitimate interest.
In particular, Personal Data may be made available to:
– entities responsible for carrying out activities related and instrumental to the processing (archiving service companies, IT service companies, social media management service companies, marketing companies, insurance companies, banking institutions);
– commercial partners of Intermedical Srl ;
– Public administrations, authorities, and other entities in compliance with legal obligations;
Personal Data will not be disclosed (made available to unspecified parties).
6.- Transfer of data to third countries
The Data Subject’s Personal Data is stored in archives located in European Union countries. Where necessary for the pursuit of the stated purposes, the Data Subject’s Data may be transferred abroad, to countries/organizations outside the European Union that guarantee a level of personal data protection deemed adequate by the European Commission, or in any case based on other appropriate safeguards, such as the Standard Contractual Clauses adopted by the European Commission or the Data Subject’s consent. The Data Subject has the right to obtain a copy of any Data transferred abroad, as well as the list of countries/organizations to which the data has been transferred, by writing to mail@intermedical.it
7.- Period of retention of personal data
The Data will be retained in a form that permits identification of the Data Subject for a period of time no longer than necessary to achieve the purposes for which it was collected, taking into account the laws applicable to the activities and sectors in which the Data Controller operates. After the aforementioned periods, the Data will be deleted or anonymized, unless further retention is necessary to fulfill obligations (e.g., tax and accounting) that persist even after the termination of the contract (Article 2220 of the Italian Civil Code) or to comply with orders issued by Public Authorities and/or Supervisory Bodies.
The duration of the cookies used on the site can be found in the specific Cookie Policy: [Link]
In the event of a dispute, the retention period indicated above may be extended up to 10 years from the resolution of the dispute.
8.- Methods of treatment
The processing will be carried out by authorized personnel who need to have knowledge of it in carrying out their activities, with the aid of electronic tools, according to principles of lawfulness and correctness, in order to protect the privacy and rights of the interested party at all times in compliance with the provisions of current legislation.
Marketing-related profiling (analysis of consumer habits and choices) occurs through an automated process aimed at studying and analyzing behavioral profiles and aspects characterizing the customer base to optimize promotional activities for products and services.
9.- Rights of the interested party
The interested party has the right to ask the Data Controller:
i. confirmation as to whether or not your Personal Data is being processed and, where that is the case, to obtain access to it (right of access);
ii. the rectification of inaccurate Personal Data or the integration of incomplete Personal Data (right to rectification);
iii. the deletion of the Personal Data if one of the reasons provided for by the Privacy Regulation exists (right to be forgotten);
iv. the limitation of the processing of Personal Data when one of the hypotheses provided for by the Privacy Regulation applies (right to limitation);
v. to receive the Personal Data provided to the Data Controller in a structured, commonly used and machine-readable format and to transmit such data to another Data Controller (right to portability);
vi. to object at any time, in whole or in part, to the processing carried out for the pursuit of a legitimate interest of the Data Controller and for marketing and profiling purposes (right to object);
vii. to withdraw any consent to the processing of Personal Data, at any time, without prejudice to the lawfulness of the processing based on the consent given before the withdrawal.
Consent given for marketing activities using automated contact methods (e.g., SMS, MMS, fax, phone calls, email, web applications) also extends to traditional contact methods (postal mail or telephone calls with an operator). Similarly, objection to marketing activities using automated contact methods also extends to traditional contact methods. Your right to provide consent or to object to only one of the two marketing methods remains unaffected.
To exercise their rights, the interested party may send a message to the email address mail@intermedical.it or a written communication to the Data Controller at the registered office of Intermedical Srl .
The interested party also has the right to lodge a complaint with the competent supervisory authority in Italy (the Italian Data Protection Authority), or with the authority performing its duties and exercising its powers in the Member State where the violation occurred, as provided for by Article 77 of the Regulation, as well as to take appropriate legal action pursuant to Articles 78 and 79 of the Regulation.
10.- Cookie
For information on the use of cookies, please see the specific Cookie Policy .