Dear Customer, in compliance with current legislation on the protection of personal data, MIR - Medical International Research S. p. A. with registered offices in 00155 - Rome, Via del Maggiolino 125, VAT number 04564101006, e-mail firstname.lastname@example.org, in its capacity as Data Controller, will use your personal data to perform the activity indicated below:
The fields indicated as compulsory, if not filled in, will make it impossible to execute your purchase orders made through the e-commerce site. Optional data, if not provided, will have no effect on the online purchase of products. The evaluation of the compulsory data has been made taking into account the principles of necessity and proportionality in the processing in compliance with the Privacy Regulation (GDPR) and all specific sector regulations.
With reference to the purposes connected to online purchases, the provision of data is necessary in order to execute your purchase orders made through the e-commerce website: failure to provide such data will make it impossible for you to make online purchases of the Controller's products. The legal basis of the processing is, in fact, the execution of the services provided on the e-commerce site, pursuant to Article 6, paragraph 1, letter b of the Privacy Regulation.
The data you provide will be processed mainly by computerised means under the authority of the Data Controller, by staff specifically authorised and trained in the processing pursuant to Articles 28 and 29 of the Privacy Regulations and Article 2-quaterdecies of the Privacy Code. We inform you that appropriate security measures are observed, also pursuant to Articles 5 and 32 of the Privacy Regulation, to prevent the loss of data, unlawful or incorrect use and unauthorised access.
Personal data subject to processing will be kept for the time strictly necessary with regard to the contractual relationship of online purchase, as well as, thereafter, for the fulfilment of all legal obligations connected with or arising from the contract you have entered into with the Company.
Your data may be communicated within the EU, in full compliance with the Privacy Regulation, to the following entities:
The up-to-date list of designated data processors can be provided upon request by the data subjects.
In the event that a Data Protection Officer is appointed, the identification data of the Data Protection Officer will be disclosed by publication of the same, supplementing this notice.
At any time, you may exercise your rights under Articles 15 et seq. of the Privacy Regulation, for access, rectification, transformation, blocking, cancellation, limitation of processing, in the manner set out in Article 12 of the Privacy Regulation.
The complete model for exercising rights can be found at the following link with instructions on how to complete it and send it to the Controller.
In the event of failure to receive a timely reply or inadequate response from the undersigned company, or if you believe there has been a violation of the Privacy Code and/or the Privacy Regulations, you may appeal to the Garante per la Protezione dei Dati Personali, at the following coordinates: www.gpdp.it - www.garanteprivacy.it, Email: email@example.com, Telephone switchboard: (+39) 06.69677.1.