E-commerce Policy

Dear Customer, in compliance with current legislation on the protection of personal data, MIR - Medical International Research S. p. A. with registered offices in 00155 - Rome, Via del Maggiolino 125, VAT number 04564101006, e-mail mir@spirometry.com, in its capacity as Data Controller, will use your personal data to perform the activity indicated below:

• online purchase: to execute your purchase orders for the products marketed by the Data Controller, to fulfil the related administrative and accounting obligations (e.g. for order processing, correspondence, invoicing, etc.) and to deliver the same via the e-commerce platform.

The fields indicated as compulsory, if not filled in, will make it impossible to execute your purchase orders made through the e-commerce site. Optional data, if not provided, will have no effect on the online purchase of products. The evaluation of the compulsory data has been made taking into account the principles of necessity and proportionality in the processing in compliance with the Privacy Regulation (GDPR) and all specific sector regulations.

With reference to the purposes connected to online purchases, the provision of data is necessary in order to execute your purchase orders made through the e-commerce website: failure to provide such data will make it impossible for you to make online purchases of the Controller's products. The legal basis of the processing is, in fact, the execution of the services provided on the e-commerce site, pursuant to Article 6, paragraph 1, letter b of the Privacy Regulation.

The data you provide will be processed mainly by computerised means under the authority of the Data Controller, by staff specifically authorised and trained in the processing pursuant to Articles 28 and 29 of the Privacy Regulations and Article 2-quaterdecies of the Privacy Code. We inform you that appropriate security measures are observed, also pursuant to Articles 5 and 32 of the Privacy Regulation, to prevent the loss of data, unlawful or incorrect use and unauthorised access.

Personal data subject to processing will be kept for the time strictly necessary with regard to the contractual relationship of online purchase, as well as, thereafter, for the fulfilment of all legal obligations connected with or arising from the contract you have entered into with the Company.

Your data may be communicated within the EU, in full compliance with the Privacy Regulation, to the following entities:

1. entities and/or other public authorities, where required by law or at their request;
2. the structures, subjects and external companies that the Data Controller uses to carry out activities that are instrumental and/or incidental to the online purchase, including suppliers of software solutions, web applications and storage services also provided through Cloud Computing systems (all data will be stored on servers located in the territory of the European Community);
3. external consultants (e.g. for tax compliance management), if not designated in writing as data processors.

The up-to-date list of designated data processors can be provided upon request by the data subjects.

In the event that a Data Protection Officer is appointed, the identification data of the Data Protection Officer will be disclosed by publication of the same, supplementing this notice.

At any time, you may exercise your rights under Articles 15 et seq. of the Privacy Regulation, for access, rectification, transformation, blocking, cancellation, limitation of processing, in the manner set out in Article 12 of the Privacy Regulation.

The complete model for exercising rights can be found at the following link with instructions on how to complete it and send it to the Controller.

In the event of failure to receive a timely reply or inadequate response from the undersigned company, or if you believe there has been a violation of the Privacy Code and/or the Privacy Regulations, you may appeal to the Garante per la Protezione dei Dati Personali, at the following coordinates: www.gpdp.it - www.garanteprivacy.it, Email: protocollo@gpdp.it, Telephone switchboard: (+39) 06.69677.1.