INFORMATION REGARDING THE PROCESSING OF YOUR PERSONAL DATA
Personal Genomics undertakes to process your data in accordance with Legislative Decree 196/2003, with Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, relating to the protection of individuals with regard to processing of personal data, as well as the free circulation of such data and which repeals Directive 95/46 / EC (general regulation on data protection) as well as the indications of the Guarantor for the protection of personal data and in absolute confidentiality and confidentiality.
OBJECT OF THE TREATMENT
In order to be able to respond to your complaint, the Company will ask you to provide some of your data and possibly also of your family members, which will be processed in accordance with and for the purposes of the Privacy Law. In particular, the Data Controller will process the following data:
- common identification data (such as, by way of example and not limited to: name, surname, e-mail address, residence), as well as commercial and accounting data referring to your contractual relationships with Personal Genomics;
- special categories of personal data pursuant to art. 9 GDPR, such as those suitable for disclosing a state of health (through health documents, reports or medical records).
LEGAL BASIS AND PURPOSE OF THE TREATMENT
We wish to inform you that the data you provide us as a user of our services will be processed, without your consent being required, pursuant to articles 6, paragraph 1, lett. b), 6, 1 paragraph, lett. c), 9, 2 paragraph, lett. h) and 9, paragraph 2, lett. j) of the GDPR.
The data you provide to us as a mere complainant, on the other hand, will be processed without your consent being required, pursuant to articles 6, 1 paragraph, lett. f), 9, 2 paragraph, lett. f), h) and j).
In particular, we inform you that the data, requested or acquired by Personal Genomics, prior to the execution of the Service requested by you, during the same or after its termination, will be processed by us, in compliance with the Privacy Law, as well as with the obligations of confidentiality for the following purposes:
- taking charge of the complaint / praise / suggestion
- written response in the event of a complaint
The data will be processed solely for the resolution of the complaint, will not be disclosed to third parties and, without your consent, will not be processed for any purpose other than those agreed.
METHOD OF TREATMENT
The processing of your data, pursuant to art. 4 GDPR, may consist of the following activities: collection, registration, organization, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission or any other form of provision, limitation, cancellation or destruction of data.
Your data will be processed electronically and / or on paper.
The IT tools are conformed in order to ensure the separation of personal data from health data and held on company-owned systems and / or storage platforms made available to leading specialized companies linked to our company by service contract, in order to guarantee maximum security aimed at minimizing the risk of loss, destruction, unauthorized access.
All subjects who become part of the company’s service process are contractually bound to the obligation of maximum confidentiality and secrecy regarding the information learned. They are obliged to keep all data with the technical measures required by laws and technical safety regulations, with the prohibition of any use not contained in this information.
DATA RETENTION TIME
The data collected will be kept for 10 years from the resolution / response of the complaint.
You can exercise the following rights:
the interested party has the right to obtain confirmation of the existence or not of personal data concerning him, even if not yet registered, and their communication in an intelligible form. The interested party has the right to obtain the indication:
a) the origin of personal data;
b) the purposes and methods of the processing;
c) the logic applied in case of processing carried out with the aid of electronic tools;
d) the identity of the owner, manager and the representative appointed to process the data;
e) of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them as appointed representative in the State, managers or agents.
The interested party also has the right to obtain:
a) updating, rectification or, when interested, integration of data;
b) the cancellation at the end of the retention period indicated above or the transformation into anonymous form or the blocking of data processed in violation of the law or of this agreement, including those that do not need to be kept for the purposes for which the data has been collected or subsequently processed;
c) the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible o involves the use of means that are manifestly disproportionate to the protected right.
The interested party also has the right to object, in whole or in part:
a) for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
b) to the processing of personal data concerning him for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.
EXERCISE OF YOUR RIGHTS AND CLAIM TO THE GUARANTOR OF THE PROTECTION OF PERSONAL DATA
To exercise your rights, write to: Personal Genomics S.r.l., via Roveggia 43B 37136 Verona and / or to the Personal Data Protection Officer indicated below.
We also inform you that pursuant to current legislation you have the right to lodge a complaint with the Guarantor for the protection of personal data. For the submission of the complaint, you can use the method you deem most appropriate, delivering the complaint by hand to the offices of the Guarantor (at the address indicated below) or by forwarding:
- registered letter with return receipt addressed to “Guarantor for the protection of personal data”, Piazza di Monte Citorio, 121 00186 Rome;
- e-mail to the address: firstname.lastname@example.org, or email@example.com;
- fax to the number: 06-696773785.
For more information, please consult the Guarantor’s web page:
The Data Controller is Personal Genomic S.r.l., via Roveggia 43B 37136 Verona.
The processing of your personal data will take place at the headquarters of the Company and at the servers located in Italy at SOL S.p.A., with registered office in Via G. Borgazzi n. 27, 20900 – Monza (MB), VAT number 00771260965, that the Company pursuant to art. 28 GDPR, has appointed data controller.
Other external data processors may be designated in the future, whose updated list is always available and freely available at the headquarters of the Data Controller.
The SOL Group has made use of the faculty to appoint a group DPO Body, based in Monza, Via G. Borgazzi n. 27 (MB-Italy) at the registered office of the parent company SOL SPA. The data of the Members of the Body can be freely consulted at the Headquarters itself. The DPO Body can be contacted at the email: firstname.lastname@example.org.