Petrone Group Srl cares about privacy and the protection of your personal data. We hereby wish to inform you about how we process your personal data in order to manage your navigation on the site, any registration as a user, to answer your questions and, if you wish, to send you personalized communications.
This policy applies to the website www.petrone.it (hereinafter, the “Site”).
What personal data will we use (hereinafter, collectively, the “Data”)?
You may access the Site without the need to provide any Personal Data. However, the information systems used to manage the Site will, during their normal operations, acquire some Personal Data, the transmission of which is considered as implied in the use of Internet communication protocols. These data are not collected with a view to being associated with identified data subjects, but given their nature they may, through processing and association procedures, allow the individuals who navigate through the Site to be identified.
This category includes, for example, the IP addresses of the computers that connect to the Site, the URL of the requested resources and the time of the request.
These Data are used, on a de-identified basis, for statistical purposes in relation to the use of the Site and to monitor the proper operation of the Site. The Data are erased immediately after processing.
With respect to such Data, no individually identifiable information will be processed.
In addition, in order to process your requests for information and/or allow you to access the database having as its object information on pharmaceutical products and medical devices, and available at www.platform.petrone.it (the “Database”) we need to process the Data requested in the relevant forms, such as:
– first and last name, email, telephone number;
– company name, sector, functional area and profession/task;
– access credentials (user name and password);
With your consent, we may also collect Data in ways different from those just described.
More specifically, we may collect
– information that we may acquire by reviewing your interaction with us, through emails and newsletters, through our websites;
– information that you may share through social networks to which you are subscribed.
For what purposes and based on what legal grounds will we use your Data?
We will use your Data, including by relying on electronic tools, to:
(a) Allow you to navigate through the Site. To this end, we will only process navigation data
b) To create an account in order to allow you access to the Database and/or to respond to your requests for information.
While providing your Data is optional, your refusal to do so, whether partly or wholly, may prevent us from fulfilling your requests as appropriate.
With your consent, requested during the creation of the account for the access to the Database, we may also use your Data for the following purposes
(c) to contact you for commercial purposes as well as to send advertising material or carry out direct sales activities on products, services and other activities of the Company, or to carry out market research. We may, for example, send you e-mails or instant messages (e.g. SMS and WhatsApp), or contact you by telephone to submit commercial offers, initiatives and proposals for collaboration (even different from those requested by you) from us and/or our commercial partners;
d) to examine your preferences and the ways in which you interact with us. In particular, in order to better understand your interests in our services, we may examine – including through the use of electronic tools – the information you provide in the contact forms, your interest in communications and newsletters that we send you, the frequency of our websites and interest in our social channels. In any case, this profiling activity is designed to better customize our services and to send you communications more responsive to your preferences.
Who is the data controller?
The data controller is Petrone Group S.r.l., whose contact details are listed below.
How long will we store your Data?
For the purposes referred to in letters a) and b) your Data will be processed a period of time strictly necessary to achieve the purposes for which they were collected and in compliance with the applicable regulations.
For the purposes referred to in letters (c) and (d), your Data will be processed until you decide to withdraw your consent, and, in any case, information relating to your interaction with us will not be kept for more than 12 months from the date of collection.
Who will we share your Data with?
In order to meet the requirements related to the processing purposes mentioned above, your Data may be disclosed to third parties, including service providers (e.g. electronic communication service providers) as well as other external entities, where required by law or entitled to do so. If you wish to receive a full list of these companies, please send a written request to the contacts shown below.
How will the transfer of your Data to non-EU countries be regulated?
Your Data will not be transferred outside the territory of the European Union.
What rights do you have over your Data?
You have the rights of access, rectification, erasure, limitation of and opposition to the use of the Data by us, as well as the right to request the transfer to you of some of the Data.
Rights of the data subject
Right of access
The data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:
(a) The purpose of processing;
(b) The categories of personal data concerned;
(c) The recipients or categories of recipients to whom the Personal Data have been or will be disclosed, in particular recipients of third-party countries or international organisations, with confirmation as to whether adequate safeguards are in place;
(d) Where possible, the envisaged period for which the personal data will be stored or, if not possible, the criteria used to determine that period;
(e) The existence of the right to request from the controller rectification or erasure of personal data or restriction of processing concerning the data subject or to object to such processing;
(f) The right to lodge a complaint with a Supervisory Authority;
(g) Where the personal data have not been collected from the data subject, any available information on their source;
(h) The existence of an automated decision-making process, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her and, at least in those cases, meaningful information about the rationale, the significance and the envisaged consequences of such processing for the data subject.
Right to rectification
You have the right to obtain, without undue delay, the rectification of any inaccurate personal data concerning you.
Right to erasure
You have the right to obtain the erasure, without undue delay, of your personal data if there are any of the following reasons:
(a) personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
(b) you have withdrawn your consent to the processing and there is no other legal grounds for the processing;
(c) you objected to the processing, and there is no overriding legitimate grounds for doing so;
(d) the personal data have been unlawfully processed;
(e) personal data have to be erased for compliance with a legal obligation.
Right to restriction of processing
You have the right to obtain the restriction of processing when one of the following applies:
a) contest the accuracy of personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
(b) the processing is unlawful and you oppose to the erasure of the personal data and request the restriction of their use instead;
c) although the data controller no longer needs the personal data for the purposes of processing, but they are necessary for ascertaining, exercising or defending a right in court;
d) you objected to processing, pending verification of the possible prevalence of our legitimate grounds.
Right to object
The data subject has the right to object at any time to the processing of personal data concerning him or her which is based on the data controller’s legitimate interest, including profiling. The data subject has the right to object at any time to the processing of personal data concerning him or her for direct marketing purposes, including profiling to the extent that it is related to such direct marketing.
Right to data portability
You have the right to receive in a structured format, commonly used and readable by automatic device, the personal data concerning you in our possession and you have the right to transmit such data to another data controller without hindrance by the data controller to which you provided them if:
(a) the processing is based on consent or on a contract; and
(b) the processing is carried out by automated means.
At your request and if technically feasible, you can obtain the direct transmission of personal data to another data controller.
Right to file a complaint before the competent Data Protection Authority
When the data subject holds that the processing of his/her personal data is carried out breaching the provisions of the EU Regulation no. 2016/679, he/she is entitled to file a complaint before the competent Data Protection Authority in order to protect his/her rights.
How can you change your preferences or withdraw consent?
At any time, you may check, modify or revoke your consent in relation to the purposes set out under letters (c) and (d) You can simply contact the Company at the addresses specified below.
How to contact Petrone Group Srl and the Data Protection Officer in order to exercise your rights?
You may exercise your rights by writing to the data controllers, and/or Data Protection Officer at the address below:
Petrone Group S.r.l.
Registered office: Via 25 Aprile n.56 – 20040, CAMBIAGO (MI), Italy
The Data Protection Officer: firstname.lastname@example.org
How to contact the relevant Supervisory Authority to lodge a complaint
Any complaints may be submitted to your local data protection authority or, if you prefer, to the Italian Data Protection Authority:
Garante per la Protezione dei Dati Personali [Authority for the Protection of Personal Data]
Piazza di Monte Citorio n. 121
Fax: (+39) 06.69677.3785
Telephone: (+39) 06.696771
Certified email: email@example.com
How will you be informed of any changes to this Privacy Notice?
This Privacy Notice may be subject to changes and updates as a result of changes concerning the way we process your Data or other information provided to you hereunder. Any changes will ensure, in any case, the full protection of your rights. If any changes are made that may limit the guarantees for the protection of your Data or your rights with respect to the current version, before the processing of your Data begins in the new manner, you will be promptly informed through the contacts provided and you will be guaranteed the right to cancel or, in any case, to modify your consents and preferences.