Privacy and Cookie Policy

REGULATORY REFERENCES

Directive 2002/58/EC – concerning the “processing of personal data and the protection of privacy in the electronic communications sector”
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

THE HOLDER OF THE TREATMENT

Following the consultation of this site, data relating to identified or identifiable persons may be processed. The “Owner” of their processing is Casa di Cura Igea SpA Via Marcona, 69 – 20129 Milan (MI). Casa di Cura Igea SpA has appointed a Data Protection Officer (DPO) who can be contacted at the email address igea.dpo@avvera.it.

THE HOLDER OF THE TREATMENT

Following consultation of this site, data relating to identified or identifiable persons may be processed. The “Owner” of their processing is Casa di Cura Igea SpA Via Marcona, 69 – 20129 Milan (MI). Casa di Cura Igea SpA has appointed a Data Protection Officer (DPO) who can be contacted at the email address igea.dpo@avvera.it.

PLACE OF DATA PROCESSING AND STORAGE PERIODS

The processing operations connected to the web services of this site take place within the EU and are handled by third-party suppliers in charge of occasional maintenance operations, appointed as Data Processors pursuant to Article 28 of the GDPR. The data collected will be stored - for each type of data processed - exclusively for the time necessary to fulfill the specific purposes indicated in the specific summary information displayed on the pages of the site and prepared for particular services.

TYPES OF DATA

Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected to be associated with identified, but by their very nature could, through processing and associations with data held by third parties, to identify users.

This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's computer environment.

These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site: except for this eventuality, at present the data on web contacts do not persist for more than seven days.

Data provided voluntarily by the user
The optional, explicit and voluntary sending of personal data by the user in the registration forms on this site entails the subsequent acquisition of the data provided by the sender, necessary for the provision of the requested service. Specific summary information will be progressively reported or displayed on the pages of the site set up for particular services on request.

COOKIES

Cookies are small text files containing a certain amount of information exchanged between a website and the user's terminal (usually the browser). They are mainly used for the purpose of making websites work and operate more efficiently, as well as to provide information to the owners of the site itself. Cookies can be either session or persistent. Session cookies remain stored in the terminal for a short period of time and are deleted as soon as the user closes the browser. Their use is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to allow safe and efficient exploration of the site. Persistent cookies, on the other hand, remain stored in the user's terminal until a pre-established expiry date. These, not being deleted directly when the browser is closed, allow the choices made by the user on their site to be remembered as well as to collect information about the pages of the site visited by the user, the frequency with which the site is visited and to identify the navigation path of users, in order to improve the experience on this site. Cookies, session or persistent, can finally be First Party or Third Party depending on whether the subject that installs the cookies on the user's terminal is the same manager of the site that the user is visiting (we will then speak of First Party cookies) or a different subject (we will then speak of Third Party cookies).

Cookies used by this site
This site uses both first-party and third-party cookies.

The “manage consent” function available upon first access and in the drop-down button at the bottom right of the page allows you to have information on the cookies that the site manages, to accept or reject them and to modify your choices.

OPTIONAL PROVISION OF DATA
Apart from what is specified for navigation data, the user is free to provide his/her personal data. However, failure to provide them may make it impossible to obtain what is requested.

METHOD 'OF TREATMENT
Personal data are processed, including with the aid of automated tools. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access. The Data Controller has adopted all the minimum security measures required by law and, inspired by the main international standards, has also adopted additional security measures to minimize the risks relating to the confidentiality, availability and integrity of the personal data collected and processed.

SHARING, COMMUNICATION AND DISSEMINATION OF DATA

The data collected may be transferred or communicated to other companies for activities strictly connected and instrumental to the operation of the service, such as management of the IT system. The personal data provided by users who forward requests for the sending of information material (brochures, information material, etc.) are used for the sole purpose of performing the service or performance requested and are communicated to third parties only if this is necessary for this purpose (companies that provide packaging, labeling, shipping services). Outside of these cases, personal data will not be communicated unless contractual or legal provisions are provided, or unless specific consent is requested from the interested party.

In this sense, personal data may be transmitted to third parties, but only and exclusively in the event that:
a) there is explicit consent to share the data with third parties;
b) there is a need to share the information with third parties in order to provide the requested service;
c) this is necessary to comply with requests from the Judicial Authority or Public Security.

No data deriving from the web service is disclosed.

RIGHTS OF

The legislation on the protection of personal data expressly provides for certain rights for the subjects to whom the data refers (so-called interested party). In particular, in relation to the processing of the aforementioned data, pursuant to Articles 15 et seq. of the Regulation, we remind you of the right to obtain access to the personal data concerning you; the rectification of data (correction of inaccurate data or integration), the deletion of data processed in violation of the law or if one of the reasons specified in Article 17 of the GDPR exists, as well as the right to data portability. You also have the right to lodge a complaint with a supervisory authority if you believe that the rights indicated here have not been recognized.

CHANGES TO THIS PRIVACY POLICY

The Owner periodically checks its privacy and security policy and, if necessary, revises it in relation to regulatory, organizational or technological changes. In the event of changes to the policies, the new version will be published on this page of the site.

QUESTIONS, COMPLAINTS, SUGGESTIONS AND EXERCISE OF RIGHTS

Anyone interested in further information, in contributing their own suggestions or in making complaints or objections regarding the privacy policies, the way in which our Company processes personal data, as well as in asserting their rights under the legislation on the protection of personal data, can contact the Data Controller by writing to Casa di Cura Igea SpA Via Marcona, 69 – 20129 Milan (MI) or by sending an email to the Data Protection Officer (DPO) at the email address igea.dpo@avvera.it.

Privacy information pursuant to art. 13-14 of the European "Privacy" Regulation (GDPR)

The personal data entered by you are processed by CASA DI CURA IGEA Via Marcona, 69 – 20129 Milan (MI) for purposes related to the provision of the services requested by you (for example: request information, register on the site to receive benefits and offers, obtain estimates, make purchases and receive them at an address indicated by you). The owner has appointed a Data Protection Officer who can be contacted at igea.dpo@avvera.it.

The legal basis for the processing is the execution of an agreement or the performance of pre-contractual activities.

The processing will be carried out electronically and will be made available to third parties designated as Data Processors who offer adequate security guarantees, necessary for the provision of essential services to meet your needs. These Processors, the list of which is available upon request, may belong to categories of subjects who support the Owner in providing the services offered through this site (such as, for example: software developers and website managers).

Furthermore, personal data will be processed for statistical analysis purposes, anonymously.

The data will be kept for the entire duration of the services requested by you or for longer periods only if provided for by the regulations.

At any time you can exercise the rights provided for in articles 15-22 of the GDPR by contacting the owner of this site.

To modify or delete only the data that are stored on the systems that provide this site.

In the event of a request for deletion of your data, we inform you that it may no longer be possible to continue to provide you with the requested service.

Finally, we inform you that you can submit a complaint with the Data Protection Authority, if you believe your rights have been violated.