Privacy e Cookie Policy

Home / Privacy e Cookie Policy

Privacy information for the abmedica.it website

Respecting the privacy of our visitors is of paramount importance to us, which is why the amount and nature of the data collected during a session has been minimised as far as possible and all the necessary precautions have been taken to ensure their security.

Please be aware that this information applies only to the abmedica.it website and not to other websites the user may visit via links on the aforementioned website.

In compliance with the provisions of Italian Legislative Decree 196/2003, Personal Data Protection Code, and the General Data Protection Regulation – Regulation (EU) 2016/679, ab medica s.p.a., as data controller, would like to inform you of the following.

Personal data processed and purposes of processing

Data acquired automatically

As part of normal website navigation by the user, the computer systems responsible for the functioning of this website acquire some personal data whose transmission is associated with the use of Internet communication protocols (IP addresses, domain names of the computers used by users who visit the site, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code denoting the status of the response given by the server, etc.) and other parameters pertaining to the operating system and the user’s computing environment.

These data are used for the sole purpose of acquiring anonymous statistical information on the use of the website and to monitor its correct operation. Data collected could be used to ascertain responsibility in the event of hypothetical cybercrimes against the website.

Data provided willingly by users

Personal data provided willingly by users by completing the contact form or via any other forms of communication available on our website are used for the sole purpose of responding to requests submitted. For example, entering an email address in the contact form implies its acquisition, which is necessary to respond to any requests submitted, as well as the acquisition of any other personal data included in the message.

Your personal data may be shared for the specified purposes with our duly authorised partners within the scope of their respective duties.

Data collected may be transferred outside of the country, as necessary and for the same purposes, where required by law.

Processing methods and storage periods

Processing shall be performed by manual (hard copy) and automated (digital) means by the controller and authorised parties, who shall take all precautionary measures to ensure data security and confidentiality.

Collected personal data pertaining to navigation shall be stored in order to conduct checks on the management of the website and its security for the necessary period of time, which, except for special cases, is 6 months.

Your personal data provided through forms, and specifically contact forms, shall be stored for as long as necessary to follow up on your requests. Please refer to the specific information for each form.

Optional provision of personal data

Apart from navigation data, which are automatically recorded, the user is free to provide personal data (for example, first name, surname, address, email, etc.) requested in the forms available on the website. Failure to provide such data may make it impossible to fulfil the request.

Legal basis for processing

The lawfulness of the processing performed is based on:

  • the legitimate interest of the controller to process personal data pertaining to traffic, to the extent strictly necessary and proportionate to ensure the security of the system, perform statistical analyses and assess the functionality of the website;

Disclosure of collected data

In pursuit of the aforementioned purposes, your personal data will be disclosed to employees, as well as to equivalent staff and partners of the controller, in their role as parties authorised to process personal data.

Your personal data shall also be disclosed and processed by third parties belonging to the following categories:

  1. parties appointed by the controller to manage the website;
  2. companies that manage the controller’s IT system;
  3. companies and consultants that provide legal and/or tax consultancy services;
  4. oversight and supervisory authorities and bodies, and public or private individuals in general with public law-related functions.

The parties belonging to the above categories in some cases operate completely autonomously as separate data controllers, and in other cases as processors specifically appointed by the controller in compliance with Article 28 of the GDPR.

A complete and updated list of parties to whom your personal data may be disclosed can be requested from the controller’s registered office by writing to privacy@abmedica.it.

Rights of data subjects

With regard to the processing described in this information sheet, as a data subject, you may, in accordance with the conditions established by the GDPR, exercise the rights enshrined in Articles 15 to 21 of the GDPR and, in particular, the following rights:

  • right of access – Article 15 GDPR: right to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to your personal data – including a copy thereof – and communication of at least the following information:
    • the purposes of the processing
    • the categories of personal data concerned
    • the recipients to whom the personal data have been or will be disclosed
    • the data storage period or the criteria used
    • rights of the data subject (rectification, erasure of personal data,
      restriction of processing and right to object to processing)
    • right to lodge a complaint
    • right to receive information on the source of my personal data
      if it has not been collected from the data subject
    • the existence of automated decision-making, including
      profiling
  • right to rectification – Article 16 GDPR: right to obtain, without undue delay, the rectification of inaccurate personal data concerning you and/or the right to have incomplete personal data completed;
  • right to erasure (‘right to be forgotten’) – Article 17 GDPR: the right to obtain the erasure of personal data concerning you without undue delay, when:
    • the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
    • you withdraw consent and there is no other legal ground for the processing;
    • you successfully object to the processing of your personal data;
    • the data have been unlawfully processed;
    • the data have to be erased for compliance with a legal obligation;
    • the personal data have been collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR.
      The right to erasure shall not apply to the extent that processing is necessary for compliance with a legal obligation or for the performance of a task carried out in the public interest or for the establishment, exercise or defence of legal claims.
  • right to restriction of processing – Article 18 GDPR: the right to obtain restriction of processing when:
    • the accuracy of the personal data is contested by the data subject;
    • the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
    • the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
    • the data subject has objected to processing as indicated below, pending the verification whether the legitimate grounds of the controller override those of the data subject;
  • right to data portability – Article 20 GDPR: right to receive the personal data concerning you, which you have provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance, if the processing is based on consent and is carried out by automated means. Also, the right to have your personal data transmitted directly from one controller to another, where technically feasible;
  • right to object – Article 21 GDPR: right to object, at any time, to processing of personal data concerning you which is based on the legitimacy of legitimate interests, including profiling, unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims;
  • lodge a complaint with the Italian Data Protection Authority, Piazza di Montecitorio n. 121, 00186, Rome (Rome), Italy.

The above rights may be exercised against the controller by contacting the applicable contact persons in the section “Controllers and processors”. The controller shall process your request and provide you, without undue delay and in any event within one month of its receipt, with the information pertaining to the action taken regarding your request.  

Exercising your rights as a data subject is free of charge pursuant to Article 12 of the GDPR. However, in the event of manifestly unfounded, excessive or repeated requests, the controller could charge you a reasonable fee to cover the administrative costs incurred to manage your request, or deny your request.

Finally, please be aware that the controller could request further information required to confirm the identity of the data subject.

Controllers and processors

The data controller is ab medica s.p.a., represented by its legal representative pro tempore.

The processor is the provider hosting this website.

The controller, pursuant to Article 37 of Regulation (EU) 2016/679, has designated a data protection officer (DPO).

For any information pertaining to the processing of your personal data performed through this website, please contact the controller by writing to: privacy@abmedica.it or dpo@abmedica.it.

Read the Privacy Policy in full

Use of cookies

This website uses so-called “cookies”, which are small text files stored on the user’s computer that help make our website easier to use, effective and secure. Our website uses “session cookies”, which are not permanently stored on the user’s computer and disappear when the browser is closed. No tracking or profiling systems are used.

Read the Cookies Policy in full