INFORMATION NOTICE FOR TENDERS FOR THE PROVISION OF PRODUCTS
Information notice pursuant to art.13 of Regulation EU 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, “GDPR”).
Tenders
Pursuant to the regulation in force on personal data protection (hereinafter, the "Regulation"), IBSA Farmaceutici Italia Srl (hereinafter, the "Company", also in singular form) in its capacity as "Data Controller", whose identification information is stated below, is obliged to provide you with basic information on the use of your personal data.
1. Purposes of the processing
Your personal data may be processed for the following purpose:
- participation in the tender for the provision of products for the purposes of the implementation of measures prior to entering into the contract, the awarding of the contract, the stipulation and performance of the contract with the connected obligations and their processing through the company information system.
2. Nature of the provision of data and consent
The provision of the data for the purposes set out in point 1 of this information notice is optional but essential for the performance of the activities related to invitations for tenders. Consent to the processing of personal data for these purposes is not, however, necessary as the processing is essential for the stipulation and performance of the agreement and for the implementation of measures prior to entering into the contract.
We wish to inform you that, under art.6, para.1, letter b) of the GDPR, the performance of the agreement constitutes the basis for the lawfulness of the processing of your personal data for the purpose stated in this information notice.
3. Data Processing Methods
Scope of the "internal" circulation of data. The data may be used by staff of the Company that have been assigned a specific role and who have been given adequate operating instructions in order to avoid the loss, destruction, unauthorised access and any processing of the data that is not permitted. Your personal data will be made accessible only to those who, within the company organisation, require the data due to their assigned tasks or hierarchical position.
Data processors - Third parties that carry out instrumental activities on behalf of the Company may also use the data. The aforesaid third parties act as data processors and/or managers and are under the management and control of the Company.
The updated list of Data Processors can be requested at privacy@ibsa.ch.
4. Storage of data
Data will be stored for the period of time strictly necessary for the achievement of the purposes for which it has been collected, and more specifically for a period of no longer than five years. In any case, the criteria used to determine this period is based on compliance with the time limits permitted by applicable laws and the principles of the minimization of processing and rational management of archives.
We update and maintain our databases to ensure that the Data is always correct and accurate.
5. Communication of data
Under the legal and regulatory provisions to which we are subject, we may have to communicate the data to aggregating bodies for tenders, the Ministry of Health, the local health authorities (ASL) and other healthcare bodies, other Authorities and associations also in third countries outside the EU, as well as to legitimate recipients according to legal and regulatory provisions. These parties will act as independent data controllers.
6. Transfer of Data Abroad
The aforesaid personal data will be transferred abroad to IBSA Institut Biochimique SA (IBSA SA), Switzerland.
7. Rights of the data subject
You are entitled to know, at any time, what data is held by the individual data controllers, namely by the Company or by the parties stated above to whom we communicate the data, and how it is used; you are also entitled to have your data updated, integrated, rectified or cancelled, as well as to request its portability or the restriction to its processing, in the cases provided for by law, and to object to its processing, except in the case of a legitimate interest of the individual data controllers. In order to exercise your rights, as well as for more detailed information on the parties or categories of parties to whom the data is communicated or that become aware of your data in their roles as data processors or managers, you can contact our Data Protection Officer, at IBSA Farmaceutici Italia s.r.l., Privacy Office, tel. 0371/6171; email privacy@ibsa.ch or at the address stated below for the attention of the Privacy Office.
We wish to remind you, finally, that you are entitled to file a complaint with the Personal Data Protection Authorities if you believe that your rights have not been respected or if you have not received an answer to your requests according to the law.
8. Data Controller
The Data Controller is IBSA Farmaceutici Italia s.r.l. with registered office in Via Martiri di Cefalonia, 2 – 26900 Lodi.
9. Data Protection Officer
The Company makes use of a Data Protection Officer “DPO”.
The DPO can be contacted through the following communication channel: dpo@ibsa.it.