INFORMATION NOTICE FOR THE MANAGEMENT OF ORDERS
Information notice pursuant to art.13 of Regulation EU 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, “GDPR”).
Orders
Pursuant to the regulation in force on personal data protection (hereinafter, the "Regulation"), IBSA Farmaceutici Italia Srl (hereinafter, the "Company", also in singular form) in its capacity as "Data Controller", whose identification information is stated below, is obliged to provide you with basic information on the use of your personal data.
1. Purposes of the processing
Your personal data may be processed for the following purpose:
- for the "Management of Orders" for all the products on the IBSA Farmaceutici Italia Srl list and their processing through the company information system.
2. Nature of the provision of data and consent
The provision of the data for the purposes set out in point 1 of this information notice is optional but essential for the Management of Orders. Consent to the processing of personal data for these purposes is not, however, necessary as the processing is essential for the performance of the agreement for the Management of Orders.
We wish to inform you that, under art.6, para.1, letter b) of the GDPR, the performance of the agreement constitutes the basis for the lawfulness of the processing of your personal data for the purpose stated in this information notice.
3. Data Processing Methods
The Data will be processed in electronic and in paper form and entered in the company information system in compliance with applicable law, including security and confidentiality profiles, and according to the principles of correctness and lawfulness of processing.
Scope of the "internal" circulation of data. The data may be used by staff of the Company that have been assigned a specific role and who have been given adequate operating instructions in order to avoid the loss, destruction, unauthorised access and any processing of the data that is not permitted. Your personal data will be made accessible only to those who, within the company organisation, require the data due to their assigned tasks or hierarchical position.
Data processors - Third parties that carry out instrumental activities on behalf of the Company may also use the data. The aforesaid third parties act as data processors and/or managers and are under the management and control of the Company.
The updated list of Data Processors can be requested at privacy@ibsa.ch.
4. Storage of the data
Data will be stored for the period of time strictly necessary for the achievement of the purposes for which it has been collected. In any case, the criteria used to determine this period is based on compliance with the time limits permitted by applicable laws and the principles of the minimization of processing and functional management of archives.
For the purposes specified above, we may store some data also after the termination of our activities with you for the time necessary to fulfil contractual and legal obligations, within the limits of the limitation period.
We update and maintain our databases to ensure that the Data is always correct and accurate.
5. Communication of data
Under the legal and regulatory provisions to which we are subject, we may have to communicate the data to the Ministry of Health, local health authorities (ASL) and other healthcare bodies, other Authorities and associations also in third countries outside the EU, as well as to legitimate recipients according to legal and regulatory provisions. These parties will act as independent data controllers.
6. Transfer of Data Abroad
The aforesaid personal data will be transferred abroad to IBSA Institut Biochimique SA (IBSA SA), Switzerland.
7. Rights of the data subject
You are entitled to know, at any time, what data is held by the individual data controllers, namely by the Company or by the parties stated above to whom we communicate the data, and how it is used; you are also entitled to have your data updated, integrated, rectified or cancelled, as well as to request its portability or the restriction to its processing, in the cases provided for by law, and to object to its processing, except in the case of a legitimate interest of the individual data controllers. In order to exercise your rights, as well as for more detailed information on the parties or categories of parties to whom the data is communicated or that become aware of your data in their roles as data processors or managers, you can contact our Data Protection Officer, at IBSA Farmaceutici Italia s.r.l., Privacy Office, tel. 0371/6171 or via email at privacy@ibsa.ch.
We wish to remind you, finally, that you are entitled to file a complaint with the Personal Data Protection Authorities if you believe that your rights have not been respected or if you have not received an answer to your requests according to the law.
8. Data Controller
The Data Controller is IBSA Farmaceutici Italia s.r.l. with registered office in Via Martiri di Cefalonia, 2 – 26900 Lodi.
9. Data Protection Officer
The Company makes use of a Data Protection Officer “DPO”.
The DPO can be contacted through the following communication channel: dpo@ibsa.it.