This privacy notice is provided pursuant to Article 13 of Legislative Decree No. 196/2003 – Personal Data Protection Code – and Article 13 of Regulation (EU) 2016/679 (GDPR). It explains the purposes and methods of data processing and outlines the rights that may be exercised by anyone accessing this website, either directly or via links from other websites, and consulting its pages. This notice refers only to data collected during connection to the site or while browsing its pages.

1. DATA CONTROLLER

DS MEDIGROUP S.r.l., with registered office in Milan, Viale Andrea Doria 35, Tax Code 03603520150 / VAT No. 07979550154, represented by its legal representative pro tempore. DS MEDIGROUP S.r.l. has appointed a Data Protection Officer (DPO), who can be contacted at: privacy@dsmg.it

2. TYPES OF DATA

CONTACT DATA
Contact details (e.g. personal information, email address, and any other data voluntarily provided by the user, including message content) provided voluntarily by the user on contact pages or via phone, fax, or mail. Providing such data is optional, but failure to do so will make it impossible for the Controller to handle the user’s requests. The Controller observes the principle of data minimization, keeping data only for the time necessary to manage the request or longer if required for legal protection.

3. DATA PROCESSING METHODS

Personal data is processed primarily by electronic and telematic means by the controllers and other entities appropriately selected for their reliability and competence. These entities perform operations strictly related to the use of the website, its services, and the purchase of products through it (see below, paragraph “Entities and categories of entities to whom data may be communicated”).
Personal data will not be transferred outside the European Union to countries that do not ensure adequate levels of personal data protection.
DS MEDIGROUP S.r.l. reserves the right to delete accounts and all related data if unlawful or offensive content is detected, including content harmful to the image of the controllers or third parties, or that promotes illegal or defamatory activities.

.

4. PURPOSES OF DATA PROCESSING

Data is processed to provide the following services available through our website:

  1. Registration on the site to access related services;
  2. Subscription to specific and additional services, such as our newsletters;
  3. Management of information or contact requests.

5. LEGAL BASIS AND CONSEQUENCES OF REFUSAL

Providing data is optional. However, under the contractual agreements between the joint controllers, refusal to provide data will make it impossible for DS MEDIGROUP S.r.l. to conclude the contract or relationship to which this notice refers. Please note that personal data recorded in the database will never be disclosed. Whether data provision is mandatory or optional is specified for each individual request at the time of data collection, with mandatory fields marked by an asterisk (*). Data processing is based on legitimate interest for contact forms and consent for website registration. The data subject may withdraw consent at any time (Art. 7.3 GDPR). Refusal to provide data or objection to its processing, in whole or in part, may make it impossible to provide the requested services (see letter a).
Refusal to allow data use for other purposes will not affect access to healthcare services.

6. ENTITIES AND CATEGORIES OF ENTITIES TO WHOM DATA MAY BE COMMUNICATED

In general, personal data collected through the website is not disclosed to third parties. However, for the execution of services requested by the user, the Controller may use and communicate data to external companies that perform activities strictly connected and instrumental to the fulfillment of contracts and services provided, such as:

  • archive management;
  • banking institutions for payment processing;
  • tax administrations and other authorities for legal compliance;
  • law firms for the protection of contractual rights;
  • freelancers for administrative and accounting purposes;
  • postal services;
  • third-party companies for market analysis, marketing, and communication activities.

Data processing by these parties is aimed at executing the instructions received from clients and/or digital storage.
Data may also be disclosed to all entities to whom such communication is required by law.
The list of entities processing personal data can be requested from DS MEDIGROUP S.r.l. at privacy@dsmg.it

7. DATA RETENTION PERIOD

User data will be retained by DS MEDIGROUP S.r.l. for the period strictly necessary to ensure proper provision of the requested services, unless longer retention is required by law, including accounting regulations.
Data transmitted to third-party service providers will be processed only for the duration necessary to perform their assigned tasks.

8. RIGHTS OF THE DATA SUBJECT

Data subjects may exercise their rights under Articles 15 et seq. of Regulation (EU) 2016/679 against the Data Controller, including:

  • the right to obtain confirmation of the existence or non-existence of personal data concerning them;
  • to know the content and origin of the data, and the purposes and methods of processing;
  • to verify accuracy, request updates, rectifications, or, where interested, integration of data;
  • to request deletion, anonymization, or blocking of data processed unlawfully;
  • to object, for legitimate reasons, to the processing of their personal data, even if relevant to the purpose of collection;
  • to object to the processing of data for advertising, direct sales, market research, or commercial communication purposes.

For the exercise of these rights or any related information, please contact: privacy@dsmg.it

9. UPDATES TO THIS NOTICE

This privacy notice may be modified. Any substantial changes will be published at this address, and users are responsible for periodically checking this website to stay informed about the validity or modifications of these terms.

10. APPLICABLE LAW

This Privacy Policy is governed by Italian law and by Regulation (EU) 2016/679 of the European Parliament and of the Council, concerning the protection of individuals with regard to the processing of personal data and the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation).

Last updated: 26 May 202