PRIVACY POLICY ACCORDING TO ART. 13 OF REGULATION (EU) 2016/679 ("GDPR")
DATA CONTROLLER AND DATA PROTECTION OFFICER
Pursuant to art. 13 GDPR, your personal data will be processed by:
- Dedalus S.p.A., with registered office in Piazza Santissima Trinità 6, 20154, Milan, Italy;
- ASKLEPIOS, with registered office in Rübenkamp 226, 22307 Hamburg, Germany.
Dedalus S.p.A. and ASKLEPIOS will act as Joint
Data Controllers in accordance with art. 26 GDPR ("Joint Data Controllers").
The Data Protection Officer ("
DPO") can be reached:
- for
Dedalus S.p.A. at
[email protected] ;
- for
ASKLEPIOS at
[email protected].
1 - CATEGORIES AND TYPES OF PERSONAL DATA SUBJECT TO PROCESSING
The personal data processed by the Co-owners and subject to this information belong to the following categories of data:
- common data (e.g. gender, age range, IP address, opinions on critical issues and improvements for current Dedalus software)
2 - PURPOSES AND LEGAL BASES OF PROCESSING
The Joint Data Controllers will process your data for the purpose of identifying the users experience of nurses who work on Wound Management Dedalus system.
The legal basis of the processing operations is Art. 6, para. 1, lett. a) of the GDPR, as the processing of your data will be possible only if authorized by you with consent. The interested party has the right to revoke the express consent at any time, by sending a communication by e-mail to:
[email protected]
3 - PERSONNEL AUTHORIZED TO PROCESS
Personal data will be processed only by personnel authorized to process
in accordance with art. 29 of the GDPR due to the performance of their work duties.
4 - RETENTION OF PERSONAL DATA
The information collected through the survey will be deleted and or anonymized and in any case no later than 6 months of their collection.
5 - TRANSFER OF DATA OUTSIDE THE EEA (European Economic Area)
Your personal data will not be transferred outside the European Economic Area ("EEA").
6 - YOUR RIGHTS
In the presence of the relevant legal requirements, you - as an interested party - may, at any time, exercise the following rights:
- Right to withdraw any consent given (Article 7 of the GDPR) – You have the right to withdraw any consent given at any time, without prejudice to the lawfulness of the processing carried out prior to the withdrawal;
- Right of access (art. 15 of the GDPR) – you have the right to obtain confirmation of the existence or not of a processing concerning your personal data as well as the right to receive any information relating to the same processing activity;
- Right of rectification (art. 16 of the GDPR) – You have the right to obtain the correction of your personal data, if they are incomplete or inaccurate;
- Right to erasure (art. 17 GDPR) – in certain circumstances, you have the right to obtain the erasure of your personal data present in our archives;
- Right to limitation of processing (Article 18 of the GDPR) – upon the occurrence of certain conditions, you have the right to obtain the limitation of the processing of your personal data;
- Right to portability (Article 20 of the GDPR) – You have the right to obtain the transfer of your personal data to a different data controller as well as the right to obtain data concerning you in a structured, commonly used and machine-readable format;
- Right to object (Article 21 of the GDPR) – You have the right to make a request to object to the processing of your personal data in which to give evidence of the reasons justifying the objection, unless the Joint Data Controllers demonstrate the existence of legitimate reasons for not accepting the request, pursuant to Article 21, paragraph 1,
- Right to lodge a complaint with the Supervisory Authority (Article 77 of the GDPR) - in the manner indicated in the following paragraph, in the event that you believe that the processing that concerns you violates the legislation on the protection of personal data, you can lodge a complaint with the Supervisory Authority;
- Right to bring proceedings before the appropriate courts (Article 79 of the GDPR).
Requests must be sent by e-mail to the following address:
[email protected]]. The interested party may still contact both Joint Controllers for the exercise of their rights.
