English
This Privacy Policy is given by Resalis Therapeutics S.r.l. (hereinafter “Resalis” or the “Controller”), with registered office in– Italy, in the capacity of Data Controller, pursuant to Article 13 of the Regulation (EU) 2016/679 (hereinafter “Regulation”).
In this Privacy Policy we shall outline the purposes and means by which Resalis, collects and processes your personal data; which categories of data are processed, which are the rights of the data subjects and how they can be exercised.
1. Categories of personal data and how Controller process personal data
The Controller will process some of your personal data collected through the form found in the “contact” section or included by you by sending an email to the attention of Resalis (hereinafter “Data”). For example, Controller may acquire the following types of Data as transmitted by you to Resalis:
- first and last name;
- place and date of birth;
- contact details (telephone number, email);
- address of residence or domicile.
Your Data will be processed by the personnel authorized by the Controller to process them in accordance with item 2. both electronically and manually.
The processing of Data does not entail decisions based on automated processing, including profiling.
2. Purposes and lawful basis for processing personal data
- For the provision of required information
The data voluntarily provided by the user will be processed by the Controller in order to provide the requested services, by means of, for example, the contact request form (art. 6, par. 1, lett. a and b of the Regulation) or by sending an email to Resalis. The data will therefore be processed to reply to your contact request.
The legal basis for the processing of the Data is both your consent (art. 6, par. 1, lett. a of the Regulation) to process your Data to allow us to provide you with an answer and Controller legitimate interest (art. 6, par. 1 lett. b of the Regulation) to be able to reply to you and provide you with the information you need. By providing us your Data you give simultaneously the consent to process them, only for the purposes described herein.
3. Categories of subjects to whom personal data may be communicated and purposes of communication
The Controller – depending also on the type of information you requested – may rely on third parties to carry out some activities concerning the processing of your personal data. For that purpose, Resalis might communicate some of your Data to its administrative or logistics service providers; to external consultants or advisors. The aforementioned parties shall process your personal data on behalf of the Controller, in the capacity of Data Processors (art. 28 of the Regulation) in compliance with the provisions of the law. You can ask for Resalis list of Data Processors, if any, with respect to the processing of your Data, writing to [•].
Controller may also need to communicate your Data under legal obligations to any competent authority or bodies to which the communication is due.
Please note that no form of Data dissemination to undetermined individuals is absolutely not provided.
4. Data retention period
The Controller will process your Data only for the necessary period of time to comply with the aforementioned purposes and, in any case no longer than 2 years after the last communications between Resalis and you, unless all or certain Data are to be kept for a longer period, by virtue of any applicable mandatory law.
5. Data transfer to countries outside the European Union
Your Data will not be transferred outside the European Union.
6. Data subjects rights
We inform you that, accordingly with art 15-20 of the Regulation you are entitle to, among the others:
- ask and obtain information about whether or not Resalis Therapeutics is holding any of your personal data or whether or not Data are being processed and, in this case, you may have access to them;
- ask and obtain a copy of your personal data that are processed by automated means in a structured, commonly used and machine-readable format; you can also claim the right to transmit those data to another controller;
- ask and obtain the alteration and/or rectification of your personal data when you consider them to be inaccurate or incomplete;
- ask and obtain the erasure – and/or a processing restriction – of your personal data whenever they are not necessary – or no longer necessary – to fulfil the purposes for which they were collected, hence upon expiry of the retention period.
You might exercise your rights by writing an email to [•].
Finally, we inform you that you can lodge a complaint with the supervisory authority whenever you deem your personal data are unlawfully processed.
Italiano
