Privacy Policy

Information pursuant to art. 13 of Regulation (EU) 2016/679 (GDPR) for users of the site

This page is intended to inform users about the methods of processing their personal data through the https://armoniacommunity.com/ website, promoted as part of information and recruitment activities of potential participants in clinical trials carried out by our company.
The information provided does not concern other sites, pages or online services that can be reached via hypertext links that may be published on the site but refer to resources outside the domain of Evidilya S.r.l.
This information also respects and complies with Recommendation no. 2/2001 that the European Authorities for the protection of personal data, gathered in the Group established by art. 29 of Directive no. 95/46/EC, adopted on 17 May 2001 to identify certain minimum requirements for the collection of personal data online and, in particular, the methods, times and nature of the information that data controllers must provide to users when they connect to web pages, regardless of the purposes of the connection. By consulting this site, data relating to identified or identifiable persons may be processed, but it is specified that the site is for information purposes only.
The consensus mechanisms will be obvious, brief and easily understandable; if the original conditions for which consent was requested are changed (for example, if the purpose of data processing changes) a further consent will be required pursuant to European Regulation no. 679/2016.

Data Controller and Data Protection Officer

The Data Controller is Evidilya S.r.l., with registered office in Via Brisa 3, 20123 Milan, VAT number 06957380964, which can be contacted at the e-mail address: privacy@evidilya.com.
The Data Controller has appointed a Data Protection Officer (DPO), who can be contacted at dpo@evidilya.com.

Categories of personal data processed

The personal data subject to processing may include identification data (name and surname, date of birth and gender), contact data (address, e-mail and telephone number), as well as personal data collected through cookies or similar technologies (for more details on this point, please refer to the Cookie policy.

Purpose and legal basis of the processing

Personal data are processed only for:

• to allow the user to be contacted by e-mail or by telephone, depending on the contact details indicated by the user in the form, in order to provide information about the study(s), including future ones, in which the user has expressed interest (legal basis: execution of pre-contractual measures pursuant to Article 6, par. 1, letter b) GDPR)
• exercise the rights of the Data Controller in court (legal basis: legitimate interest in the defence of one’s rights pursuant to Article 6, paragraph 1, letter f) GDPR).

Nature of the provision and consequences of any refusal

The provision of the requested data is optional but necessary; failure to provide it would not allow the user to finalize the request to be contacted to obtain information on the studies of interest.

Processing methods and recipients of personal data

The data provided will be processed in compliance with all the principles provided for by the legislation on the protection of personal data; among these principles, we recall, but only by way of example, the principles of lawfulness, fairness and transparency.
The processing of personal data is carried out using IT and/or telematic tools, with organisational methods and logics strictly related to the purposes indicated, so as to guarantee the security and confidentiality of personal data, as the data controller has adopted appropriate technical and organisational measures that guarantee, and allow to demonstrate, that the processing is carried out in compliance with the relevant legislation.
In line with the purposes indicated above, personal data are processed by employees who are adequately trained and appointed as persons in charge of processing personal data.
The data may also be communicated to third parties such as persons in charge of the website maintenance service or IT technical consultancy as well as, where necessary, the judicial authority. These subjects, as the case may be, will act as external data processors or independent data controllers. The data will not be disclosed to third parties for purposes other than those indicated above.
Automated decision-making, including profiling, is not used.

Transfers of personal data outside the EU

The data controller informs that the personal data provided are not transferred to third countries; in the event of changes and transfer of personal data to a third country, this will be done in the manner required and indicated in Chapter V of the European Regulation no. 679/2016.

🥡 Storing

Personal data will be stored for the period of time necessary to fulfil the purposes for which they were collected, in any case no longer than 90 days from their acquisition in the event that they are used in the context of open clinical trials, 3 years from their acquisition in the event that the data subject shows interest in future clinical trials. At the end of this period, the data will be deleted from the company’s databases.

Rights of the data subject

Pursuant to art. 15 to 22 of European Regulation no. 679/2016, you may exercise, at any time, the right of access to data, rectification, opposition, limitation, withdrawal of consent (in the case of processing based on consent, at any time and without prejudice to the processing previously carried out on the basis of the consent previously given) and the rights to portability and cancellation. You can exercise these rights by contacting us directly at our email address as indicated above.
In addition, we remind you that you have the right to lodge a complaint with the Supervisory Authority (https://www.garanteprivacy.it/).