Privacy Statement

In accordance with the European law on data security (Art.13, European Regulation 2016/679), the User acknowledges that EVIDILYA S.R.L. undertakes to process the User’s personal data in accordance with the principles of fairness, lawfulness and transparency and protection of confidentiality. Therefore, the User is informed that:

A. CATEGORIES OF DATA: The subject of processing may be your personal data such as identification data, master data, contact data, and areas of your interest.

B. DATA CONTROLLER: The data controller is EVIDILYA S.R.L., Via Brisa,3 – 20123 Milano (MI), P. iva 06957380964, who can be contacted by phone at 02.49530065 or at the email address
privacy@evidilya.com
.

C. SOURCE OF PERSON AL DATA: The personal data held by the Controller are collected directly from the data subject.

D. PURPOSE OF DATA PROCESSING AND LEGAL BASIS: Personal data are processed by the Data Controller according to the following purposes:

1. Execution of pre-contractual measures (Art. 6(B) GDPR): providing feedback to your contact request for participation in research studies, by the Owner.
   It also has, as a legal basis, your consent for the following purposes:
2. Subscription to the newsletter for sending informative and commercial communications and/or for direct marketing activities, including by means of sms or other digital tools or for research related to customer satisfaction (surveys), by the Owner, Sprim ITALIA S.r.l. and Proxima Salute S.r.l.
3. Sending commercial and/or marketing communications, including by newsletter, text message, WhatsApp or other digital means, from third parties belonging to the following sectors: food, pharmaceutical, medical, educational, publishing.

E. RECIPIENTS OF THE DATA: To the extent relevant to the stated purposes of processing, your data may be disclosed to partners, consulting firms, private companies, appointed as Data Processors by the Data Controller. Your data will not be disseminated in any way.

F. TRANSFER OF DATA TO THIRD COUNTRIES: There are no plans to transfer your data to a third country.

G. PERIOD OF STORAGE: Collected data will be stored for a period of time not exceeding the achievement of the purposes for which they are processed (“principle of limitation of storage,” Art.5, GDPR) or in accordance with the deadlines stipulated by legal regulations. Verification of the obsolescence of retained data in relation to the purposes for which they were collected is carried out periodically.

H. RIGHTS OF THE DATA SUBJECT: You always have the right to request from the Data Controller access to your data, rectification or erasure of your data, restriction of processing, or the ability to request data portability by asserting these and other rights under the GDPR by simple notice to the Data Controller. The data subject may also complain to a supervisory authority

I. OBLIGATORY OR NOT TO PROVIDE DATA: We inform you that the provision of data is mandatory to provide feedback to your requests (item D1); while with regard to the consent-based purposes in items D2 and D3, the provision of data is optional.

J. METHOD OF DATA PROCESSING: The personal data you provide, will be subject to processing operations in compliance with the above-mentioned legislation and the obligations of confidentiality that inspire the activity of the Owner. The data will be processed both by computer tools and on paper media as well as any other suitable media, in compliance with the appropriate security measures under the GDPR.

K. D.P.O. CONTACT DETAILS: The owner has arranged for the appointment of the D.P.O. who can be contacted by email at.
dpo@evidilya.com
.

L. AUTOMATED DECISION MAKING PROCESSES: There are no automated decision making processes.