Information on the processing of data pursuant to art. 13 of EU Regulation 2016/679

Data Controller

We inform you that, pursuant to art. 13 of EU Regulation 2016/679 (hereinafter, 'Regulation' or 'GDPR'), your personal data are processed by ACIT Chirurgia as data controller ('Controller').

Identity and contact details of the Joint Data Controllers

A.C.I.T. Associazione Chirurgica Italiana Tecnologica
(C.F. 97746150586)
Registered Office: Via Suvereto 50, 00139 Rome

The Data Protection Officer (hereinafter, 'DPO') can be reached at the address privacy@laparoscopic.it

Types of data being processed

The Controller will process your personal data including, by way of example and not exhaustively, name, surname, mobile phone number, e-mail address, tax code and in general your contact details.

Purposes, legal basis and optional nature of the processing

Your personal data will be processed for the following purposes:

• a) execution of the services you requested or dedicated to you;
• b) information relating to services offered by A.C.I.T. that may be of interest to you;
• c) marketing and promotion of services;
• d) to fulfill any legal obligations.

The legal bases for the processing for purposes a), b), c), d) are respectively Articles 6(1)(b) and 6(1)(c) of the GDPR.

The provision of your personal data for the purposes a) and d) indicated above is optional, but in its absence it will not be possible to execute the contract.

The provision of your personal data for the purposes b) and c) is optional, you can revoke your consent by writing to privacy@laparoscopic.it

Recipients and transfer of personal data

Your personal data may be shared with:

• – natural persons authorized by the Controller to process personal data pursuant to art. 29 GDPR by reason of carrying out their work duties (e.g. employees and system administrators, etc.);
• – service providers (such as consultants, credit institutions, etc.) who typically act as data processors pursuant to art. 28 of the Regulation;
• – subjects, entities or authorities to whom it is mandatory to communicate your personal data by virtue of legal provisions or orders of the authorities (such as the Ministry of Health, CME, Agenas, etc.).

The complete and updated list of data recipients may be requested from the Controller at the contact details indicated above.

Transfer of data outside the EU

As regards the possible transfer of Data to Third Countries, the Controller informs that the processing will take place according to one of the methods permitted by current law, such as the consent of the interested party, the adoption of Standard Clauses approved by the European Commission, the selection of subjects adhering to international programs for the free circulation of data (e.g. EU-USA Privacy Shield) or operating in countries considered safe by the European Commission. More information is available on request from the Controller at the contacts indicated above.

Retention of personal data

Your Personal Data will be kept only for the time necessary for the purposes for which they are collected, respecting the principle of minimization referred to in Article 5, paragraph 1, letter c) of the GDPR. The Controller may also keep some data subsequently, for the time necessary for contractual and legal obligations. More information is available from the Controller.

Data processing methods

In relation to the indicated purposes, the processing of personal data takes place using manual, IT and telematic tools with logic strictly related to the purposes themselves and, in any case, in such a way as to guarantee the security and confidentiality of the data themselves, as well as compliance with the specific obligations established by law.

Your privacy rights

You have the right to ask the Controller, at any time, for access to your personal data, the rectification or cancellation of the same or to oppose their treatment, you have the right to request the limitation of the treatment in the cases provided for by art. 18 of the Regulation, to revoke the consent given pursuant to art. 7 of the GDPR at any time; to obtain in a structured format, of common use and readable by automatic device the data concerning you, in the cases provided for by art. 20 of the Regulation; as well as to lodge a complaint with the competent supervisory authority pursuant to Article 77 of the GDPR (Guarantor for the Protection of Personal Data) pursuant to art. 77 of the Regulation, if you believe that the processing of your data is contrary to the legislation in force.

You can make a request to object to the processing of your data pursuant to Article 21 of the GDPR in which to provide evidence of the reasons that justify the opposition: the Controller reserves the right to evaluate your request, which would not be accepted in the event of the existence of compelling legitimate reasons to proceed with the processing that prevail over your interests, rights and freedoms.

Requests should be addressed in writing to the Controller or the DPO at the contact details indicated above.