Privacy Policy on the processing of personal data of users of the medconsulting.it website
This privacy policy describes the nature of the personal data processing (the Policy) by Med Consulting S.r.l., with registered office in C.so Piemonte 32, 12037 Saluzzo (CN), pursuant to and for the purposes of Italian Legislative Decree no. 196/2003, as amended by Italian Legislative Decree no. 101/2018, as well as in accordance with Articles 13 and 14 of EU Regulation 679/2016 (the so-called ‘GDPR’), containing provisions on the protection of natural persons with regard to the processing of Personal Data.
This policy does not apply with respect to third-party websites, applications, and content in general, even if they can be accessed via the medconsulting.it website. In such cases, the data protection provisions of such third parties may be applicable, which may differ from these provisions and which we recommend that you consult before disclosing any data.
1. Data controller and Data processor.
For the purposes set out in this Policy, the data controller is Med Consulting S.r.l., with registered office in C.so Piemonte 32, 12037 Saluzzo (CN), Tax code / VAT number IT01686980051, registered with the Companies’ Register of Cuneo under no. 326090 (Med Consulting).
2. Data collected.
Med Consulting collects personal data through the Website, when users send requests through the forms available on the Website or send e-mail communications. ‘Personal data’ means all information that can be used to directly or indirectly identify a data subject.
We may also automatically collect certain personal data when you access, use, or interact with us through the Website.
Data that you provide through the Website
The personal data that each user may disclose in this manner includes first name and surname, e-mail address, telephone number, as well as any additional personal data that the user wishes to disclose.
Data that we may collect automatically
We use cookies and similar technological tools on the Website (together with Cookies) to collect and store data related to the use, access, or interaction through the Website. For example, we may collect data regarding the type of device used to access the Website, the operating system, your IP address, your general geographical position indicated by your IP address, the type of browser used, the contents you view and access through the Website, the ways in which you may interact with the contents available on the Website and the keywords entered for searching on the Website. For more information on the use of Cookies, please click here.
3. Purposes of personal data processing and legal basis
Med Consulting as data controller shall process your personal data for the following purposes:
- a. to respond to your requests for information, including those submitted by sending e-mails to the contacts indicated on the Website;
- b. to respond to your request to subscribe to the newsletter service and enable the newsletter to be sent containing periodic updates relating to the activities, events and news proposed by Med Consulting;
- c. to carry out the service entrusted and comply with the relevant legal obligations;
- d. to send you, by postal mail, telephone, SMS, e-mail, instant messaging including through social networks, commercial, promotional, and advertising communications concerning the services and products provided by Med Consulting as well as by other companies, including those companies which are, also indirectly, controlling, controlled by, subject to common control or affiliates of Med Consulting or in which Med Consulting holds an equity interest;
- e. to send you, by postal mail, telephone, SMS, e-mail, instant messaging including through social networks, commercial, promotional and advertising communications concerning the services and products provided by companies operating in the industries of real estate brokerage, condominium administration, credit brokerage, insurance and insurance brokers, auctions, real estate enforcement and bankruptcy proceedings, property management and maintenance, power supply, furniture, education and training, leases, IT, marketing and communications.
Med Consulting, as data controller, processes your data in order to perform the activities referred to in points a) and b) of this section 3 and, therefore, to respond to your express requests. The legal basis is therefore the legitimate interest of the Data Controller in responding to the data subjects’ requests and the request to subscribe to the newsletter service. This interest of the Data Controller has been balanced with that of the data subjects and is compatible with the data subjects’ reasonable expectations, as it is reasonable to deem that they would like to receive replies to their requests and in particular to their request to subscribe to the newsletter service.
Med Consulting processes your data for the purposes of performing the activities referred to in point c) of this section 3 and therefore to perform the activities concerning the service entrusted. The legal basis is therefore the performance of contractual obligations.
The processing of your data for the purpose set out in points a), b) and c) of this section 3 is necessary: otherwise, it will not be possible to respond to your requests.
Med Consulting processes your data for the purposes of performing the activities referred to in points d) and e) of this section 3 only with your explicit consent. The legal basis is therefore your consent.
Consent may be given and withdrawn at any time with respect to each of the purposes specified above.
Consent given may be withdrawn at any time in the same manner as when it was given, by contacting us at the contact details indicated at the end of this Policy, without prejudice to the lawfulness of the processing based on the consent prior to its withdrawal.
4. Disclosure of personal data collected.
The Data shall be processed by the Data Controller and by the persons mandated by it and may be disclosed to third parties only where necessary for the purposes of carrying out the activities referred to in section 3 above.
Third party recipients of the Data may process it, where appropriate, as autonomous data controllers or duly designated data processors.
The full list of data processors is kept at the registered office of the Data Controller and may be consulted upon request by contacting the addresses indicated in section 8 below.
5. Modalities of processing
Your personal data shall be processed by employees and/or collaborators of the Data Controller, who have been specifically designated as persons authorised to process the data (such as, for example, the heads of the human resources department, the legal department, the administration department, and the IT department) as well as external data processors, whose respective names are available upon request to the Data Controller pursuant to this Policy.
The Data Controller and the third parties it uses shall process your personal data by means of electronic or however automated means, based on the logic strictly connected with these purposes, storing it on servers and/or archives located within the European Union, and in any event in such a way as to ensure the security and confidentiality of such personal data.
6. Disclosure of personal data.
Your personal data shall not be disclosed.
7. Storage period of personal data.
Med Consulting as data controller shall store your personal data in a form which permits your identification for no longer than is necessary to achieve the purposes of the processing and, in particular for the purposes referred to in point a) of section 3, personal data shall be stored for a maximum period of 12 months from collection; for the purposes set out in point b) for a maximum period of 24 months from collection; for the purposes set out in point c) for the entire duration of the engagement and the relevant prescribed statutory period; and for the purposes referred to in points d) and e) for a maximum period of 24 months from collection.
8. Rights of the data subject.
Each data subject has the right at any time to: (I) obtain confirmation as to whether or not personal data concerning them are being processed; (II) know the purposes of the processing and the methods, the recipients of such personal data, the storage period; (III) obtain the rectification or erasure, and where applicable, the restriction of processing; (IV) object to the processing; (V) where applicable, receive in a structured, commonly used, machine-readable format, the personal data concerning you provided to the Data Controller and transmit such data to another data controller without hinderance from the Data Controller; (VI) lodge a complaint with the competent Data Protection Supervisory Authority; (VII) select the methods in which he/she wishes to be contacted for the purposes set out in points c) and d) of paragraph 3 above, and in particular indicate if he/she wants to be contacted using the so-called traditional methods (postal mail, telephone with operator), using the so-called automated methods (e-mail, text message, telephone without operator) or by both categories.
The above rights may be exercised at any time, by merely requesting them, to be transmitted to Med Consulting at the address C.so Piemonte 32, 12037 Saluzzo (CN), or to the e-mail address info@medconsulting.it.
Consent for forms available in the section where the forms are (except the Newsletter form)
The data subject, having acknowledged the Policy:
consents to the processing of his/her personal data for the purposes set out in section 3 d), or for sending, by postal mail, telephone, SMS, e-mail, instant messaging including through social networks, commercial, promotional and advertising communications concerning the services and products provided by Med Consulting as well as by other companies, including those companies which are, also indirectly, controlling, controlled by, subject to common control or affiliates of Med Consulting or in which Med Consulting holds an equity interest.