In compliance with the provisions of art. 13 of Regulation (EU) no. 2016/679 “GDPR”, the company KOLINPHARMA S.p.A., in its capacity as data controller, would like to inform you that your personal data will be processed by the following means and for the following purposes:

1. Type of data processed and means of processing

For the purposes of this information notice, the term “common data” shall mean the biographical data and the contact data processed by the Controller to manage the online sales of KOLINPHARMA products and to send any commercial communications. These data shall include but not be limited Examples include first name (both in shipping and billing details), last name (both in shipping and billing details), full address (both in shipping and billing details), telephone number (both in shipping and billing details), email address associated with the shipping address, fiscal code (in case of invoice request), company name (in case of an invoice request as a company), VAT number (in case of an invoice request as a company), certified email (in case of an invoice request as a company), unique code for electronic Invoice – SDI (in case of an invoice request as a company), email address associated with the private party if invoicing request.
The personal data you have disclosed will be processed by the Controller exclusively on IT media and by data transmission.

2. Purposes of the processing

Your personal data shall be processed in compliance with the rules set forth by the GDPR for the following purposes:  

• A) management of the online sale contract stipulated through this Website
• B) in case of explicit and separate consent, for additional promotional and marketing purposes by e-mail, including the subscription to the corporate newsletter, without disclosure to third parties

Your personal data shall be processed with the operations indicated in art. 4, paragraph 1, no. 2) of the GDPR and specifically: collection, recording, organisation, storage, consultation, processing, alteration, selection, extraction, comparison, use, combination, restriction, disclosure, erasure and destruction of the data. Your personal data shall be subject to electronic and/or automated processing.

3. Storage

The data provided will be stored:

• For the purposes under point A above, for the time required for the stipulation and management of the online sale contract stipulated through this Website.
• For the purposes under point A above, for 10 years following the stipulation of the contract for accounting and tax-related purposes, as per the regulatory framework in force.
• For the purposes under point B of this information notice, with express consent, until the data subjects requests their erasure.

4. Access to the personal data

• Your data may be made accessible for the aforementioned purposes:
• to employees and associates of the Controller, in their capacity as designated subjects;
• to third-party companies that provide IT services to the Controller for purposes related to the maintenance of and support to the Website;
• to any other (internal or external) subjects identified by the controller for the execution of the purposes mentioned in this information notice.

5. Disclosure of the data

The personal data thus collected will not be disseminated, sold to or exchanged with third parties in any way.

6. Transfer of the data

The personal data will be managed and stored on servers located inside the European Union. The data will not be subject to transfer outside of the European Union.

7. Nature of the provision of data and consequences of refusal

The provision of data for the purposes under “A” is mandatory for the management of the contract for the provision of online sale services stipulated through this Website. Failure to provide them would make it impossible to manage the online sale contract.
The provision of data for the purposes under “B” is optional and subject to explicit and separate informed consent at the foot of this information notice. The data subject may withdraw such content at any time.

8. Rights of the data subject

In your capacity as data subjects, you shall have the rights of art. 15 et seq. of the GDPR, specifically the rights to:  

1. obtain confirmation as to whether or not personal data concerning you are being processed;
2. obtain information on: a) the origin of the personal data; b) the purposes and means of processing; c) the logic applied in case of processing performed with the help of electronic tools; d) the identification details of the controller, of the processors and of the designated representative pursuant to art. 3, paragraph 1 of the GDPR; e) the subjects or categories of subjects to whom the personal data may be disclosed or who may acquire knowledge thereof in the capacity of designated representative in the territory of the State, processors or persons tasked with processing;  
3. obtain: a) the update, the rectification or, where you have the interest, the completion of the data; b) the erasure, anonymisation or blocking of data that are being processed in violation of the law, including those whose storage is not necessary in relation to the purposes for which the data were collected or subsequently processed; c) the attestation that the operations under letters a) and b) have been made known, also with regard to their content, to those to whom the data were disclosed or disseminated, except in case the fulfilment of this obligation is found to be impossible or to require use of means that are clearly disproportionate to the right being protected;
4. object, in whole or in part: a) for legitimate reasons to the processing of the personal data concerning you, even if they are relevant to the purpose of the collection; b) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or to carry out market surveys or for commercial communication. Where applicable, you shall also have the rights set forth in articles 16-21 of the GDPR (Right to rectification, right to be forgotten, right to restriction of processing, right to the portability of the contractual and raw navigation data, right to object), as well as the right to lodge a complaint with the Data Protection Authority.

The data subject shall have the right to object, in whole or in part, for legitimate reasons, to the processing of the personal data concerning him/her, even if they are relevant to the purpose of the collection.

9. Means of exercising the rights

You may exercise the rights at any time by sending an e-mail or a registered letter with proof of receipt to the Controller’s address.

10. Use of Cookies

This Website uses cookies to make it possible for the user to customise his/her visit. Cookies are text files that are saved on your computer by a Website. You can find detailed information on the means by which this website uses cookies by consulting the Cookies Policy at the following link https://www.kolinpharma.com/24-privacy-it  

11. Data Controller

The Data Controller is:

KOLINPHARMA S.p.A.
Corso Europa, 5
20020 – Lainate (MI)
Email: info@kolinpharma.com