Mectronic Medicale S.r.l. (for the sake of brevity hereinafter referred to as “Mectronic Medicale” or the “Company”) is aware of the importance of protecting the right of its users to privacy, with reference to personal data processing. In compliance with the relevant European
and Italian regulations
and referring both to the recommendations of the Group established by art. 29 of directive 95/46/EC and to the documents and provisions published by the Italian Privacy Protection Authority, Mectronic Medicale informs that the personal data acquired by browsing the site www.mectronicmedicale.com shall be processed in compliance with the provisions contained in the law on personal data protection. When using the services provided by the site (filling in of contact forms, etc.) the user shall receive specific information on any further personal data processing carried out by Mectronic Medicale.
With reference to the methods adopted to manage and process the personal data of the users that visit this site, pursuant to article 13 of EU Regulation 679/2016, Mectronic Medicale provides the following information:
1. Collected data types, processing purposes and legal basis
During normal operation, the IT systems and the software procedures aimed at ensuring that the website www.mectronicmedicale.com runs properly acquire some personal data whose transmission is implicit in the use of the Internet communication protocols. This category of data includes the IP addresses or the domain names of the terminals of the users who login to the site, the MAC (Media Access Control) address, the URI (Uniform Resource Identifier) notation addresses of the requested resources, the request time, the method used to submit the request to the server, the size of the returned file, the number code indicating the state of the answer from the server (OK, error, etc.) and other parameters regarding the user operating system and IT environment. These data are only used for the purpose of obtaining anonymous statistical information on the use of the site and to verify that it is running properly, and are deleted immediately after being processed. The data could be used to determine responsibility, should any IT offences be committed against the site. The legal basis that justifies the personal data processing for this purpose is the case provided for by art. 6 para. 1, letter b) of EU Regulation 679/2016, i.e. the fact that they are aimed at allowing the user to receive the service he requested. The same data can also be used to fulfil any legal obligations or requests by judicial Authorities. The legal basis that justifies the personal data processing for this purpose is the case provided for by art. 6 para. 1, letter c) of EU Regulation 679/2016, i.e. the fact that the processing is required to fulfil a legal obligation the data controller is subject to.
Data voluntarily provided by the user
After the user voluntarily sends any email messages to the email addresses specified on the site, Mectronic Medicale can process the email address of the sender and the further personal data contained in the message to answer, still by email, the requests made by the user. Specific information on privacy policies, anyway, shall be provided when specific tools provided by the site are used. The legal basis that justifies the personal data processing for this purpose is the case provided for by art. 6 para. 1, letter b) of EU Regulation 679/2016, i.e. the fact that they are aimed at providing the user with the service he requested. The same data can also be used to fulfil any legal obligations or requests by judicial Authorities. The legal basis that justifies the personal data processing for this purpose is the case provided for by art. 6 para. 1, letter c) of EU Regulation 679/2016, i.e. the fact that the processing is required to fulfil a legal obligation the data controller is subject to.
The person concerned should not enter or submit through the tools provided on the website any “particular data”, “biometric data”, “genetic data”, “data concerning health” or “data concerning offences or convictions” as defined by the regulations in force.
The data in question, if provided by the person concerned, shall immediately be deleted.
The site uses session and browsing technical cookies to ensure that the site can be regularly browsed and used (for example allowing authentication for access to reserved areas). The site also uses third-party profiling and analytical cookies (with reduced potential for identification), to monitor the use of the site by users, in order to optimise the web platform, and to obtain statistical data (analytical). For comprehensive information on the personal data processing performed through cookies please refer to the extended cookie policies, available on every portal page through the relevant link
2. Data retention time
The personal data collected and processed when the user browses the site www.mectronicmedicale.com shall be retained as long as necessary to provide the service, and anyway deleted or anonymised within 7 days. The personal data autonomously sent by the users through the tools provided on the site shall be deleted once the requested service or the relevant answer have been provided, and anyway within 15 days of the completion of the activity in question, except for the ones required to comply with tax-related, accounting and administrative regulations or to fulfil other legal obligations and to document the operations that were carried out.
3. Processing methods
The collected personal data shall be processed and retained using IT tools, and shall be stored both on IT media and on paper, organised in a database, as well as on any other suitable media.
Specific security precautions are observed to prevent data from being lost or being used for illegal or improper purposes, as well as to prevent any unauthorised access.
The personal data processing carried out by Mectronic Medicale does not include any automated decision-making process.
4. Communication and/or provision of personal data
The communication and/or provision of browsing data are required for the provision of the requested service (site browsing), and optional for this purpose: failure to communicate and/or provide the personal data by the person concerned shall make it impossible for Mectronic Medicale to allow browsing for the site www.mectronicmedicale.com. The communication and/or provision of data for further purposes is optional: failure to communicate and/or provide any data, in such cases, shall have no consequence for the person concerned, but may result in the impossibility to provide the user with the answer he requested.
5. Persons to which the personal data can be disclosed
The collected personal data shall not be disseminated, and can be disclosed, in addition to the persons who have been recognised as having the right and interest to access your personal data pursuant to any law provisions or secondary and/or EC regulations, to authorised Data Processor personnel members, as well as to companies, associations or professional firms providing services and activities on behalf of the Data Controller in their capacity as Data Processors for the fulfilment of legal obligations, as well as for the fulfilment of any organisational and administrative need required to provide the requested services.
The names of any further persons that can be informed of your personal data in their capacity as “Data Processors” are contained in an up-to-date list available at Mectronic Medicale (to request it, please refer to the contact data specified at point 9).
6. Transfer of data abroad or to international organisations
Mectronic Medicale does not transfer abroad or to international organisations the personal data of the persons concerned collected through browsing or through the use of the services provided on the site www.mectronicmedicale.com.
7. Link to third-party websites or services
These privacy policies only apply to the processing of personal data carried out through this website or the tools mentioned therein, and not to any other websites visited by the user through a link, whose operators act as independent data controllers. As a consequence, we recommend that users carefully read the relevant privacy policies before accessing any services provided by third parties.
8. Rights of the person concerned
With reference to the above-mentioned personal data processing, the person concerned is entitled to exercise at any time the rights provided for by EU Regulation 679/2016, including, but not limited to, that to be informed:
- of the origin of personal data;
- of the processing purposes and methods;
- of the logic applied if data are processed with the help of IT tools;
- of the identification details of the Data Processor, of the data processors and of the designated representative.
The person concerned also has the right to object, in whole or in part:
- for legitimate reasons to the processing of the personal data concerning him, although they are relevant to the purpose for which they have been collected;
- to the processing of the personal data concerning him carried out pursuant to article 6, paragraph 1 of PD, letters e. (“processing is required to fulfil a legal obligation the data controller is subject to”) or f. (“the processing is required in order to pursue the legitimate interest of the data controller or of any third parties”), including profiling pursuant to the provisions in question.
- to the processing of the personal data concerning him for the sending of advertising material or for direct sale, or for the conduction of market survey or for commercial communication (direct marketing), including profiling, if related to it.
The person concerned has the right to withdraw his consent to the processing, when it was given in one of the cases provided for by art. 6, paragraph 1, letter a. (when “the person concerned expressed his consent to the processing of his personal data for one or more specific purposes”), or by article 9, paragraph 2, letter a. (the person concerned gave his explicit consent to the processing of the personal data in question for one or more specific purposes) of EU Regulation 679/2016, at any time, with no prejudice to the legality of the processing based on the consent given before it was withdrawn.
Should he believe the processing of the data concerning him breaches the regulations in force, the person concerned has the right to file a complaint with a supervisory authority, in the member State in which he habitually resides or works, or in the place where the alleged breach has occurred. To contact the Italian Supervisory Authority, please refer to the contact data specified on its website
9. Data controller – Contact data
The data controller is Mectronic Medicale S.r.l., Via Orio Al Serio 15, 24050 Grassobbio (BG), VAT number 02433980162, in the person of its acting legal representative. The Company can also be contacted at the email address firstname.lastname@example.org
and at the certified email address email@example.com
In order to exercise the above-mentioned rights, the person concerned can submit a request using the email account firstname.lastname@example.org
Mectronic Medicale reserves the right to update this Information on the processing of personal data.