POLICY STATEMENT FOR THE PROCESSING OF PERSONAL DATA

Welcome to  www.dsleone.es

Digital Service Leone s.r.l. – in the capacity as Data Controller – would like to inform you that pursuant to Art. 13 of Regulation EU 2016/679 (General Data Protection Regulation, hereinafter “GDPR” or “Regulation”) that the data acquired from and/or provided by you will be processed in conformity with current national and European standards regulating the processing of personal data (Lgs. decree 196/2003 and subsequent amendments and additions 101/2018, and GDPR), and always in compliance with the principles of transparency, correctness, and lawfulness, and to protect your privacy and other rights .

Data Controller

Digital Service Leone s.r.l., with registered offices at Via Pratese 160/B, 50145 Florence (FI), e-mail privacy@dsleone.it.

Data subject

Digital Service Leone s.r.l. may process the following data:

  1. 1. Personal data (name, surname, clinic, e-mail, telephone number, any other data that may be entered in blank fields) and acquired through the completion of the registration/contact forms on our website;
  2. 2. Personal data you provide us as an option, writing to the e-mail stated on the website. In this case, the Data Controller will acquire the e-mail address of the sender, as needed to reply to the request, as well as any other personal data entered voluntarily in the communication.

Purpose of data processing and legal basis for same

Data acquired will be processed for the following purposes:

  1. 1. to provide the services on the website, execute your requests, provide quotations and/or answer questions concerning the DSL platform and products/services that are sent to the e-mail addresses stated on the website. The legal basis for processing these data is the legitimate interest of the Data Controller (art. 6, lett. f) of the GDPR) to be more efficient, guarantee the operation of the Platform, provide information on products/services offered, as well as to improve and develop new products/services;
  2. 2. to perform a contract of which you may be party or to implement all of the pre-contractual measures used; as well as all of the operational and management requirements related to signing up for the DSL Platform.  The legal basis in this case is represented by the need to execute a contract or the pre-contractual measures (Art. 6, lett. b) of the GDPR);
  3. 3. to allow registration for and participation in the events listed on our website. In this case, the acquired data will be processed for organisational purposes, instrumental to the organisation of the event. The legal basis in this case is represented by the legitimate interest of the Data Controller to efficiently organise all initiatives (Art. 6 lett. f) of the GDPR).
    To find out more about how data acquired during an event will be processed, you can consult the full privacy statement (informativa_Privacy_eventi):
  4. 4. to fill the legal obligations to which the Data Controller is subject art. 6.1, lett. c) of the GDPR);
  5. 5. to carry out marketing activities, i.e., to provide – only after your express consent – information of a business nature concerning our products/services and/or events (including by e-mail and/or sms).
    The legal basis in this sense is represented by the data subject’s consent (art. 6, lett. a) of the GDPR);
  6. 6. to consent – only after your express consent – to the publishing of your personal and contact data on the website ALLEO (www.al-leo.it), in such a way as to make your name visible to patients interested in DSL therapeutic treatment.

Nature of provision

The provision of personal data is either optional or necessary for the purposes stated.  The obligatory or optional nature of data provision is specified as applicable, at the time of data collection; an asterisk (*) is placed alongside all data of an obligatory nature. Any refusal to provide Digital Service Leone s.r.l. with the data marked as obligatory, will make it impossible to achieve the main purpose: this refusal may, for example, make it impossible for the Data Controller to allow registration, provide you with a quotation or answer your requests. Data provision for the commercial purposes as per point 3 letter e) is optional and requires your express authorisation through consent.  It is therefore possible to decide not to provide any data for this purpose or to subsequently refuse the permission to process data already provided. In this case, you will not receive commercial information or material concerning the products/services offered by the Data Controller.  At any time, you can withdraw consent by writing to the e-mail address privacy@dsleone.it or clicking on the unsubscribe link in one of the promotional e-mails.

Processing method

Data will be processed by persons authorised and duly trained by the Data Controller, using electronic, telematic means or even hard copy, but in any case, the means and procedures used will be appropriate to guarantee the continued security and confidentiality of these data and with a logic strictly related to the purposes stated.

Data retention

The personal data collected will be stored for the time strictly necessary to achieve the aims stated, or in any case, according to that necessary to safeguard both the User and Data Controller in civil law, or if necessary, for time periods longer than those envisaged by law (for example, 10 years by virtue of the obligations concerning tax, administration, or accounting requirements as per Art. 2220 of the Italian civil code). Data will then be deleted or permanently anonymised.  In any case, you can ask for processing of your data to cease or for your data to be deleted at any time. For the commercial purposes as per point 3, lett. e), your data will be stored for a period of no more than 24 months.

Data communication and disclosure

Your personal data can be communicated to the parent company Leone S.p.A., as well as to professionals, collaborators, legal persons and third parties who carry out technical and organisational services that may be used by Digital Service Leone s.r.l. for the processing purposes stated above. These subjects will process data as independent Data Controllers and Processers as per art. 28 of the GDPR, i.e., authorised according to the regulations in force as stated above; they will be provided with the information necessary to perform the relevant functions. An updated list of Processors is available from the Data Controller’s address, as provided in this policy statement. Your personal data will not be disclosed in any other way.

Data transfer

Your personal data are stored on servers located in the European Union. It is in any case understood that the Data Controller, where necessary, will have the right to move servers, including outside the EU. In this case, the Controller will ensure that the transfer of data will take place in compliance with the applicable legal provisions subsequent to stipulation of standard contractual clauses as set down by the European Commission, in compliance with articles 44 and successive of the GDPR.

Data subject’s rights

In your capacity as the Data subject, you may exercise your rights as per articles 15-22 of the Regulation at any time. In particular, you have the right to ask the Data Controller for the following: a) access to personal data and the correction or deletion of same;  b) limits to processing of data concerning you or to oppose processing; c) data portability; d) revocation of consent at any time without affecting the lawfulness of processing based on consent given prior to withdrawal. The data subject also has the right to submit complaints before the Authority for the Protection of Personal Data. This right may exercised by: – registered letter with recorded delivery, sent to Digital Service Leone s.r.l., Via Pratese 160/B, 50145 Florence (FI) – or e-mail to privacy@dsleone.it

Updates and amendments

The Data Controller reserves the right to make changes to this privacy statement at any time and without prior warning, also in consideration of changes to legal provisions or regulations governing its rights. Amendments will be applied as from their publication on the website. We therefore kindly request that you consult this section to check publication of the most recently updated Privacy Policy.