Privacy

DEAS  S.R.L.,  a Company with head office in CASTELBOLOGNESE (RA), VIA DELL’INDUSTRIA  N.49, in its capacity as Personal Data Controller pursuant to art. 4 of EU Regulation 2016/679, informs you pursuant to art. 13 of said Regulation, that your personal data will be processed manually and/or by automated means for the purposes hereinafter indicated.

Purposes of the  data  processing, legal basis and  any  third party recipient of the  data.

Your personal data will be processed for purposes related to the management of ordinary business relationships and,  specifically, for  the  compilation of  registry lists, customer/supplier bookkeeping, invoicing, communications by paper or automated means.

Your data  may  be used  for  internal statistical purposes and  market research.

Your data may also be disclosed to third parties, for technical and operational requirements strictly connected to the purposes set out above and particularly to the following categories of subjects:

  1. entities, professionals, companies or other structures appointed by us for processing related to the fulfilment of administrative, accounting and management obligations as required by the ordinary performance of our economic activity, also for purposes of debt recovery;
  2. public authorities and administrations for the purposes related to the fulfilment of legal obligations;
  3. banks,  financial  institutions  or  other  subjects  requiring  transfer  of  the  aforementioned  data  in connection with the performance of our company’s activity and in relation to the fulfilment, on our part, of the contractual obligations towards yourselves;
  4. suppliers of installation, assistance and maintenance services for computer and telematic systems and facilities, and of all the services functionally connected and necessary to the performances under the contract.

Any failure to provide us with your personal data will make it impossible, on our part, to fulfil contracts and other related obligations, as well as to properly manage our mutual business relationship.

We point out that we may send commercial and/or promotional communications to you concerning products and services similar to those covered by the existing contractual relationship, unless you deny consent thereto.

Legal basis

Your  personal  data  will  be  processed  for  performance  of  a  contract  entered  into  with  you  or  for implementing of pre-contractual measures taken at your request.

Sending  of  commercial  and/or  promotional  communications  related  to  products  and  services  similar  to those  covered by  the  existing  contractual relationship is  based  on  the  legitimate  interest  of  the  Data Controller.

Data  retention period

Your personal data will be stored for the time strictly necessary to carry out the above-mentioned purposes and to fulfil the obligations provided for by law.

Rights of the  Data  Subject

Pursuant to articles 13, paragraph 2, and 15 to 21 of the Regulation, we inform you that in relation to the processing of your personal data you may exercise the following rights:

a) Right to obtain access to personal data and to the following information:

  • confirmation as to whether or not your personal data are currently being processed;
  • the purposes of the processing;
  • the categories of personal data;
  • the recipients or categories of recipients to whom the personal data have been or will be disclosed;
  • where the data are not collected from the data subject, all information available on their origin;
  • the existence of an automated decision-making process, including profiling;
  • a copy of the personal data undergoing the processing.

b) Right to rectification and integration of personal data;

c) Right to erasure of data («right to be forgotten») if one of the following grounds exists:

  • the  personal  data  are  no  longer  necessary  in  relation  to  the  purposes  for  which  they  were collected or otherwise treated;
  • the data subject withdraws consent on which the processing is based and there is no other legal ground for the processing;
  • the data subject objects to the processing and there are no overriding legitimate grounds for the processing;
  • the personal data have been unlawfully processed;
  • the personal data have to be erased for compliance with a legal obligation in the Union or Member State law to which the controller is subject;Where the data controller has made the personal data public and is obliged to erase them, said data controller shall inform the other controllers that are processing said personal data about the data subject’s request to erase any links to, or copy or replication of those personal data.

d) Right to restriction of processing when:

  • the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
  • the processing is unlawful and the data subject objects the erasure of the personal data and requests the restriction of their use instead;
  • the controller no longer needs the personal data for the purposes of the processing, but it is required by the data subject for the establishment, exercise or defence of legal claims;
  • the data subject has objected to the processing, pending the verification whether the legitimate grounds of the controller override those of the data subject.

e) Right to lodge a complaint with the Data-Protection Supervisor, following the procedures and indications published on the official website of the Authority  garanteprivacy.it.

f) Right to  the  portability of  data  of  the  data subject or  the  right  to  receive the  personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and possibly to transmit said data to another controller, when the processing is based on consent or on a contract and is carried out by automated mean Where technically feasible, the data subject shall have the right to have his/her personal data transmitted directly from one controller to another.

g) Right to object at any time to processing of personal data concerning him or her, including profiling, particularly in the case where:

  • processing is based on the legitimate interest of the data subject, after statement of the grounds for such objection;
  • personal data are processed for direct marketing purpose

h) The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, except in cases where the decision: is necessary for entering into or for performance of a contract between the data subject and a data controller, is authorised by the Union or Member State law to which the controller is subject or is based on the data subject’s explicit consent.

i) Right to withdraw consent at any time.
The exercise of rights is not subject to any form constraint and is free.

Procedure for  the  exercise of rights

The data subject may at any time exercise his/her rights by sending:

  • a  registered  letter  with  return  receipt  to  DEAS   S.R.L.   CASTELBOLOGNESE (RA),  VIA DELL’INDUSTRIA N.49;
  • an email to the address deas@pec.deasnet.it.

Data  Controller

The Data Controller is DEAS  S.R.L..  Contact details: SCARDOVI DOMENICO.

All information in this website has no contractual value. It concerns medical devices that can only be used by healthcare professionals. Unqualified operators/entities are not entitled to use such information. Deas does not respond to any technical or commercial information request arising from patients.