According to the General Data Protection Regulation (Art.13, European Regulation 2016/679) the User acknowledges that EVIDILYA S.R.L. undertakes to process the User’s personal data according to the principles of correctness, lawfulness and transparency and protection of confidentiality. Therefore, the User is informed that:

A. CATEGORIES OF DATA: the object of the processing may be your personal data such as identification data, personal data and contact data, professional qualification, information contained in the attached curriculum vitae.

B. DATA CONTROLLER: the data controller is EVIDILYA S.R.L., Via Brisa,3 – 20123 Milano (MI), P. iva 06957380964, and can be reached by phone at 02.49530065 or by email at privacy@evidilya.com.

C. SOURCE OF PERSONAL DATA: personal data are collected directly from the data subject.

D. PURPOSE OF DATA PROCESSING AND LEGAL BASIS: the processing of your data has as its purpose and legal basis:

1. Execution of pre-contractual measures (Art. 6, letter B) GDPR): filling the form for the purpose of sending the curriculum vitae for the research and selection of clinical partners. It also has as its legal basis your consent for the following purposes:
2. Subscription to the newsletter for sending information and commercial communications and / or for direct marketing activities, also by means of sms or other digital tools or for research related to customer satisfaction (survey), by the Data Controller, Sprim ITALIA S.r.l. and Proxima Salute S.r.l.
3. The sending of commercial and / or marketing communications, including by means of newsletters, sms, WhatsApp or other digital tools, by third parties belonging to the following sectors: food, pharmaceutical, medical, training, editorial

E. RECIPIENTS OF THE DATA: within the limits relevant to the processing purposes indicated, your data may be communicated to various recipients such as public and private bodies by legal obligation or communicated to subjects functional to the achievement of the purposes set out above internal and external to the Data Controller such as, but not limited to, collaborators, freelancers, law firms, …

F. TRANSFER OF PERSONAL DATA BETWEEN COUNTRIES: your personal data are not transferred to third countries.

G. DATA RETENTION PERIOD: the data collected will be kept for a period of time not exceeding the achievement of the purposes for which they are processed (“storage limitation principle”, art.5, GDPR) or according to the deadlines provided for by law. The verification of the obsolescence of the data stored in relation to the purposes for which they were collected is carried out periodically.

H. RIGHTS OF THE DATA SUBJECT: each user is always entitled to request the Data Controller to access, correct or delete his data, limit the processing or the possibility of objecting to the processing, requesting data portability, revoking consent to the processing of data, claiming these and other rights provided by the GDPR through a simple communication to the Controller. The data subject can also lodge a complaint with a supervisory authority.

I. OBLIGATION OF THE DATA SUBJECT TO PROVIDE PERSONAL DATA: The provision of data for the purposes indicated above is necessary and mandatory for the purpose of sending your application, therefore, failure to provide data, makes it impossible for the Data Controller to contact you for a possible personnel selection activity. With regard to the purposes based on consent referred to in points D2 and D3, the provision of data is optional.

J. METHODS OF DATA PROCESSING: the personal data you provide will be subject to processing operations in compliance with the aforementioned legislation and the confidentiality obligations that inspire the activity of the Data Controller. The data will be processed both with IT tools and on paper and on any other type of suitable support, in compliance with the appropriate security measures pursuant to the GDPR.

L. CONTACT DETAILS OF THE D.P.O. : the Controller has appointed the D.P.O. who can be contacted by email at the address dpo@evidilya.com.

M. AUTOMATED DECISION-MAKING PROCESSES: there are no automated decision-making processes.