According to the General Data Protection Regulation (Art.13, European Regulation 2016/679) the User acknowledges that EVIDILYA S.R.L. undertakes to process the User’s personal data according to the principles of correctness, lawfulness and transparency and protection of confidentiality.

La presente informativa ne recepisce le previsioni e intende informare gli utenti del Chatbot, in merito all’utilizzo dei dati personali connessi con l’utilizzo del servizio. This privacy notice incorporates the provisions and intends to inform Chatbot users, about the use of personal data connected with the use of the service.

What is a Chatbot? A chatbot is a software that, by simulating human behavior, is able to communicate with a user in natural language, responding to any requests from the User by text or voice. The Chatbot made available by EVIDILYA S.R.L. is an accessory and optional assistance service, offered to its customers.

Therefore, the User is informed that:

A. CATEGORIES OF DATA: the object of the processing are personal data that the Data Controller automatically collects if the user decides to interact with the Chatbot, including:

• Name and surname of the user;
• Username (Chatbot);
• Chatbot user ID;
• IP address;
• E-mail address;
• Telephone number;
• Content of the chats (also particular data pursuant to Article 9 of the GDPR).

B. DATA CONTROLLER: the data controller is EVIDILYA S.R.L., Via Brisa,3 – 20123 Milano (MI), P. iva 06957380964, and can be reached by phone at 02.49530065 or by email at privacy@evidilya.com

C. SOURCE OF PERSONAL DATA: personal data are collected directly from the data subject.

D. PURPOSE OF DATA PROCESSING AND LEGAL BASIS: the processing of your data has as its purpose and legal basis:

1. Execution of pre-contractual measures (Art. 6, letter B) GDPR): to respond to requests and to offer real-time assistance. It also has as its legal basis your consent for the following purposes:
2. Possible collection of particular data pursuant to art. 9 of the GDPR (including data relating to the state of health), released spontaneously by the user in chat.
3. Subscription to the newsletter for sending information and commercial communications and / or for direct marketing activities, also by means of sms or other digital tools or for research related to customer satisfaction (survey), by the Data Controller, Sprim ITALIA S.r.l. and Proxima Salute S.r.l.
4. The sending of commercial and / or marketing communications, including by means of newsletters, sms, WhatsApp or other digital tools, by third parties belonging to the following sectors: food, pharmaceutical, medical, training, editorial

E. DATA RECIPIENTS: within the limits relevant to the processing purposes indicated, your data may be communicated to partners, consulting companies, private companies, appointed as Data Processors by the Data Controller. Your data will not be disseminated in any way.

F. TRANSFER OF PERSONAL DATA BETWEEN COUNTRIES: your personal data are not transferred to third countries.

G. DATA RETENTION PERIOD: the data collected will be kept for a period of time not exceeding the achievement of the purposes for which they are processed (“storage limitation principle”, art.5, GDPR) or according to the deadlines provided for by law. The verification of the obsolescence of the data stored in relation to the purposes for which they were collected is carried out periodically.

H. RIGHTS OF THE DATA SUBJECT: each user is always entitled to request the Data Controller to access, correct or delete his data, limit the processing or the possibility of objecting to the processing, requesting data portability, revoking consent to the processing of data, claiming these and other rights provided by the GDPR through a simple communication to the Controller. The data subject can also lodge a complaint with a supervisory authority.

I. OBLIGATION OF THE DATA SUBJECT TO PROVIDE PERSONAL DATA: we inform you that the provision of data is mandatory to provide feedback to your requests and guarantee a real-time assistance service; as regards the purposes based on the consent referred to in points D2, D3 and D4, the provision of data is optional.

J. METHODS OF DATA PROCESSING: the personal data you provide will be subject to processing operations in compliance with the aforementioned legislation and the confidentiality obligations that inspire the activity of the Data Controller. The data will be processed both with IT tools and on paper and on any other type of suitable support, in compliance with the appropriate security measures pursuant to the GDPR.

K. CONTACT DETAILS OF THE D.P.O. : the Controller has appointed the D.P.O. who can be contacted by email at the address dpo@evidilya.com.

L. AUTOMATED DECISION-MAKING PROCESSES: automated decision-making processes are envisaged.