According to the General Data Protection Regulation (Art.13, European Regulation 2016/679) the User acknowledges that EVIDILYA S.R.L. undertakes to process the User’s personal data according to the principles of correctness, lawfulness and transparency and protection of confidentiality. Therefore, the User is informed that:

A. CATEGORIES OF DATA: the object of the processing may be your personal data such as identification data, personal data and contact data.

B. DATA CONTROLLER: the data controller is EVIDILYA S.R.L., Via Brisa,3 – 20123 Milano (MI), P. iva 06957380964, and can be reached by phone at 02.49530065 or by email at privacy@evidilya.com.

C. SOURCE OF PERSONAL DATA: personal data are collected directly from the data subject.

D. PURPOSE OF DATA PROCESSING AND LEGAL BASIS: the processing of your data, collected and stored in relation to the compilation of this “Newsletter” form, has as its legal basis your consent and is carried out for the following purposes:

1. Subscription to the newsletter for sending information and commercial communications and / or for direct marketing activities, also by means of sms or other digital tools or for research related to customer satisfaction (survey), by the Data Controller, Sprim ITALIA S.r.l. and Proxima Salute S.r.l.
2. The sending of commercial and / or marketing communications, including by means of newsletters, sms, WhatsApp or other digital tools, by third parties belonging to the following sectors: food, pharmaceutical, medical, training, editorial

E. DATA RECIPIENTS: within the limits relevant to the processing purposes indicated, your data may be disclosed to third parties (affiliates of the Data Controller), consulting companies, private companies, hosting providers, web service providers, platform managers for sending newsletters, appointed as Data Processors by the Data Controller. Your data will not be disseminated in any way.

F. TRANSFER OF PERSONAL DATA BETWEEN COUNTRIES: your personal data are not transferred to third countries.

G. DATA RETENTION PERIOD: the data collected will be kept for a period of time not exceeding the achievement of the purposes for which they are processed (“storage limitation principle”, art.5, GDPR) or according to the deadlines provided for by law. The verification of the obsolescence of the data stored in relation to the purposes for which they were collected is carried out periodically.

H. RIGHTS OF THE DATA SUBJECT: each user is always entitled to request the Data Controller to access, correct or delete his data, limit the processing or the possibility of objecting to the processing, requesting data portability, revoking consent to the processing of data, claiming these and other rights provided by the GDPR through a simple communication to the Controller. The data subject can also lodge a complaint with a supervisory authority.

I. OBLIGATION OF THE DATA SUBJECT TO PROVIDE PERSONAL DATA: we inform you that the provision of data it is optional, but that failure to provide it will make it impossible to perform the requested newsletter service.

J. METHODS OF DATA PROCESSING: the personal data you provide will be subject to processing operations in compliance with the aforementioned legislation and the confidentiality obligations that inspire the activity of the Data Controller. The data will be processed both with IT tools and on paper and on any other type of suitable support, in compliance with the appropriate security measures pursuant to the GDPR.

K. CONTACT DETAILS OF THE D.P.O. : the Controller has appointed the D.P.O. who can be contacted by email at the address dpo@evidilya.com.

L. AUTOMATED DECISION-MAKING PROCESSES: there are no automated decision-making processes.