Website Privacy Policy

WEBSITE PRIVACY POLICY

Information pursuant to and for the purposes of Article 13 of EU Regulation 2016/679

In compliance with the provisions of EU Regulation 2016/679 (“GDPR“), this page describes the methods of processing personal data provided while browsing this website. The information does not apply to third party websites viewed through links on this website, for which the Data Controller takes no responsibility.

What personal data are processed?

Personal data: any information relating to an identified or identifiable natural person (“Data Subject”). The Data Controller, through the website, collects various personal data, by way of non-exhaustive example: name, surname, email address, telephone number.

Navigation data: the computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols, such as IP addresses or domain names of computers and terminals used by users.

Information about the processing of personal data carried out through Social Media platforms: with regard to the processing of personal data carried out by the managers of the Social Media platforms used by Columbus Clinic Center Srl, please refer to the information provided in their privacy policies. Columbus Clinic Center Srl processes the personal data provided by users through the pages of dedicated Social Media platforms for the only purpose of managing interactions with users (comments, public posts, etc.) and in compliance with the current legislation.

Specific information: may be present on the pages of the website in relation to particular services or processing of the data provided.

Cookies and other tracking systems. What are they? What are they used for?

For cookies and other tracking systems, please refer to the cookie policy reported in the footer of the site and at the following link.

Who is the Data Controller? How to get in touch?

Pursuant to art. 4 and 24 of EU Reg. 2016/679, the Data Controller is Columbus Clinic Center S.r.l., with registered office at Via Michelangelo Buonarroti 48, 20145 Milan (MI), in the person of the legal representative for the time being, who can be contacted for any information by telephone at +39 02-480801, or email at privacy@columbus3c.com.

What are the contact details of the Data Protection Officer?

The Data Controller has appointed its own Data Protection Officer (DPO) pursuant to art. 37, 38 and 39 of the GDPR, who can be contacted by email at: dpo@columbus3c.com.

Purpose of the processing, legal basis, data retention period and nature of the provision

To whom will the personal data collected be communicated? Who are the recipients?

The personal data provided will be communicated to recipients who will process the data as Data Processors (Article 28 of EU Reg. 2016/679), persons specially authorized by the Data Controller and the Data Processors (art. 29 of EU Reg. 2016/679) or separate data controllers for the purposes listed above.

Specifically, the data will be communicated to:

– Subjects providing services for the management of the information system used by the Data Controller and of the telecommunication networks (including email, assistance and maintenance services for the website);

– Subjects who provide assistance, maintenance and updating services for the Data Controller’s website;

– External professionals or companies in the field of assistance and consultancy relationships;

– Competent authorities, for the fulfillment of legal requirements and / or provisions of Public Authorities, upon their request.

The list of data processors is constantly updated and available at the headquarters of the Data Controller. To request a copy, contact dpo@columbus3c.com.

Will personal data be transferred to “non-EEA” countries?

The Data Controller does not transfer personal data to countries outside the EEA.

Is there an automated process?

Personal data are not subjected to fully-automated decision-making processes.

What are your rights? How can you exercise them?

You can exercise your rights as granted by articles 15 et seq. of the GDPR, by contacting the Data Controller at the email address privacy@columbus3c.com,, or by contacting the DPO at dpo@columbus3c.com. You have the right, at any time, to request access to your personal data (Article 15), obtain rectification (Article 16), deletion (Article 17), and restriction to processing (Article 18). The Data Controller communicates (Article 19) any rectifications, deletion or restrictions of the data processed to each of the recipients to whom the personal data have been transmitted. The Data Controller will communicate these recipients to the Data Subject if the Data Subject should request it. In the cases provided for by the law, you have the right to request the portability of your data (Article 20) and these will be provided in a structured, commonly used and machine readable format. You have the right to oppose (Article 21), at any time, to the processing of your personal data on grounds relating to your personal situation. Users who no longer wish to receive the Clinic’s newsletters (via email) may opt-out at any time by sending a message to privacy@columbus3c.com and specifying in the subject “unsubscribe from automated messages” or using our automatic cancellation systems intended for email messages only.

If you believe that the Data Controller is processing your data in violation of the provisions contained in the GDPR, you have the right to lodge a complaint with the competent Supervisory Authority of the Member State in which you normally reside or work or of the place where the alleged infringement occurred, or take legal action.

Further information

The Data Controller reserves the right to modify, update, add or remove parts of this privacy policy at its discretion and at any time. In order to facilitate this verification, the document will display an updated revision date.

Updated: 11th April, 2022