PRIVACY POLICY
(website ex Article 13 EU Regulation 2016/679.)

Data requested are processed by Expo Italia Srl, headquartered in Florence, via Segantini n.34, (Tax Code VAT 0469704048 – certified e-mail address: expoitalia@pec.biodermogenesi.it, contact number: 0557875341, e-mail address: info@biodermogenesi.com), Personal Data Holder.

Processing of personal data, pursuant to and for the purposes of the current legislation (Legislative Decree n.196 of June 30th, 2003 and EU Regulation 2016/679), is carried out in order to provide information and advice on Biodermogenesi® therapeutic programs, to send digital communications (or paper-based and/or telephonic if contact details are indicated) and to comply with contractual and legal obligations (Purpose of the processing).

Expo Italia Srl shall process identification data for the aforementioned purposes; therefore, data are necessary to proceed with the disclosure of information and possible delivery of the service requested. Legal basis of the processing is the execution of pre-contractual measures and any contractual relationship, which results into fulfillment of legal obligations deriving from them. In the event of disputes concerning this relationship, the legal basis is the legitimate interest of the Data Holder for the right of defense.

The processing of personal data shall consist in the collection, registration, organization, structuring, storage, processing, adaptation or modification, extraction, selection, consultation, use, communication by transmission or other forms of making available, comparison or interconnection, limitation, cancellation or destruction of the same. The data processing shall be carried out with the aid of electronic, computer and telematic tools suitable for guaranteeing their confidentiality, in accordance with the provisions of current legislation.

Data shall be processed by us in paper, magnetic and telematic format with the help of tools suitable for guaranteeing their security and shall be stored in Personal Data Holder’s database.

The provision of personal data does not constitute a legal obligation, in the event of refusal to provide such information Expo Italia Srl shall not be able to provide the information and advice requested.

Personal data are processed exclusively by specially trained subjects appointed by the Personal Data Holder.

Personal data may be communicated to all subjects (recipients) to whom the right of access is recognized by current legislation and for purposes related to legal obligations (e.g. Guarantor, Public Authorities), as well as to employees assigned to the processing by our society. They may also be communicated to IT experts and subjects in charge of managing the website and the services necessary for its operation, who shall be designated as Data Processors pursuant to Article 28 of EU Regulation 2016/679. The list of Data Processors is available at the Expo Italia Srl head office. Personal data shall not be disclosed.

Personal data are stored on servers located in Italy and, in any case, within the European Union. Anyway, it is understood that the undersigned Data Holder, if necessary, will have the right to move the servers even outside the EU. In this case, he ensures from now that the transfer of non-EU data will take place in accordance with the applicable legal provisions and with the provisions of articles 44 and following of EU Regulation 2016/679.

Pursuant to EU Regulation 2016/679, as an interested Party you can exercise the following rights:
a) the right to obtain from Data Holder the confirmation that your personal data are or are not being processed and, if so, to have access to personal data and information pursuant to Art. 15 (e.g. information relating to the purposes of the processing, to the categories of personal data in question, to the recipients or categories of recipients to whom the personal data have been or will be communicated, to the retention period, to their rights, to the origin of the data if not collected from the interested Party, to the existence of an automated decision-making process, etc…);
b) the right to obtain, where inaccurate, the rectification of your personal data, as well as the integration of the same where deemed incomplete always in relation to the purposes of the processing (Art. 16);
c) the right to delete data (“right to be forgotten”), where one of the cases referred to in Art. 17 occurs;
d) the right to limit the processing, in the cases provided for by Art. 18;
e) the right to data portability pursuant to Art. 20;
f) the right to reject the processing pursuant to Art. 21;
g) where the legal basis of the processing is consent, the right to withdraw the consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation.

Data Holder adopts automated decision-making processes, the rights referred to in Art. 22 of EU Regulation 2016/679 apply to the interested Party.

The interested Party also has the right to be informed, where possible, of the intention of the Data Holder to transfer the data to a Third Country or to an International organization and of the existence or absence of an adequacy decision by the Commission or, in the event of transfers pursuant to Art. 46, 47 and 49 c. 2, the reference to the appropriate guarantees and the means to obtain a copy of such data or the place where they were made available.

All the aforementioned rights can be exercised by sending an informal request to the Data Holder (e.g. by contacting us via e-mail or telephone).

Ultimately, as an interested Party, you have the right to lodge a complaint with a supervisory authority (Art. 77 of EU Regulation 2016/679 – Art. 140 bis and following of Legislative Decree 196/2003).

Personal data shall be kept only for the time strictly necessary to carry out the purposes described above and to fulfill the obligations established by law (e.g. if the relationship is limited to simple information until it is provided to you, in the event of establishment of a contractual relationship storage is limited to the time connected with the execution of the contract and related administrative, fiscal and accounting obligations). Any disputes which may extend the retention period indicated above remain unaffected.
Subsequently, once the strictly necessary time has elapsed, personal data shall be deleted or transformed into anonymous form and used for statistical purposes only.

Personal Data is collected for the following purposes and using the following services:

Contact by telephone
Users who provided their telephone number may be reached for commercial or promotional purposes related to this application as well as receiving support they may require.
Processed personal data: the phone number

Mailing list or newsletter
By registrating to the mailing list or the newsletter, the user’s email address is automatically added to a list of contacts where informational emails, including commercial and promotional information, relating to this application may be sent. The user’s email address could also be added to this list as a result of registering to this application or after making a purchase.
Processed personal data: city, surname, email, physical address, nationality, name, telephone number, province.

Contact form
By filling out the contact form with his/her own data, the user consents to its use in order to respond to the requests for information, quotation or any other disposition indicated by the header of the form.
Processed personal data: city, surname, e-mail, physical address, nation, first name, telephone number, province.

Contact management, sending messages and user database management
This kind of service consents to manage a database of email contacts, telephone contacts or any other type of contacts used for communicating with the user.

These services may also allow the collection of data related to the date and time of the visualization of the messages by the user, as well as the user’s interaction with them, such as the information about the clicks on the links embedded in the messages.

This type of services allow the owner to form user profiles from an email address, name or any other information which the user provides for this application as well as tracking the user’s activities through statistical features. These personal datas may also be cross-referenced with publicly available information about the user (such as profiles on social networks) and used for forming private profiles that the owner may view and use them to improve this application. Some of these services may also allow to send the scheduled messages to the user, such as emails based on specific actions performed on this application.
ActiveCampaign Text Message and SMS Marketing (ActiveCampaign, Inc.)
ActiveCampaign Text Message and SMS Marketing is an address management and email messaging service provided by ActiveCampaign, Inc.
Processed personal data: email, name, telephone number.
Processing Place: United States – – Privacy Policy.

Expo Italia Srl