GDPR Terms

By registering on the DoctorAsyou portal you will have access to all features it provides, more specifically, the “search engine” service that will allow you to navigate in a single environment among the multiple sources of online information and rapidly identify the topic of interest to you.

Data Processing, Methods and Purposes

The personal data collected in the registration form, provided deliberately by the User, may be used and processed - in paper and electronic form - by automated storage both in the Alfasigma computer system and in the Azure cloud platform of Microsoft. Specific security measures are complied with to prevent data loss, unlawful or incorrect use and unauthorised access.

Under Article 6.1. letter b) of the GDPR (“contractual basis”), the processing of data is necessary:

1. when registering and accessing by the User to the Portal www.doctorasyou.com, as well as the provision of the functions connected to it;
2. when creating a user profile, through the analysis of the navigation history, the searches made, the material accessed and the preferences selected (profiling).

Under Article 6.1. letter a) of the GDPR (“consent of the data subject”), the consent of the data subject is necessary to carry out the activities of sending sales and promotional information (marketing).

Disclosure of Processed Data

The personal data collected may also be disclosed to other companies, whether parent companies, subsidiaries or affiliates pursuant to Article 2359 of the Italian Civil Code, including through processors only for the purposes of processing the data indicated above.

Please note that the personal data shall be disclosed to public or private entities only if required by law or regulation or if such disclosure is necessary for the performance of institutional duties.

Data Transfer

Personal data shall be managed and stored on servers, located within the European Union, of the Controller and/or third companies entrusted and duly appointed as Processors.

The data are not currently being transferred outside the European Union.

In any event, it is understood that the Controller, where necessary, may move the location of the servers, in Italy, within the European Union and/or in countries outside the EU.

In this event, the Controller hereby ensures that the transfer of non-EU data shall take place in accordance with Articles 44 et seq. of EU Regulation 679/2016 (GDPR) and the applicable law provisions and, if necessary, by entering into agreements guaranteeing an adequate level of protection.

Period of Data Storage

Data shall be stored in accordance with one of the following criteria:

• for a period of time not exceeding that necessary to achieve the purposes for which they are processed and, in any event, not exceeding 24 months;
• for a period of time not exceeding that necessary for the fulfilment of law obligations.

Data Subjects’ Rights

The data subject shall have the right, at any time, to obtain confirmation of the existence of his/her personal data and to know their origin, to verify their accuracy or to have incomplete personal data completed or updated, or rectified (Articles 15, 16, 17, 18, 20, 21, GDPR).

To obtain further information about his/her rights, the data subject may read the Privacy Policy section of the Web Portal available at the following link [insert link to the privacy policy of the Portal].

Controller

The Controller is Alfasigma S.p.A. with registered and administrative office in Bologna - Via Ragazzi del '99, No. 5.

A more detailed privacy policy will be available at the privacy policy page [insert link to the privacy policy of the Portal]

Processor

The company iCrossing has been appointed as Processor pursuant to Article 28 of the aforementioned Regulation, as it is responsible for the development, maintenance and management of the platform and database in which the Users' personal data are collected, as well as for the management of access on a dedicated server, under a service agreement entered into with Alfasigma.

The updated list of Processors and persons in charge of the Processing is available on request at the following e-mail address: privacy@alfasigma.com.

Amendments to this Privacy Policy

This Policy could be amended from time to time. We therefore recommend that users refer to the most current version available at the privacy policy page [insert link to the privacy policy of the Portal].