Privacy Policy

Information notice

Information notice pursuant to Article 13 of the Regulation EU 2016/679 (hereinafter “GDPR”)

Pursuant to Article 13 of the GDPR, Lifepharma S.p.A., as data controller (hereinafter also “Data Controller”), provides you with this information notice related to the processing of Your personal data when browsing the website www.lifepharma.it (hereinafter, “Website”).

This information notice is provided solely for the website www.lifepharma.it and it does not concern other websites accessible by the user through the links contained within the Website. Please check the privacy notices provided to you by third-party websites accessible through the Website and identify the applicable terms and conditions concerning the processing of Your personal data.

A. Categories of personal data and source of personal data

While browsing the Website, the following personal data may be collected:

Personal data collected during the web browsing

Servers and software procedures aimed to correct functioning of this Website collect personal data during ordinary functioning. The transmission of personal data is implicit due to the use of Internet communication protocols. These data are not collected in order to be associated with identified data subject, however they could allow the identification of users through the elaboration and association with other data owned by third parties.

This category of personal data includes IP addresses or domain names used by users to connect to the Website, URI addresses (Uniform Resource Identifier) of requested resources, the time of the request, the method used to process the request to the server, the size of the file received, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to operating systems and the user's IT environment.

This data is used for the sole purpose of obtaining anonymous statistical information related to the use of the Website and to check its correct functioning.

It is possible to restrict the processing of aforementioned personal data through some functionalities available on the Website (in particular, with regard to the transmission of cookies, please refer to the Cookie Policy accessible on the Website) or on the device or browser application. In that event, the web surfing on the Website may be limited and some functions/services may be not accessible.

The aforementioned personal data is collected directly from data subjects.

Personal data voluntarily provided

Browsing certain areas of the Website, You will be asked to provide personal data. In this event, we will provide You with an Information notice pursuant to article 13 and, where applicable, to Article 14 of the GDPR. You will receive all the information on the purposes and means of the processing of Your personal data.

B. Purposes and legal basis of the processing

Lifepharma S.p.A. will carry out the processing of Your personal data collected during the web browsing in order to optimize the functioning of the Website and in order to allow the use of to provide its services also through cookies, as better specified within the Cookie Policy.

The legal basis of the processing of Your web browsing personal data is the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject before entering into a contract (Article 6, paragraph (1), letter (b) of the GDPR.

C. Methods of processing and communication of personal data

The processing of Your personal data collected while browsing the Website will be carried out by authorized persons using appropriate tools to ensure security and confidentiality and may be carried out manually or with the support of manual, computerised and electronic tools to memorize, organize and transfer personal data.

Your personal data collected during the web browsing will be accessible only to authorized persons, who are expressly in charge and instructed by the Data Controller with regard to the processing of personal data pursuant to Article 29 of the GDPR.

Furthermore, other trusted companies will carry out, as data processors, the processing of Your personal data collected during the web browsing. These companies perform technical and organizational tasks on behalf of the Data Controller (i.e. companies responsible for the technical management and maintenance of the Website or third parties, with whom the Data Controller collaborates in business services). The Data Controller has appointed the aforementioned companies as external Data Processors pursuant to Article 28 of the GDPR.

An updated list of Data Processors is available, on request, sending a communication to the addresses below.

Moreover, in addition to the aforementioned subjects, Your web browsing personal data might be communicated, when required or provided by applicable laws, to competent supervisory authorities, tax authorities and other authorities, within the respective area of competence.

As to the potential transfer of personal data to non-EU countries, included countries that could not guarantee the same level of data protection provided for by the GDPR, the Data Controller informs You that the processing will be carried out in compliance with GDPR, i.e. through gathering Your consent, by the adoption of standard clauses approved by the European Commission, participating to international programs for the free movement of data (i.e. EU-USA Privacy Shield) or working in countries deemed safe by the European Commission.

Personal data will not be disclosed in any way.

D. Data retention period

Your personal data shall be stored for 3 months from collection and, in any cases, not beyond the achievement of the purposes for which they have been collected (principle of the storage limitation, article 5 of GDPR), and in compliance with a legal obligation or with an order of a legitimated authority.

After the expiry of the retention period, personal data will be erased, destroyed or anonymised, without prejudice to potential data retention period provided by the law.

E. Your rights

According to articles 15 to 22 of the GDPR you have the right to access to a copy of the information comprised in your personal data, object to processing that is likely to cause or is causing damage or distress, object to decisions being taken by automated means, obtain the limitation of the process (in certain circumstances), have (in certain circumstances) your personal data rectified, integrated, blocked, erased or destroyed, obtain the portability of your personal data and the right to propose a claim to the Supervisory Authority. For a complete list please visit: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679.

You are entitled to exercise the rights according to Articles from 15 to 22 of the GDPR and to ask, at any time, for information about the processing of your personal data carried out by Lifepharma S.p.A. Furthermore, you can object to the processing of personal data in cases provided by laws, addressing to:

F. Data Controller and Data Protection Officer

The Data Controller is:

Pursuant to Article 37 of the GDPR, the Data Protection Officer (DPO) of Lifepharma S.p.A. is available to reply to any request sent to the following e-mail address: infoprivacy.italy@italfarmacogroup.com or at the address: