The European Regulation EU/2016/679 (hereinafter “Regulation“) lays down rules on the protection of individuals with regard to the processing of personal data and rules on the free movement of such data.

In compliance with the principle of transparency provided by art. 5 of the Regulation, Guna S.p.a. via Palmanova 71 – 20132 Milano – P. iva 06891420157 tel: +39 02 280181 | email: [email protected] , as Data Controller, provides you with the information required by art. 13 of the Regulation.

Purposes of the processing

The processing of your personal data will be based on principles of correctness, lawfulness, and transparency, protecting your confidentiality and your rights and in compliance with the company’s privacy policy. The company also undertakes to process your data in compliance with the principle of “minimisation”, i.e. acquiring and processing the data only to the extent necessary for the following purposes:

a)   Registration and participation in surveys, online events (Webinars, Talk…) regarding scientific     information focused on the topics of treatment of musculoskeletal system pathologies;

b)   Sending information on training events of a professional nature;

c)   Sending of promotions in the form of newsletters or DEM relating to the activities of the data      controller;

d)   Scientific, organisational and technical support;

e)   Participant satisfaction survey activities.

We also inform you that:

Nature of the data and conferment

For the pursuit of the purposes set out in points a), b), c), d), e), we inform you that common personal data will be collected and processed, in particular: common personal data capable of identifying you or of providing generic information on your identity, contact data (telephone number, e-mail, etc.), username, personal password, residential address, images and video recordings capable of revealing identity, profession and professional preferences, data relating to computer sessions.

The provision of data is optional.

If personal data is not provided, the service cannot be provided.

Method of processing

The processing of your personal data will be carried out by means of computerised, fully or partially automated, and paper-based methods, in compliance with the provisions on the protection of personal data and, in particular, with the appropriate technical and organisational measures referred to in Article 32(1) of the Regulations, and with the observance of all precautionary measures to ensure the integrity, confidentiality and availability of the data.

Source of data

All data are collected directly from the data subject.

Categories of recipients

In relation to the purpose set out in point a), your personal data will be shared with speakers at webinars or other online events.

The list of Data Processors pursuant to Art. 28 EU Reg. 2016/679 is available in the company and can be viewed upon request to the Data Controller.

Furthermore, your data will be processed, exclusively for the above-mentioned purposes, by company employees and/or collaborators, specifically authorised and instructed by the Data Controller pursuant to art. 29 of the Regulation.

Your personal data will not be divulged, unless required by a law or regulation or by Community legislation.

Storage Period

In relation to the purposes referred to in points a), d), the data will be kept for ten years from the date of termination of the contract; in relation to the purposes referred to in points b) and e) the e-mail will be kept for 5 years from the date of subscription to participation in the events unless the data subject objects; in relation to the purposes referred to in point c) the processing will continue until the revocation of consent pursuant to Art. 7 par. 3 GDPR and in any case no longer than 5 years.

Rights granted to the data subject

You may at any time exercise your rights against the Data Controller, as provided for in Articles 15-22 of the Regulation.

In particular, at any time, you will have the right to request:

You will also have:

Please also note that, pursuant to Article 7(3) of the Regulation, the data subject has the right to withdraw his or her consent at any time. Withdrawal of consent does not affect the lawfulness of the processing based on the previously acquired consent. We also remind you of the data subject’s right to use the remedies provided for in Article 130 of Legislative Decree 196/03, by means of registration in the opposition register and to object at any time to future contacts.

Identity and contact details of the Data Controller and DPO

The Data Controller is Guna S.p.a. via Palmanova 71 – 20132 Milano – P. iva 06891420157 tel: +39 02 280181 | e-mail: [email protected]

Contact channel for Data Protection Officers: [email protected]

Data transfer to third countries

The transfer of data to third countries is not envisaged.