GDPR -DISCLOSURE on the processing of personal data pursuant to article 13 of EU Regulation 679/2016




Disclosure on the processing of personal data

pursuant to article 13 of EU Regulation 679/2016





Medical Expo
Disclosure on the processing of personal data pursuant to article 13 of EU Regulation 679/2016


1. Premise
Pursuant to art. 14 of EU Regulation 679/2016 (hereinafter also merely “Regulation”), MIR S.r.l., as "Data Controller", is obliged to provide you with information regarding the use of your personal data obtained through the MedicalExpo platform. 

2. Identity and contact details of the Data Controller
The Data Controller of the personal data referred to in this disclosure is MIR S.r.l., with registered offices in Rome, 00155, Via del Maggiolino 125.
In order to simplify forwarding procedures and reduce reply times, please submit requests relating to paragraph 10 to: mir@spirometry.com.

3. Data Protection Officer
MIR is not obliged to appoint the Data Protection Officer.

4. Data Managers
The Company may use third parties for the completion of activities and related processing of personal data under its control. In accordance with legislation, these parties shall ensure appropriate levels of experience, capacity and reliability to guarantee compliance with current provisions on processing, including data security.
Formalised Instructions, duties and tasks are issued to such third parties with their appointment as "Data managers". These parties undergo periodic checks in order to ascertain the continued existence of the guarantee levels recorded when the initial appointment is conferred.

5. Parties authorised to perform the processing
Your personal data is processed by internal staff previously authorised and designated as processing assignees, for which they are given appropriate instructions regarding measures, mechanisms and modus operandi, all intended to effectively protect your personal data.

6. Purpose and legal basis of the processing
The processing of your personal data is carried out by MIR S.r.l. only in order to provide you with the information requested through Medical Expo. To this end, your personal data is processed to the extent necessary for the execution of the service you have requested from Medical Expo.

7. Categories of personal data processed
MIR S.r.l. processes only the contact data (email, phone etc.) that you gave to MedicalExpo for the purposes of requesting information (quotes, brochures etc.).

8. Recipients of personal data
Your personal data will not be transmitted to third parties, except for the parties referred to in point 4.

9. Transfer of personal data outside the EU
Your personal data will not be transferred outside the European Union.

10. Retention period
Your personal data will be retained for a period no longer than is necessary for the purposes mentioned above. To this end, periodic checks will be made to check the continuous strict relevance, non-excess and indispensability of the data used with respect to the relationship, service or assignment under way, also with reference to the data that you provide on their own initiative. Any data which is found, also as a result of the checks, to be in excess, not relevant or not indispensable, is not used, except in the case of the possible storage, in accordance with the law, of the act or document that contains it.

11. Your rights
As the data subject, you are entitled to:
• access to the personal data;
• obtain the correction or deletion of the personal data or the restriction of the processing applied to it;
• object to the processing;
• the portability of your data;
• petition the Antitrust Authority for the protection of personal data.

12. The source of your data
The source from which your personal data originates is "MedicalExpo – Il salone online del settore medico-sanitario".





Customer Sales
Disclosure on the processing of personal data pursuant to article 13 of EU Regulation 679/2016


1. Premise
Pursuant to art. 13 of EU Regulation 679/2016, MIR S.r.l., as "Data Controller", is obliged to provide you with information regarding the use of your personal data.  

2. Identity and contact details of the Data Controller
The Data Controller of the personal data referred to in this disclosure is MIR S.r.l., with registered offices in Rome, 00155, Via del Maggiolino 125.
In order to simplify forwarding procedures and reduce reply times, please submit requests relating to paragraph 10 to: mir@spirometry.com.

3. Data Protection Officer
MIR is not obliged to appoint the Data Protection Officer.

4. Data Managers
The Company may use third parties for the completion of activities and related processing of personal data under its control. In accordance with legislation, these parties shall ensure appropriate levels of experience, capacity and reliability to guarantee compliance with current provisions on processing, including data security.
Formalised Instructions, duties and tasks are issued to such third parties with their appointment as "Data managers". These parties undergo periodic checks in order to ascertain the continued existence of the guarantee levels recorded when the initial appointment is conferred.

5. Parties authorised to perform the processing
Your personal data is processed by internal staff previously authorised and designated as processing assignees, for which they are given appropriate instructions regarding measures, mechanisms and modus operandi, all intended to effectively protect your personal data.

6. Purpose and legal basis of the processing
The processing of your personal data is carried out by MIR S.r.l. in order to execute the contract or implement precontractual sales measures.
Furthermore, pursuant to art. 6 paragraph 1, letter f) and Recital 47 of the Regulation (i.e. the pursuit of legitimate commercial interests in compliance with your expectations as a data subject regarding this processing purpose from the time of transfer of the data), MIR may offer you, by means of electronic mail, services similar to those covered by the sale without adopting your consent. You may refuse such use of your data, at no charge and at any time.

7. Recipients of personal data
Your personal data may eventually be communicated to freight forwarders or distributors so that the product can be delivered to you.

8. Transfer of personal data outside the EU
Your personal data will not be transferred outside the European Union, except in cases where the delivery address provided by you is located in non-EU countries. In such cases data transfer is necessary for the execution of the contract or the implementation of precontractual measures.

9. Retention period
Your personal data will be retained for a period no longer than is necessary for the purposes mentioned above. To this end, periodic checks will be made to check the continuous strict relevance, non-excess and indispensability of the data used with respect to the relationship, service or assignment under way, also with reference to the data that you provide on their own initiative. Any data which is found, also as a result of the checks, to be in excess, not relevant or not indispensable, is not used, except in the case of the possible storage, in accordance with the law, of the act or document that contains it.

10. Your rights
As the data subject, you are entitled to:
• access to the personal data;
• obtain the correction or deletion of the personal data or the restriction of the processing applied to it;
• object to the processing;
• the portability of your data;
• petition the Antitrust Authority for the protection of personal data.

11. Provision of data
The provision of your data is optional but necessary for the execution of the purposes indicated above. Failure to provide your data will make it impossible to execute the contract and the further purpose indicated.





Providers
Disclosure on the processing of personal data pursuant to article 13 of EU Regulation 679/2016


1. Premise
Pursuant to art. 13 of EU Regulation 679/2016, MIR S.r.l., as "Data Controller", is obliged to provide you with information regarding the use of your personal data.  

2. Identity and contact details of the Data Controller
The Data Controller of the personal data referred to in this disclosure is MIR S.r.l., with registered offices in Rome, 00155, Via del Maggiolino 125.
In order to simplify forwarding procedures and reduce reply times, please submit requests relating to paragraph 10 to: mir@spirometry.com.

3. Data Protection Officer
MIR is not obliged to appoint the Data Protection Officer.

4. Data Managers
The Company may use third parties for the completion of activities and related processing of personal data under its control. In accordance with legislation, these parties shall ensure appropriate levels of experience, capacity and reliability to guarantee compliance with current provisions on processing, including data security.
Formalised Instructions, duties and tasks are issued to such third parties with their appointment as "Data managers". These parties undergo periodic checks in order to ascertain the continued existence of the guarantee levels recorded when the initial appointment is conferred.

5. Parties authorised to perform the processing
Your personal data is processed by internal staff previously authorised and designated as processing assignees, for which they are given appropriate instructions regarding measures, mechanisms and modus operandi, all intended to effectively protect your personal data.

6. Purpose and legal basis of the processing
The processing of your personal data is carried out by MIR S.r.l. for the purposes of managing your pre-contractual relationship and/or contract with this Company:
• in the pre-contractual phase, also for control of reliability and solvency;
• to fulfil obligations, needs or specific tasks and activities provided for in the contract, to which you are party;
• for current administrative and company accounting activities
The legal basis of the processing is constituted by art. 6, paragraph 1, letter b) of EU Regulation 679/2016.

7. Recipients of personal data
The data is not disclosed or disseminated.

8. Transfer of personal data outside the EU
Your personal data will not be transferred outside the European Union.

9. Retention period
Your personal data will be retained for a period no longer than is necessary for the purposes mentioned above. To this end, periodic checks will be made to check the continuous strict relevance, non-excess and indispensability of the data used with respect to the relationship, service or assignment under way, also with reference to the data that you provide on their own initiative. Any data which is found, also as a result of the checks, to be in excess, not relevant or not indispensable, is not used, except in the case of the possible storage, in accordance with the law, of the act or document that contains it.

10. Your rights
As the data subject, you are entitled to:
• access to the personal data;
• obtain the correction or deletion of the personal data or the restriction of the processing applied to it;
• object to the processing;
• the portability of your data;
• petition the Antitrust Authority for the protection of personal data.

11. Provision of data
The provision of your data is optional but necessary for the execution of the purposes indicated above. Failure to provide your data will make it impossible to execute the contract.





Accesses
Disclosure on the processing of personal data pursuant to article 13 of EU Regulation 679/2016


1. Premise
Pursuant to art. 13 of EU Regulation 679/2016, MIR S.r.l., as "Data Controller", is obliged to provide you with information regarding the use of your personal data.  

2. Identity and contact details of the Data Controller
The Data Controller of the personal data referred to in this disclosure is MIR S.r.l., with registered offices in Rome, 00155, Via del Maggiolino 125.
In order to simplify forwarding procedures and reduce reply times, please submit requests relating to paragraph 10 to: mir@spirometry.com.

3. Data Protection Officer
MIR is not obliged to appoint the Data Protection Officer.

4. Data Managers
The Company may use third parties for the completion of activities and related processing of personal data under its control. In accordance with legislation, these parties shall ensure appropriate levels of experience, capacity and reliability to guarantee compliance with current provisions on processing, including data security.
Formalised Instructions, duties and tasks are issued to such third parties with their appointment as "Data managers". These parties undergo periodic checks in order to ascertain the continued existence of the guarantee levels recorded when the initial appointment is conferred.

5. Parties authorised to perform the processing
Your personal data is processed by internal staff previously authorised and designated as processing assignees, for which they are given appropriate instructions regarding measures, mechanisms and modus operandi, all intended to effectively protect your personal data.

6. Purpose and legal basis of the processing
The processing of your personal data is carried out by MIR S.r.l. for purposes of security and protection of the assets and the people in the Company premises. The legal basis of the processing is constituted by art. 6, paragraph 1, letter f).

7. Recipients of personal data
The data is not disclosed or disseminated.

8. Transfer of personal data outside the EU
Your personal data will not be transferred outside the European Union.

9. Retention period
Your personal data will be retained for a period no longer than is necessary for the purposes mentioned above. To this end, periodic checks will be made to check the continuous strict relevance, non-excess and indispensability of the data used with respect to the relationship, service or assignment under way, also with reference to the data that you provide on their own initiative. Any data which is found, also as a result of the checks, to be in excess, not relevant or not indispensable, is not used, except in the case of the possible storage, in accordance with the law, of the act or document that contains it.

10. Your rights
As the data subject, you are entitled to:
• access to the personal data;
• obtain the correction or deletion of the personal data or the restriction of the processing applied to it;
• object to the processing;
• the portability of your data;
• petition the Antitrust Authority for the protection of personal data.

11. Provision of data
The provision of your data is optional. However, failure to provide your data will make it impossible to access the company premises.