PERSONAL DATA PROCESSING POLICY FOR THE WEBSITE www.dicom.vision
This Policy (hereinafter, the "Policy") aims to describe the processing methods of personal data of those who consult the website of DICOM Vision S.r.l. (hereinafter "DICOM Vision" or "Company") and is provided pursuant to Regulation 2016/679/EU (General Data Protection Regulation, hereinafter "GDPR") and in line with what is provided for by the Data Protection Organizational Model adopted by the Company. The Policy is provided for the sole above-mentioned website and any related subdomains, and not for other websites that the user may access via appropriate hyperlinks published on the Site but referring to external web domains. Before providing any type of personal information and/or filling out any form on the Site, users/visitors are invited to carefully read the Policy.
INFORMATION ON THE PROCESSING OF SITE USERS' DATA, PURSUANT TO ART. 13 OF EUROPEAN REGULATION NO. 2016/679 (GDPR)
In compliance with European legislation on personal data processing (European Regulation no. 2016/679 – GDPR), Dicom Vision S.r.l. declares that it processes data in accordance with what is established by art. 5 of the GDPR, i.e., in compliance with the fundamental principles of lawfulness, transparency, and fairness.
The information provided in accordance with articles 13 and 14 of the GDPR is intended for users of the Site, owned by Dicom Vision S.r.l.
DATA CONTROLLER
Dicom Vision S.r.l., via Pasubio, 5 -24044 Dalmine (BG) – ITALY, VAT/Tax Code: 04485020160, email: info@dicom.vision PEC: dicomvision@pec.it
LEGAL BASIS AND OPTIONALITY OF PROVIDING DATA
Apart from what is specifically indicated below for browsing data, users are free to provide personal data necessary to fulfill the requests of the services offered on the Site. The Data Controller processes the optional data of the user, based on the consent received, i.e., by means of explicit approval of this information and the specific methods and purposes illustrated therein. Failure to provide the requested data may result in the impossibility of providing the services and/or information requested.
PURPOSES OF PROCESSING
Users' personal data are processed by Dicom Vision Srl, with their consent, for the following purposes:
request for information through the completion of specific forms with the submission of text messages, in the dedicated section.
PROCESSED DATA
DATA ACQUIRED DURING BROWSING
The computer systems and software procedures used to operate this Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes IP addresses or domain names of the computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the resources requested, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server, and other parameters relating to the user's operating system and computer environment.
These data, necessary for the use of web services, are also processed in order to obtain statistical information on the use of services and to check their correct functioning. These data are used for the minimum period required by current regulations. The data may be used to ascertain responsibility in case of hypothetical computer crimes against the Site and/or users.
DATA VOLUNTARILY PROVIDED BY THE USER
The optional, explicit, and voluntary sending of messages to the contact email addresses of Dicom Vision S.r.l., as well as the filling out and submission of the forms on the Site, involve the acquisition of the sender/user's data, necessary for responding, as well as all personal data included in the communications.
COOKIE POLICY
For information on the use of cookies and their specific identification, please refer to the cookie policy on the Site.
PROCESSING METHODS
Dicom Vision S.r.l. ensures that data are processed in full compliance with the GDPR, through manual, computerized, and telematic systems.
COMMUNICATION OF DATA TO FURTHER RECIPIENTS
The data collected and processed by the controller are intended for the following subjects designated as external data processing controllers, pursuant to and for the purposes of art. 28 GDPR and, specifically:
the provider of web technology platform development, delivery, and operational management services, and maintenance of the web technological platform used for the Site www.dicom.vision
The personal data collected by the controller are also processed by employees of Dicom Vision S.r.l., based on specific instructions given by the controller and within the limits of their individual tasks and based on delegation procedures.
Outside of the aforementioned subjects, the data will not be further communicated except to certain subjects based on specific legal or regulatory provisions.
TRANSFER OF DATA ABROAD
The data collected for the purposes of this information will not be communicated to third parties, except for the subjects mentioned above, nor will they be disseminated and/or transferred abroad, to companies or other entities located outside the European Union territory. The data may be stored on the server where the Site itself is located abroad. The Data Controller declares to have identified cloud service providers that guarantee security levels, as required by EU Regulation 2016/679.
CONSENT WITHDRAWAL
To withdraw consent related to the use of one of the services offered on the Site, granted at the time of requesting the service itself, it is possible to send a communication to Dicom Vision S.r.l., using the same methods provided for the exercise of data subject rights, as indicated in the following point.
RIGHTS OF DATA SUBJECTS
The user, as the data subject, can exercise the rights provided for in Articles 15 to 22 of GDPR 2016/679, namely:
1. Obtain confirmation of the existence or non-existence of personal data concerning them, even if not yet recorded, in a concise, transparent, intelligible, and easily accessible form, using clear and simple language;
2. Receive information about: a. the origin of personal data; b. the purposes and methods of processing; c. the legitimate interests pursued by the Controller or by third parties; d. any recipients or categories of recipients of personal data; e. the possible intention of the controller to transfer personal data to a third country or to an international organization; f. the retention period of personal data; g. the logic applied, as well as the importance and expected consequences of such processing for the data subject, in the case of processing carried out with the aid of electronic instruments within an automatic process of collection and/or profiling; h. the identification details of the Controller, the Data Processors, if any, and the designated Representative; i. the subjects and categories of subjects to whom the personal data may be communicated or who may become aware of it as designated representative in the territory of the State, data processors, or persons in charge;
3. Update, rectify, or, if interested, integrate the data;
4. Request the deletion, transformation into anonymous form, or blocking of data processed in violation of the law, including data that does not require retention for the purposes for which it was collected or subsequently processed;
5. Obtain a restriction on processing;
6. Receive personal data concerning them and have the right to transmit those data to another controller;
7. Withdraw consent to processing;
8. Object, in whole or in part, for legitimate reasons, to the processing of personal data concerning them, even if pertinent to the purpose of collection.
• To exercise the aforementioned rights, the user, as the data subject, may contact Dicom Vision S.r.l. at any time by sending a communication via email: info@dicom.vision or PEC: dicomvision@pec.it, or at the following address: via Pasubio, 5 – 24044 Dalmine (BG) – ITALY (stating in the subject line: "PRIVACY").
RIGHT TO LODGE A COMPLAINT
Users who believe that the processing carried out on the Site violates the GDPR have the right to lodge a complaint with the supervisory authority, pursuant to and for the effects of Article 77 GDPR, or, pursuant to Article 78 GDPR, to take legal action before the competent courts.
DATA RETENTION
Personal data will be kept for a period not exceeding that necessary to achieve the purposes for which they were collected and, in any case, not exceeding that provided for by applicable legislation, in compliance with the principles of lawfulness, necessity, and proportionality.
CHANGES TO INFORMATION
This information may undergo further subsequent changes, also related to the possible entry into force of new sector regulations, updates, or the provision of new services by the Data Controller or technological innovations.
In all these cases, users are invited to review the privacy policy available on the Site.