GENERAL DISCLOSURE
OIC S.r.l, headquartered in Florence, Viale della Giovine Italia 17,
herein after also “OIC” and AO
Foundation, headquartered in Davos, Clavadelerstrasse 8, herein
after “Scientific Society”, in the persons of their respective pro-tempore
legal representatives, domiciled at their own company headquarters, are Joint
Controllers pursuant to art. 26 of the GDPR
(hereinafter also referred as “Controllers” or “joint Controllers”) for
processing of your personal data, and inform you, here below, regarding the
method, purpose and scope of communication and dissemination of your personal
data and your rights, in conformity to EU Regulation 2016/679 and to the
applicable norms regarding protection of personal data.
The Controllers can be contacted at the above addresses or by sending an
e-mail to privacy@oic.it
With reference to the navigation experience of
this site, portal and/or platform (herein after “site”), OIC and the Society
process the following data:
During the course of their normal operations and for the
duration of the connection, information systems and software procedures
responsible for the operation of this site acquire some data communication of
which is implicit in the use of communication protocols on Internet.
This information is not collected for the
purpose of associating it to the users; however, due
to their very nature, could through processing and association with data held
by the Controllers or third parties allow identification of the users. These
data are deleted a few hours after processing.
This category is comprised of IP addresses or
names in the computer domain used by the users who connect to this site, the
addresses in the Uniform Resource Identifier, the requested resources, the time
of the request, the method used when submitting a request to the server, the
size of the file obtained in answer, the numeric code indicating the status of
the answer provided by the server (success, error, etc) and other parameters
pertaining to the operating system and to the computer environment of the user.
These data may be used by the Controllers for
the sole purpose of obtaining anonymous statistical information regarding the
use of the site in order to identify pages preferred
by the users and in order to provide increasingly
adequate contents and to verify proper operation. The
data could be used to ascertain responsibility in case of hypothetical
computer-related crimes which damage the site.
To improve the navigation experience, this site
uses cookies and/or markers which technically are information packets sent by a
web server (in this case by this site) to the user’s browser or are memorized
by the latter on their own devices and automatically sent back to the server
during each subsequent access to the site. In order to
learn about the types and purposes of the cookies used by the site and to show
one’s own preference regarding the use of the cookies, please consult the
Cookie policy published on the home page of this site.
The personal data provided by you through this
site, necessary to access certain services, will be processed by the
Controllers for the sole purpose of providing said services and will be kept
for the amount of time required for their execution and will be deleted if it
is no longer necessary to fulfil contractual or legal obligations and,
therefore, should it be necessary, also for the purpose of managing possible
disputes and complaints. In conformity
to art. 9 of the GDPR particular categories of data are
not required for navigation and for the implementation of services, with the exception of what you may indicate in regards to any potential food preferences or intolerances
in the registration form on the site which will be processed with the sole
scope of customizing the requested service.
During the browsing
and interaction with the site you may find links or hyperlinks redirecting to
exhibitors and third parties (which will be Autonomous Controllers) stand
and/or Symposia. By clicking on these links you may be
requested to insert your e-mail or other personal data. If you consent to give
your personal data, these will be processed by the Autonomous Controllers for
their own purpose, or dissemination and promotion of information material
relating to activities and services that may be of any related interest.
Once you click on the links as above, these may
redirect outside the site and the Controllers will not be responsible for your
Navigation Data and of any other consequent consent you will give to
exhibitors/third parties.
The data will not be disseminated but could be
communicated, if necessary for the provision of the service or to carry out the
activities, to Societies that perform tasks of a technical or organizational
nature necessary to provide the requested services, as specified in the
specific disclosures for the single services/events.
Following the required registration for the
requested service, should you want to request/use other services or other
activities, you can use the credentials (user name/mail/password)
already used for the first time registration.
If necessary you will be asked to provide
additional data required for the provision of more requested services.
Data conferment is necessary to provide the
services of this site. Should it be necessary to obtain proper consent for
provision of the service, in conformity to the law and to the GDPR, this will
be requested by a specific and suitable disclosure.
Your
data will be processed with the support of computer and electronic methods and
is protected by means of adequate security measures which are suitable to
guarantee confidentiality and the dignity of those involved in processing.
In particular, the above Controllers of data
processing have adopted and adopt organizational
measures (assignment of roles and responsibility for implementing the activity
and carrying out controls) and procedural and technical measures (firewall,
antivirus and other advanced technologies) which are appropriate to protect
your data against loss, theft and use, dissemination or unauthorized
modification.
OIC and the Scientific Society process the above mentioned navigation data (anonymous) for the purpose
of monitoring the technical operation and the performance of the site, to
better understand how to improve the services and make them evolve. These data are necessary to guarantee a successful
navigation experience.
These data are used for the sole purpose of
obtaining anonymous statistical information regarding the use of the site and
to verify its proper operation, as best explained in the Cookie Policy
published on the home page of this site.
Should the Controllers need to communicate your
personal data to third parties (for example, regarding the services for which
you are registered), they will proceed as autonomous Controllers or will be
nominated as Processors of processing.
Furthermore, your data could be communicated to
subjects, institutions or authorities if such data communication is required by
law.
You can access all the information that
concerns you at any time and can request updates, changes and integration as
well as deletion, transformation into an anonymous form or request that it be
blocked.
You can oppose processing in full or partly;
should opposition be expressed provision of the service will become impossible.
In order to exercise these and other rights as
specified under articles 15-22 of the GDPR you can write to the Controllers at
the above addresses or send an email to privacy@oic.it.
You have the right to oppose processing of your
data as well as presenting a complaint to the Authority for the protection of
personal data according to Art. 77 of the EU Regulation 2016/679.
In the course of time this disclosure could
undergo changes – also resulting for the entry in force of new norms for this
sector, updates and the provision of new services as a result of technological
innovations – and therefore we ask you to periodically consult this page.
CLIENT DISCLOSURE – Reference 1
(Participants and Candidates for Education Support) – Reference 1
We inform you that pursuant to Articles 13 and
14 of the EU Regulation 2016/679 “relative to the protection of natural persons
with regard to data processing as well as to free circulation of such data (the
“Regulation” follows), processing of data provided by you, or acquired within
the scope of our activity, will be based upon principles of correctness,
lawfulness and transparency and the safeguarding of your privacy and your
rights.
OIC S.r.l., headquartered in Florence, Viale della Giovine Italia 17,
herein after also “OIC” and AO
Foundation headquartered in Davos,
Clavadelerstrasse 8, herein after “Scientific Society”, in the person of the
pro-tempore legal representatives, domiciled at the company headquarters, are
joint Controllers, pursuant to art. 26 of the GDPR (hereinafter also referred
as “Controllers” or “joint Controllers”) for processing of your personal data,
inform you, here below, regarding the method, purpose and scope of
communication and dissemination of your personal data and your rights, in
conformity to EU Regulation 2016/679 and to the applicable norms regarding
protection of personal data.
The Controllers can be contacted at the above
mentioned addresses or by sending an email to privacy@oic.it.
2. Type of data, purposes, method of processing and legal basis Type of data processed may regard:
-
Name,
surname, place and date of birth, ID code, etc;
-
Contact
details (telephone number, e-mail, residence/domicile address, etc.);
-
Job
data (place and employer, specialization, department, etc.);
-
Payment
data (IBAN, credit institute, etc.);
-
Dietary
preferences or requests (if needed);
-
Personal
images (photo/videos if any), in which you may be portrayed during the Event,
as well as related initiatives.
Your data will be processed by the joint Controllers only for the
following purposes:
a)
applications
for Educational Support for congress Events, application for CME procedure or
for the
fulfillment of all contractual commitments as
they pertain to registration or whatever else concerns your participation,
achieved through the processing, operating and management activities required
to activate the economic relationship and to implement the contract
b)
to
meet the requirements specified by norms of laws, regulations, national and
community laws,
civil law and tax legislation pertaining to the activity of the
Controllers and to existing agreements;
c)
travel
and hospitality management., if needed;
d)
to
send by e-mail updates on similar future projects, initiatives, and events
promoted by each of the
Controllers, within the same area of interest
e)
dissemination
and/or publication of images on Data Controllers’ website, social media network
or
any other channels related to events organized and/or promoted by the
Controllers;
f)
following
specific consent, personal data may also be processed directly by the Data
Controller for
possible transfer to exhibitors and third
parties, which will act as Autonomous Controllers for the subsequent data
processing, with methods and purposes indicated by themselves, including also
dissemination and promotion of information material relating to activities and
services that may be of interest.
If, on the other hand, personal data
are directly collected during the Event by exhibitors and third parties, these
will always act as Autonomous Data Controllers, with methods and purposes of
processing indicated by themselves; it is intended that in this case OIC S.r.l.
will not be able to process such personal data except as a result of services
specifically commissioned by exhibitors and/or third parties, or with the
instructions and indications provided by the Autonomous Data Controllers.
We wish to specify that:
•
The
legal basis of data processing as specified under letters a), b), c) and d)
regarding the purposes of processing is reflected in the specific and voluntary
activity of applying for Educational Support, of applying for CME procedure or
by the contractual relationship established between the parties and by the
fulfillment of the legal obligations connected to it.
Processing of data supplied by you is necessary
to present the application or to implement the stated contractual relationship
of which you are a part.
If needed, your personal data may be
transferred to travel agencies, carriers or accommodation facilities and / or
hotels in a third country (non-EU) for the sole purpose of organizing and
booking the trip related to the participation in the
event for which you have registered.
Lack of consent for data processing will make
it impossible to proceed to the correct establishment and/or continuation and
fulfillment of contractual commitments and relative legal obligations. The data
will be deleted if it is no longer necessary to fulfil contractual or legal
obligations.
•
The
legal basis of data processing as specified under letter e) is represented by
your consent to such processing, by your lawful interest in participation to a
scientific event and its related initiatives evaluated
following a fair balance of your rights and freedom, and by the articles 96 and
97 L. 633/1941 ss. mm. ii. (Italian Copyright Law). The Controllers will
process the personal image in which you are on background, or as part of the
Event context, and in any case for purposes not directly related to the image
itself.
The data processed will be kept in the headquarter of the Controllers for the period strictly
necessary for the exploitation of the related purposes, and in any case for a
period which will not exceed 24 months.
•
The
legal basis of data processing as specified under letter f) is represented by
your express consent to such processing. Lack of consent for processing entails
non usability of your data for the purposes specified
under letter f) but does not impede provision of the service and therefore is
an optional conferment.
The data will be kept in the headquarter
of the Controllers for 24 months as specified in the provisions issued on
02/24/2005 by the Authority for the protection of privacy.
All data will be treated correctly and
transparently, both manually and with electronic and informatic tools; they
will be inserted in specific paper and/or electronic archives or in any other
form of adequate support, and will be constantly monitored through adequate
operating procedures and safeguard measures, as established under Art. 32 of
the Regulation, for the purpose of guaranteeing the security and
confidentiality of personal data in order to prevent loss of such data,
unlawful or improper use or unauthorized access.
Data will not be disseminated but can, besides
being processed by individuals authorized by the joint Controllers, be
communicated only for the above indicated purposes, to:
•
subjects
appointed by the joint Controllers who will process the data as external
Processors in charge of processing as assigned by OIC S.r.l. and by the
Scientific Society, and who require access to the data in order to perform
those specific tasks of collaboration on behalf of them and which are necessary
or functional in carrying out our activity (companies providing computer
services, outsourcer administrators, fiscal, legal and financial consultants,
other professionals);
•
subjects
who will process the data as autonomous Controllers for the purposes described
in this Disclosure and limited to what is required in order
to meet contractual commitments and relative legal obligations.
•
subjects
who need to access data in order to perform necessary
or complementary services as required by the relationship (hotels, airline
companies, etc.)
•
public
and private subjects who can access data by virtue of the provisions of the
laws, regulations and community regulations within the specified limits of such
norms.
An updated list of the Processors and persons
authorized to process data can be consulted at the headquarters of the joint
Controllers of processing.
You can access the information that concerns
you at any time and request updates, changes and integration as well as
deletion, transformation into anonymous form or block data.
You can also oppose all or partial processing; if opposed it will not be
possible to provide the service.
In order to exercise these and other rights as
specified under articles 15-22 of the GDPR you can write to the Controllers at
the above addresses or send an email to privacy@oic.it.
You have the right to oppose processing of your
data and to present a complaint to the Authority for the protection of personal
data according to Art. 77 of the EU Regulation 2016/679.
In the course of time this disclosure could
undergo changes – also resulting for the entry in force of new norms for this
sector, updates and the provision of new services as a result of technological
innovations – and therefore we ask you to periodically consult this page.
DISCLOSURE FOR SCIENTIFIC ACTIVITY
(Faculty and submission of abstracts) – Reference 2
We inform you that pursuant to Articles 13 and
14 of the EU Regulation 2016/679 “relative to the protection of natural persons
with regard to data processing as well as to free circulation of such data (the
“Regulation” follows), processing of data provided by you, or acquired within
the scope of our activity, will be based upon principles of correctness,
lawfulness and transparency and the safeguarding of your privacy and your
rights.
OIC S.r.l., headquartered in Florence, Viale della Giovine Italia 17,
herein after also “OIC” and AO
Foundation headquartered in Davos,
Clavadelerstrasse 8, herein after “Scientific Society”, in the person of their
respective pro-tempore legal representative, domiciled at their own company
headquarters, are Join Cocontrollers, pursuant to art. 26 of the GDPR
(hereinafter also referred as “Controllers” or “joint Controllers”) for
processing of your personal data, inform you, herebelow, regarding the method,
purpose and scope of communication and dissemination of your personal data and
your rights, in conformity to EU Regulation 2016/679 and to the applicable
norms regarding protection of personal data.
The Controllers can be contacted at the above-mentioned addresses or by
sending an email to privacy@oic.it.
2. Type of data, purposes, method of processing and legal basis Type of data processed may regard:
-
Name,
surname, place and date of birth, ID code, etc;
-
Contact
details (telephone number, e-mail, residence/domicile address, etc.);
-
Job
data (place and employer, specialization, department, etc.);
-
Payment
data (IBAN, credit institute, etc.);
-
Dietary
preferences or requests (if needed);
-
Personal
images (photo/videos if any), in which you may be portrayed during the Event,
as well as related initiatives.
Your data will be processed by OIC S.r.l. and
the Scientific Society exclusively for the purposes pertaining to the Faculty
and Abstract Selection and to carry out all those commitments and to meet the
pertinent connected and consequent legal indications (indicatively):
a)
evaluation,
publication and dissemination of scientific papers or abstracts;
b)
travel
and hospitality management., if needed;
c)
implementation
of the requirements of norms of laws, regulations, national and community
regulations, civil norms and tax legislation , as they pertain to the
above-mentioned activities in general and to the existing agreements, as well
as to private parties involved in the organization of the Event, according to
their assignment such as, for example,
meeting requirements of the Italian Drug Agency, Continuing Medical
Education, European Accreditation with EACCME
d)
to
send by e-mail updates on similar future projects, initiatives, and events
promoted by each of the
Controllers, within the same area of interest
e)
dissemination and/or
publication of images on the Data Controllers' website, social media
network or
any other channels related to events organized and/or promoted by the
Controllers;
f)
following
specific consent, personal data may also be processed directly by the Data
Controllers for possible transfer to exhibitors and third parties which will
act as Autonomous Controllers for the subsequent data processing, with methods
and purposes indicated by themselves, including also dissemination and
promotion of information material relating to activities and services that may
be of interest.
If, on the
other hand, personal data are directly collected during the Event by exhibitors
and third parties, these will always act as Autonomous Data Controllers, with
methods and purposes of processing indicated by themselves; it is intended that
in this case OIC S.r.l. will not be able to process such personal data except
as a result of services specifically commissioned by exhibitors and/or third
parties, or with the instructions and indications provided by the Autonomous
Data Controllers.
We wish to specify that:
· The legal basis for data processing as
specified under letters a), b), c) and d) for the above-mentioned purposes is
represented by the role assigned to you or by your free submission of an
abstract or paper Conferment of data supplied by you is necessary to implement
the relationship of which you are part.
Your personal data may be transferred to travel
agencies, carriers or accommodation facilities and / or hotels in a third
country (non-EU) for the sole purpose of organizing and booking the trip
related to the participation in the event.
Lack of this conferment will make it impossible
to proceed to establishment and/or continuation and performance of the proper
implementation of the commitments and pertinent legal obligations.
The data processed for such purposes will be
kept at the headquarters of OIC S.r.l. and the Scientific Society and will be
deleted if it is no longer necessary to fulfil contractual or legal
obligations.
· The legal basis of data processing as
specified under letter e) is represented by your consent to such processing, by
your lawful interest in participation to a scientific event and its related
initiatives, evaluated following a fair balance of your rights and freedom. The
Controllers will process the personal image in which you are in the background,
or as part of the Event context, and in any case for purposes not directly
related to the image itself.
The data processed will be kept in the
headquarter of the Controllers for the period strictly necessary for the
exploitation of the related purposes, and in any case for a period which will
not exceed 24 months.
· The legal basis of data processing as
specified under letter f) is represented by your express consent to such
processing. Lack of consent for processing entails non usability of your data
for the purposes specified under letter f) but does not impede provision of the
service and therefore is an optional conferment.
The data will be kept in the headquarter of the
Controllers for 24 months as specified in the provisions issued on 02/24/2005
by the Authority for the protection of privacy.
All data collected by the joint Controllers
will be treated correctly and transparently, both manually and with electronic
and informatics tools; they will be inserted in specific paper and/or
electronic archives or in any other form of adequate support, and will be
constantly monitored through adequate operating procedures and safeguard
measures, as established under Art. 32 of the Regulation, for the purpose of
guaranteeing the security and confidentiality of personal data in order to
prevent loss of such data, unlawful or improper use or unauthorized access.
Data will not be disseminated but can, besides
being processed by individuals authorized by the joint Controllers, be
communicated only for the above indicated purposes, to:
•
subjects
appointed by the joint Controllers who will process the data as external
Processors in charge of processing as assigned by OIC S.r.l. and by the
Scientific Society, and who require access to the data in order to perform
those specific tasks of collaboration on behalf of them and which are necessary
or functional in carrying out our activity (companies providing computer
services, outsourcer administrators, fiscal, legal and financial consultants,
other professionals);
•
subjects
who will process the data as autonomous Controllers for the purposes described
in this Disclosure and limited to what is required in order
to meet contractual commitments and relative legal obligations.
•
subjects
who need to access data in order to perform necessary
or complementary services as required by the relationship (hotels, airline
companies, etc.)
•
public
and private subjects who can access data by virtue of the provisions of the
laws, regulations and community regulations within the specified limits of such
norms.
An updated list of the Processors and persons
authorized to process data can be consulted at the headquarters of the joint
Controllers of processing.
You have the right to access the information
that concerns you at any time and request updates, changes and integration as
well as deletion, transformation to anonymous form or block data.
You also have the right to totally or partly
oppose processing of your data but if opposed it will not be possible to
provide the service.
In order to exercise these and other rights as
specified under articles 15-22 of the GDPR you can write to the controllers at
the above addresses or send an email to privacy@oic.it
You have the right to oppose processing of your
data as well as presenting a complain to the Authority for the protection of
personal data according to aft. 77 of the EU Regulation 2016/679.
In the course of time this disclosure could
undergo changes – also resulting from the entry in force of new norms for this
sector, updates and the provision of new services as a result of technological
innovations and therefore we ask you to periodically consult this page.