The Dedalus Group attaches a great deal of importance to and intends to pay particular attention to protecting your personal data and respecting your privacy.
The aim of this information notice is therefore to inform you of how your personal data is processed when you act on behalf of a client or prospect of the Dedalus Group (e.g., employee, intern, company representative, etc.).
In this respect, please note that the controller of your personal data is the Dedalus Group entity that has among its clients or prospects the entity on behalf of which you are acting (hereinafter referred to as “we”, “our” and “us”). Please refer to the address information of the Dedalus Group entity on our website www.dedalus.com or you can find this information in your contractual documentation. Please refer to Section 7 (“How can you contact us?”) below to access the contact details of the relevant controller.
| 1 WHAT PERSONAL DATA DO WE COLLECT? |
We collect the following categories of personal data about you:
In most cases, provision of your personal data is mandatory; we will be unable to manage our working relationship with the entity on behalf of which you are acting properly without it. For example, if you refuse to provide us with your contact details so we can send you an agreement to sign, we will be unable to enter into an agreement with the entity on behalf of which you are acting.
In any case, we will inform you when it is mandatory to provide your personal data.
Additionally, in the event that you provide us with personal data belonging to third parties (e.g. if you provide us with the data of a signatory so we can prepare the agreement to be signed), you undertake to ensure that such persons have been duly informed of the processing of their personal data in accordance with this policy and, if required, have consented to the processing of their personal data.
| 2 WHY DO WE USE YOUR PERSONAL DATA? |
The table below outlines the purposes that we process your personal data for and, for each purpose, the legal basis for the processing operation in question:
| PURPOSES | LEGAL BASIS |
| Client and prospect relationship management, including, but not limited to: (i) preparation and performance of agreements; (ii) order management and follow-up; (iii) invoicing; (iv) accounting of client accounts; (v) management of requests, complaints, and after-sales service; etc. | The processing is necessary for the performance of a contract or to take steps at your request to enter a contract |
| Carrying out commercial marketing operations and sending marketing communications | The processing is based on your consent. |
| Carrying out commercial marketing operations and sending marketing communications to promote products or services offered by the Controller, similar to those ones already purchased by the data subject (soft-spam). | The processing is based on our legitimate interest in developing our client base. |
| Analysis of data for business intelligence purposes in order to improve our understanding of internal business processes, evaluate the effectiveness and efficiency of our management system and assess initiatives | Our legitimate interest to analyze our organization and improve internal processes |
| Carrying out satisfaction surveys of commercial statistics with clients / prospects and managing opinions on our products and services | The processing is based on your consent. |
| Where applicable, studying, organizing, and executing transactions relating to our activities, particularly in the context of mergers and acquisitions, spin-offs, etc. | Our legitimate interest in finding and managing investors / buyers / other stakeholders who may be interested in our business. |
| Compliance with the applicable legal framework | Need to comply with a legal obligation that we are subject to. |
| Managing and following up unpaid bills, as well as potential disputes with you or third parties | The processing is necessary to manage the contract and to pursue our legitimate interest to collect the sums due and to defend our interests, including through legal action and, where applicable, if certain categories of data (conviction, offense, security measure) are processed, the need to establish, exercise or defend our legal claims. |
In any case, please note that we will not process your personal data for any other purpose that is incompatible with the above-mentioned purposes.
| 3 WHO DO WE SHARE YOUR PERSONAL DATA WITH? |
In the context of our processing operations, we may communicate your personal data to the following recipients:
- to our service providers, suppliers, agents, and contractors, to the extent that they assist us in carrying out the purposes set out in this information notice (e.g., we use IT service providers to host your personal data on our behalf; in the case of unpaid invoices, we may use the services of service providers specialized in debt collection; etc.).
- to other entities of the Dedalus Group (e.g., in the context of our accounting / fiscal obligations, we may have to share a certain amount of information, including personal data concerning you, for consolidation purposes at Dedalus Group level).
- where applicable, to investors / buyers and their advisors (e.g., in the context of mergers and acquisitions).
- to competent courts, public authorities, government agencies and law enforcement agencies (including where we are required to comply with legal or regulatory requests).
Regardless of the recipient, we will only disclose your personal data to them on a strictly need-to-know basis and only to the extent required to fulfill the purposes identified in this information notice.
We do not sell your personal data.
| 4 DO WE TRANSFER DATA OUTSIDE THE EUROPEAN ECONOMIC AREA? |
In connection with the processing operations described in this policy, we transfer your personal data outside the European Economic Area (“EEA”), including to countries that are not recognized by the European Commission as providing an adequate level of data protection.
In this context, we ensure that the level of protection your personal data is given is not adversely affected by such transfers.
This specifically means that each of the intended transfers is based on one of the following mechanisms at least:
- the existence of an adequacy decision issued by the European Commission for the country that your personal data is transferred to; or, alternatively;
- the conclusion of standard contractual clauses reproducing the models adopted by the European Commission; or, alternatively;
- the existence of an exemption related to one of the specific situations exhaustively provided for by the General Data Protection Regulation 2016/679 (“GDPR”) (e.g. where you have given your consent to such transfer having been informed of the absence of safeguards, where the transfer is necessary for the performance of a contract concluded between you and us, where the transfer is necessary for the conclusion or performance of a contract concluded in your interest between us and a third party, or where the transfer is necessary for the establishment, exercise or defense of our legal claims, etc.).
You can obtain copies of these documents by emailing our Data Protection Officer (“DPO”), whose contact details are set out in Section 7 (How can you contact us?) below.
| 5 HOW LONG DO WE STORE YOUR PERSONAL DATA FOR? |
We store your personal data for no longer than is necessary for the purpose of the processing concerned.
In other words, this means that the storage periods we apply vary depending on the purpose for which we process the data in question. The table below therefore indicates, for each purpose, the storage period that will be applied to your personal data:
| PURPOSES | STORAGE PERIOD |
| Client and prospect relationship management, including, but not limited to: (i) preparation and performance of agreements; (ii) order management and follow-up; (iii) invoicing; (iv) accounting of client accounts; (v) management of requests, complaints, and after-sales service; etc. | If you are acting on behalf of one of our clients, we will retain your personal data for up to 10 years after the end of our contractual relationship with the client concerned.
If you are acting on behalf of one of our prospects, we will retain your personal data until the withdrawal of the consent. |
| Carrying out commercial marketing operations | If you are acting on behalf of one of our clients, we will retain your personal data for up to 2 years after the end of our contractual relationship with the client concerned.
If you are acting on behalf of one of our prospects, we will retain your personal data until the withdrawal of the consent. However, if you object to our commercial marketing activities, we will immediately delete your personal data for this purpose (except for only the data that is strictly necessary to keep track of your objection and thus not send you any further commercial communication). |
| Carrying out commercial marketing operations and sending marketing communications to promote products or services offered by the Controller, similar to those ones already purchased by the data subject (soft-spam). | We will retain your personal data for up to 2 years after the purchasing of the similar products or service by the client.
However, if you object to our commercial marketing activities, we will immediately delete your personal data for this purpose (except for only the data that is strictly necessary to keep track of your objection and thus not send you any further commercial communication). |
| Analysis of data for business intelligence purposes in order to improve our understanding of internal business processes, evaluate the effectiveness and efficiency of our management system and assess initiatives | For the duration necessary to carry out the business intelligence analysis |
| Carrying out satisfaction surveys of commercial statistics with clients / prospects and managing opinions on our products and services | Your data will not be stored for longer than is necessary for completing said surveys and/or until the withdrawal of the consent. |
| Where applicable, studying, organizing, and executing transactions relating to our activities, particularly in the context of mergers and acquisitions, spin-offs, etc. | Your data will only be stored for as long as is necessary to assess the appropriateness of the proposed transactions and, if necessary, to carry them out. |
| Compliance with the applicable legal framework | Your data will be stored for the duration of the limitation period of the obligations that we are subject to. |
| Managing and following up unpaid bills, as well as potential disputes with you or third parties | Your data will be stored for the duration of the recovery / dispute and until all potential remedies have been exhausted. |
We have also defined an archiving policy. This ensures that your personal data is not stored in the active database unnecessarily.
In any case, once the applicable storage period has elapsed, we will irrevocably erase or anonymize your personal data so that you can no longer be identified.
| 6 WHAT RIGHTS DO YOU HAVE? |
In accordance with the applicable data protection legal framework, particularly the GDPR, you have the following rights as a data subject:
- You may request access to your personal data and request that it be rectified or erased.
- You also have the right to request that processing of your personal data be restricted or to object to the same.
- You have the right to portability of your personal data.
- Where processing of your personal data is based on your consent, please note that you may withdraw your consent at any time, without affecting the lawfulness of processing based on your consent carried out prior to your withdrawal of the same.
However, please note that some of the above rights are subject to specific conditions dictated by the applicable data protection legal framework. So, if your specific situation does not meet these conditions, we will be unable to comply with your request.
To exercise your rights, please contact our DPO using the contact details provided in Section 7 (How can you contact us?). To process your request as efficiently as possible, we may ask you for certain additional information to confirm your identity and/or assist in locating the personal data that forms the subject matter of your request.
In any case, please note that you may lodge a complaint with the Italian Data Protection Authority: https://www.garanteprivacy.it/.
| 7 HOW CAN YOU CONTACT US? |
Your personal data will be processed by the Dedalus Group Company with which you have entered into the contractual/pre-contractual relationship, which will act as the Data Controller. The Data Controller can be contacted at the address of its registered office, as indicated on the respective website and in the contractual documentation.
We also have appointed a Group data protection officer (“DPO”), which you can contact by e-mail at the following address: dpo.group@dedalus.eu
Current version: Dedalus – client privacy policy – v. [1]
Last updated: [October 2022]
Dedalus Group attaches a great deal of importance to and intends to pay particular attention to protecting your personal data and respecting your privacy.
The aim of this privacy policy and information notice for website users (hereinafter referred to as the “notice”) is therefore to inform you of how your personal data is processed when you visit the website www.pharmoduct.com (hereinafter referred to as the “site”).
In this regard, please note that www.pharmoduct.com acts as the controller for your personal data (hereinafter referred to as “we”, “us” and “our”).
| 1 WHAT PERSONAL DATA DO WE COLLECT? |
When you browse our site, we may collect the following categories of personal data about you:
- identification data (e.g., surname, first name, email address, username, password, Region, type of device).
- professional data (e.g., position held, field of activity, employer).
- technical data (e.g., IP address, type of browser used, etc.); and
- any personal data contained in any correspondence you send to us.
Provision of your personal data is voluntary, but we will be unable to provide you with the services and information you request without it. For example, if you contact us through the site, you will need to provide us with your email address so that we can respond to you.
In any case, we will inform you when it is mandatory to provide your personal data.
Additionally, if you provide us with personal data belonging to third parties, you undertake to ensure that such persons have been duly informed of the processing of their personal data in accordance with this policy and, if required, have consented to the processing of their personal data.
| 2 WHY DO WE USE YOUR PERSONAL DATA? |
The table below outlines the purposes that we process your personal data for and, for each purpose, the legal basis for the processing operation in question:
| PURPOSES | LEGAL BASIS |
| Responding to requests and questions you may submit through the site, and more broadly, managing our relationship with visitors to the site. | The processing is carried out to provide you with the service you requested us. |
| Improving our services and our site. | The processing is carried out pursuant to our legitimate interest, which involves optimizing our tools and solutions to best accommodate our site visitors, clients, and prospects. |
| Complying with legal and regulatory obligations applicable to us. | The processing is necessary to comply with the legal obligations that we are subject to. |
| Managing any potential or actual disputes with you or third parties. | The processing is carried out pursuant to our legitimate interest, which involves defending our interests, including through legal action. |
| Sending, using both automated (e.g., email, SMS, MMS, etc.) and non automated (e.g., phone, ordinary mail, etc.) means, marketing messages and promotional content messages relating to our activities, products and services and those of the other Dedalus group companies (including market research, customer satisfaction surveys, information about webinars and events) (marketing)
|
The processing is carried out only in case you provide specific consent |
| Transferring/Sharing your personal data to the other Dedalus group companies, operating in the bio medical sector, by automated means (e.g., email, SMS, MMS, etc.), marketing messages and promotional content messages relating to their activities, products and services (including market research, customer satisfaction surveys, information about webinars and events);
(data transfer to third parties for their marketing purposes)
|
The processing is carried out only in case you provide specific consent |
In any case, please note that we will not process your personal data for any other purpose that is incompatible with the above-mentioned purposes.
| 3 WHO DO WE SHARE YOUR PERSONAL DATA WITH? |
In the context of our processing operations, we may communicate your personal data to the following recipients:
- to our service providers, suppliers, agents, and contractors, to the extent that they assist us in carrying out the purposes set out in this policy (e.g., we use IT service providers to host your personal data on our behalf).
- the other entities of the Dedalus Group.
- to competent courts, public authorities, government agencies and law enforcement agencies (including where we are required to comply with legal or regulatory requests).
Regardless of the recipient, we will only disclose your personal data to them on a strictly need-to-know basis and only to the extent required to fulfill the purposes identified in this policy.
| 4 DO WE TRANSFER DATA OUTSIDE THE EUROPEAN ECONOMIC AREA? |
Should your personal data be transferred outside the European Economic Area (“EEA”), we ensure that the level of protection your personal data is given is not adversely affected by such transfers.
This specifically means that each of the intended transfers is based on one of the following mechanisms at least:
- the existence of an adequacy decision issued by the European Commission for the country that your personal data is transferred to; or, alternatively;
- the conclusion of standard contractual clauses reproducing the models adopted by the European Commission; or, alternatively;
- the existence of an exemption related to one of the specific situations exhaustively provided for by the General Data Protection Regulation 2016/679 (“GDPR”) (e.g. where you have given your consent to such transfer having been informed of the absence of safeguards, where the transfer is necessary for the performance of a contract concluded between you and us, where the transfer is necessary for the conclusion or performance of a contract concluded in your interest between us and a third party, or where the transfer is necessary for the establishment, exercise or defense of our legal claims, etc.).
| 5 HOW LONG DO WE STORE YOUR PERSONAL DATA FOR? |
We store your personal data for no longer than is necessary for the purpose of the processing concerned.
In other words, this means that the storage periods we apply vary depending on the purpose for which we process the data in question. The table below therefore indicates, for each purpose, the storage period that will be applied to your personal data:
| PURPOSES | STORAGE PERIOD | |
| Responding to requests and questions you may submit through the site, and more broadly, managing our relationship with visitors to the site. | We will store your personal data for a maximum of 3 years from our last contact with you. | |
| Improving our services and our site. | We will store your data for a maximum of one year, although in most cases your data will be aggregated shortly after collection into non-identifiable statistics. | |
| Complying with legal and regulatory obligations applicable to us. | We store your personal data for as long as we are subject to the relevant legal or regulatory obligations. | |
| Managing any potential or actual disputes with you or third parties. | Your personal data will be stored until all potential remedies have been exhausted. | |
| Sending, using both automated (e.g., email, SMS, MMS, etc.) and non automated (e.g., phone, ordinary mail, etc.) means, marketing messages and promotional content messages relating to our activities, products and services and those of the other Dedalus group companies (including market research, customer satisfaction surveys, information about webinars and events) (marketing) | We will process your personal data until your consent is withdrawn. | |
| Transferring/Sharing your personal data to the other Dedalus group companies, operating in the bio medical sector, by automated means (e.g., email, SMS, MMS, etc.), marketing messages and promotional content messages relating to their activities, products and services (including market research, customer satisfaction surveys, information about webinars and events);
(data transfer to third parties for their marketing purposes)
|
We will process your personal data until your consent is withdrawn. | |
We have also defined an archiving policy. This ensures that your personal data is not stored in the active database unnecessarily.
In any case, once the applicable storage period has elapsed, we will irrevocably erase or anonymize your personal data so that you can no longer be identified.
| 6 DO WE USE COOKIES? |
We use cookies on our site.
To find out more about the cookies we use and the purposes that we use them for, please refer to our cookie policy, which can be found here: link
| 7 WHAT RIGHTS DO YOU HAVE? |
In accordance with the applicable data protection legal framework, particularly the GDPR, you have the following rights as a data subject:
- You may request access to your personal data and request that it be rectified or erased.
- You also have the right to request that processing of your personal data be restricted or to object to the same.
- You have the right to portability of your personal data.
- Where processing of your personal data is based on your consent, please note that you may withdraw your consent at any time, without affecting the lawfulness of processing based on your consent carried out prior to your withdrawal of the same.
However, please note that some of the above rights are subject to specific conditions dictated by the applicable data protection legal framework. So, if your specific situation does not meet these conditions, we will unfortunately be unable to comply with your request.
To exercise your rights, please contact our DPO using the contact details provided in Section 8 (How can you contact us?). To process your request as efficiently as possible, we may ask you for certain additional information to confirm your identity and/or assist in locating the personal data that forms the subject matter of your request.
In any case, please note that you may lodge a complaint with the Italian Data Protection Authority: https://www.garanteprivacy.it/.
| 8 HOW CAN YOU CONTACT US? |
If you have any questions or requests regarding our processing operations with your personal data under this policy, including exercising your rights, as outlined above, you may contact us on the following address: info@pharmoduct.com
We also have appointed a Group data protection officer (“DPO”), which you can contact by e-mail at the following address: dpo.group@dedalus.eu
Current version: Dedalus – Privacy policy for website visitors – v. [1]
Last updated: [October 2022]
The Dedalus Group attaches a great deal of importance to and intends to pay particular attention to protecting your personal data and respecting your privacy.
The aim of this privacy information notice is therefore to inform you of how your personal data is processed when you act on behalf of a supplier or business partner of the Dedalus Group (e.g., employee, intern, company representative, etc.).
In this respect, please note that the controller of your personal data is the Dedalus Group entity that has among its suppliers or prospects the entity on behalf of which you are acting (hereinafter referred to as “we”, “our” and “us”). Please refer to the address information of the Dedalus Group entity on our website www.dedalus.com or you can find this information in your contractual documentation. Please refer to Section 7 (“How can you contact us?”) below to access the contact details of the relevant controller.
| 1 WHAT PERSONAL DATA DO WE COLLECT? |
We collect the following categories of personal data about you:
- Identification data (e.g., surname, first name, contact details, etc.).
- .).
In most cases, provision of your personal data is mandatory; we will be unable to manage our working relationship with the entity on behalf of which you are acting properly without it. For example, if you refuse to provide us with your contact details so we can send you an agreement to sign, we will be unable to enter into an agreement with the entity on behalf of which you are acting.
In any case, we will inform you when it is mandatory to provide your personal data.
Additionally, in the event that you provide us with personal data belonging to third parties (e.g. if you provide us with the data of a signatory so we can prepare the agreement to be signed), you undertake to ensure that such persons have been duly informed of the processing of their personal data in accordance with this policy and, if required, have consented to the processing of their personal data.
| 2 WHY DO WE USE YOUR PERSONAL DATA? |
The table below outlines the purposes that we process your personal data for and, for each purpose, the legal basis for the processing operation in question:
| PURPOSES | LEGAL BASIS |
| Relationship management with suppliers, service providers and business partners (e.g., agents, etc.), including, but not limited to: (i) preparation and performance of agreements; (ii) management and follow-up of orders placed by us; (iii) payment of invoices; etc. | The processing is necessary for the performance of a contract or to take steps at your request to enter a contract. |
| Where applicable, studying, organizing, and executing transactions relating to our activities, particularly in the context of mergers and acquisitions, spin-offs, etc. | Our legitimate interest in finding investors / buyers / stakeholders who may be interested in our business. |
| Analysis of data for business intelligence purposes in order to improve our understanding of internal business processes, evaluate the effectiveness and efficiency of our management system and assess initiatives | Our legitimate interest to analyze our organization and improve internal processes |
| Compliance with the applicable legal framework
|
Need to comply with a legal obligation that we are subject to.
|
| Managing and following up potential disputes with you or third parties
|
The processing is necessary to manage the contract and to pursue our legitimate interest to collect the sums due and to defend our interests, including through legal action and, where applicable, if certain categories of data (conviction, offense, security measure) are processed, the need to establish, exercise or defend our legal claims.
|
In any case, please note that we will not process your personal data for any other purpose that is incompatible with the above-mentioned purposes.
| 3 WHO DO WE SHARE YOUR PERSONAL DATA WITH? |
In the context of our processing operations, we may communicate your personal data to the following recipients:
- to our service providers, suppliers, agents, and contractors, to the extent that they assist us in carrying out the purposes set out in this policy (e.g., we use IT service providers to host your personal data on our behalf; etc.).
- to other entities of the Dedalus Group (e.g., in the context of our accounting / fiscal obligations, we may have to share a certain amount of information, including personal data concerning you, for consolidation purposes at Dedalus Group level, e.g. some services may be contracted by the holding in favor of all group entities).
- where applicable, to investors / buyers and their advisors (e.g., in the context of mergers and acquisitions).
- to competent courts, public authorities, government agencies and law enforcement agencies (including where we are required to comply with legal or regulatory requests).
Regardless of the recipient, we will only disclose your personal data to them on a strictly need-to-know basis and only to the extent required to fulfill the purposes identified in this policy.
We do not sell your personal data.
| 4DO WE TRANSFER DATA OUTSIDE THE EUROPEAN ECONOMIC AREA? |
In connection with the processing operations described in this policy, we transfer your personal data outside the European Economic Area (“EEA”), including to countries that are not recognized by the European Commission as providing an adequate level of data protection.
In this context, we ensure that the level of protection your personal data is given is not adversely affected by such transfers.
This specifically means that each of the intended transfers is based on one of the following mechanisms at least:
- the existence of an adequacy decision issued by the European Commission for the country that your personal data is transferred to; or, alternatively;
- the conclusion of standard contractual clauses reproducing the models adopted by the European Commission; or, alternatively;
- the existence of an exemption related to one of the specific situations exhaustively provided for by the General Data Protection Regulation 2016/679 (“GDPR”) (e.g. where you have given your consent to such transfer having been informed of the absence of safeguards, where the transfer is necessary for the performance of a contract concluded between you and us, where the transfer is necessary for the conclusion or performance of a contract concluded in your interest between us and a third party, or where the transfer is necessary for the establishment, exercise or defense of our legal claims, etc.).
You can obtain copies of these documents by emailing our Data Protection Officer (“DPO”), whose contact details are set out in Section 7 (How can you contact us?) below.
| 5 HOW LONG DO WE STORE YOUR PERSONAL DATA FOR? |
We store your personal data for no longer than is necessary for the purpose of the processing concerned.
In other words, this means that the storage periods we apply vary depending on the purpose for which we process the data in question. The table below therefore indicates, for each purpose, the storage period that will be applied to your personal data:
| PURPOSES | STORAGE PERIOD |
| Relationship management with suppliers, service providers and business partners (e.g., agents, etc.), including, but not limited to: (i) preparation and performance of agreements; (ii) management and follow-up of orders placed by us; (iii) payment of invoices; etc. | According to local legislation, and no longer than 10 years after the end of our contractual relationship with the supplier, service provider or business partner on behalf of which you are acting. |
| Where applicable, studying, organizing, and executing transactions relating to our activities, particularly in the context of mergers and acquisitions, spin-offs, etc.
|
Your data will only be stored for as long as is necessary to assess the appropriateness of the proposed transactions and, if necessary, to carry them out.
|
| Analysis of data for business intelligence purposes in order to improve our understanding of internal business processes, evaluate the effectiveness and efficiency of our management system and assess initiatives | For the duration necessary to carry out the business intelligence analysis |
| Compliance with the applicable legal framework | Your data will be stored for the duration of the limitation period of the obligations that we are subject to. |
| Managing and following up potential disputes with you or third parties | Your data will be stored for the duration of the dispute and until all potential remedies have been exhausted. |
We have also defined an archiving policy. This ensures that your personal data is not stored in the active database unnecessarily.
In any case, once the applicable storage period has elapsed, we will irrevocably erase or anonymize your personal data so that you can no longer be identified.
| 6 WHAT RIGHTS DO YOU HAVE? |
In accordance with the applicable data protection legal framework, particularly the GDPR, you have the following rights as a data subject:
- You may request access to your personal data and request that it be rectified or erased.
- You also have the right to request that processing of your personal data be restricted or to object to the same.
- You have the right to portability of your personal data.
- Where processing of your personal data is based on your consent, please note that you may withdraw your consent at any time, without affecting the lawfulness of processing based on your consent carried out prior to your withdrawal of the same.
However, please note that some of the above rights are subject to specific conditions dictated by the applicable data protection legal framework. So, if your specific situation does not meet these conditions, we will be unable to comply with your request.
To exercise your rights, please contact our DPO using the contact details provided in Section 7 (How can you contact us?). To process your request as efficiently as possible, we may ask you for certain additional information to confirm your identity and/or assist in locating the personal data that forms the subject matter of your request.
In any case, please note that you may lodge a complaint with the Italian Data Protection Authority: https://www.garanteprivacy.it/.
| 7 HOW CAN YOU CONTACT US? |
Your personal data will be processed by the Dedalus Group Company with which you have entered into the contractual/pre-contractual relationship, which will act as the Data Controller. The Data Controller can be contacted at the address of its registered office, as indicated on the respective website and in the contractual documentation.
We also have appointed a Group data protection officer (“DPO”), which you can contact by e-mail at the following address: dpo.group@dedalus.eu
Current version: Dedalus – Privacy policy for suppliers / business partners – v. [1]
Last updated: [October 2022]
This document has been prepared pursuant to EU Regulation 2016/679 (the “GDPR“) to enable users to understand what cookies are installed when they use the website www.pharmoduct.com (the “Website“).
- Data controller and data protection officer
Bioduct, with registered office in Italy – Via di Collodi 6/c, 50141 Firenze FI (“Dedalus“) is the data controller of the personal data (the “Data“) of the users of the Website collected using cookies. For any request it is possible to write to Dedalus at the above-mentioned physical address or through the e-mail address info@pharmoduct.com.
Dedalus has appointed a Group Data Protection Officer (“DPO“), who can be contacted at dpo.group@dedalus.eu.
- Data processed by Dedalus
The navigation on the Website involves the use of cookies, short strings of text that the websites visited send to the user’s browser, where they are stored and then transmitted to the same websites during subsequent visits. While browsing a site, the user may also receive cookies on their computer from sites or web servers other than the one he/she is visiting (so-called “third party” cookies). It is possible to distinguish:
- technical cookies, which allow to carry out activities related to the operation of the Site.
- profiling cookies, used to analyse user behaviour and, if necessary, to send advertising messages in line with the preferences expressed by the user during navigation.
This Website uses the following cookies:
a) Technical cookies
| Name | Host | Duration | Category | Description |
| cookieyes-consent | www.pharmoduct.com | 1 year | 1st | CookieYes sets this cookie to remember users’ consent preferences so that their preferences are respected on their subsequent visits to this site. It does not collect or store any personal information of the site visitors. |
b) Analytics/profiling cookies
| Name | Host | Duration | Category | Description |
| _ga_G1SRZN4TQL | www.pharmoduct.com | 2 years | This cookie is installed by Google Analytics. | |
| _ga | www.pharmoduct.com | 2 years | The _ga cookie, installed by Google Analytics, calculates visitor, session and campaign data and also keeps track of site usage for the site’s analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors. |
While technical cookies cannot be refused by the user of the Website, as they are strictly functional to the Website itself, the user can freely choose to accept or refuse the use of profiling cookies. The user can set and review their choices regarding cookies with the “cookies setting” function available on the website (privacy section).
- Purposes and legal basis of the processing
By using cookies, the following purposes are pursued:
3.1 to enable the navigation of the Website and its smooth functionality. The legal basis for the processing is the provision to users of services related to the Website and the legitimate interest of Dedalus to have a functional website.
3.2 to fulfil any obligations under applicable laws, regulations, or EU legislation, or to comply with requests from the authorities. The legal basis for the processing is the obligation of Dedalus to comply with mandatory legislation.
3.3 analyse user behaviour and possibly send him advertising messages in line with the preferences expressed by the same during navigation. The legal basis for processing in this case is the consent of the interested party.
3.4 for the needs of defence of the rights of Dedalus in the context of any litigation, even in court. The legal basis of the processing is the legitimate interest of the Owner to protect its rights.
The conferment of Data is optional, but (except in cases of processing based on consent) the failure to provide Data prevents the Controller from allowing the navigation of the Website.
- Recipients of the Data
The Data may be communicated:
(a) to third parties who need to perform specific activities in relation to the Data, in accordance with the purposes of the processing, or to service providers to the Data Controller.
(b) to authorities, entities and/or parties to whom the Data must be disclosed, pursuant to binding legal or contractual provisions.
(c) in other circumstances, such as acquisitions and sales to potential third-party companies, when we expect to sell or transfer part of or all our business.
- Transfer of Data outside the European Economic Area
As for the possible transfer of Data to countries not belonging to the European Economic Area, the processing will take place according to one of the legally permitted methods and therefore through the selection of recipients established in countries considered adequate by the European Commission or through the stipulation of standard contractual clauses.
- Data retention
The Data will be kept only for the time necessary for the purposes for which they were collected, respecting the principles of conservation limitation and minimization. More precisely, the terms of duration of the cookies are defined in the previous section 2. For the Data whose processing is based on the consent of the interested party, it is specified that the same will be kept until such consent is revoked.
- Data subjects’ rights
In the presence of the relevant legal prerequisites, the data subject may ask the Data Controller or the DPO for access to their Data, to rectify or erase them or to object to their processing, to request the restriction of processing in the cases provided for by Article 18 GDPR, as well as to obtain in a structured, commonly used, and machine-readable format the data concerning him/her, in the cases provided for by Article 20 GDPR.
In addition, the user has the right to revoke any consent to processing at any time, without affecting the lawfulness of the processing carried out by the Controller before the revocation.
Requests should be made in writing to the Data Controller at the addresses indicated above.
In any case, the interested party may lodge a complaint with the Guarantor for the Protection of Personal Data if he believes that the processing of his Data is contrary to the regulations in force.