Data may be processed by CASA DI CURA SAN ROSSORE S.r.l., Viale delle Cascine 152/f – 56122 Pisa (PI) for the following purposes:

• To allow the User access to the Site, for purposes strictly related to the provision of online services of CASA DI CURA SAN ROSSORE S.r.l.;
• To ensure the correct and effective technical support;
• To send information about our Services and our regulations and conditions. Your information is also used to provide you with a response when you contact us;
• To make our site easier and more intuitive. The data collected is used to make the browsing experience more pleasant and more efficient in the future;
• To ascertain and verify liability in case of hypothetical computer crimes against the site or third parties;
• To perform Market Analysis and Statistics;
• To enable the provision of online reservation service;

The following is a non-exhaustive list regarding the purposes related to health aspects on which the company may make an independent selection:

• Prevention, diagnosis, treatment and rehabilitation activities, including diagnostic services, therapeutic programs and any other services provided;
• Administrative and operational management activities related to the services provided booking and admission, certification, prescribing, compilation of clinical documentation and records, etc.;
• prevention, diagnosis, treatment and rehabilitation activities, including diagnostic services, screening programs, treatment plans specialist and outpatient care, of the diagnostic and inpatient;
• health care activities related to user health protection, including those related to the profession and services of the general practitioner and pediatrician of free choice;
• certification, reporting and referral activities, prescribing, and compilation of clinical documentation and records;
• debt collection activities and monitoring the adequacy of services provided;
• activities related to the provision of other goods or services to the user through an electronic communication network, for the purpose of safeguarding health (e.g., provision of aids and prostheses).;
• establishment and feeding of disease registries established at the national or regional level;
• surveys pertaining to the quality of performance, including by telephone call, or by use;
• educational and professional training activities of physicians and other practitioners of a health profession, as well as students, associates and professionals attending courses of study and
• professional training while respecting the patient’s right to anonymity, that is, using information without identifying data.

Data processing is carried out with or without the aid of electronic or, in any case, automated, computerized or telematic tools, with logic strictly related to the purposes more expressed above. The data will be processed in a lawful manner and in accordance with fairness and in any case in accordance with the aforementioned legislation, using instruments suitable to guarantee their security and confidentiality and may also be carried out through automated tools, excluding profiling, designed to store, manage and transmit the data.

The processing will be carried out, primarily by the company’s internal organization under the direction and control of the Data Controller and for purposes indicated above, also by group companies or third parties. Data will be stored in a form that allows the identification of the data subject for a period of time not exceeding that necessary for the purposes for which they are collected and processed.

The provision of Registration Data, referred to in point 1) and point 3) of the first paragraph of this information is mandatory in nature and failure to provide it, even partially, will result in the impossibility for CASA DI CURA SAN ROSSORE S.r.l. to proceed with the provision of the requested service.

Without prejudice to the communications performed in fulfillment of legal obligations, all data collected and processed may be communicated for the purposes indicated above to: Third parties, entrusted by CASA DI CURA SAN ROSSORE S.r.l. with the execution of activities directly related or instrumental to the provision and distribution of services offered through the website www.casadicurasanrossore.it;

Subjects belonging to our commercial network, partnership and distribution of services; Subjects who may become aware of them, in their capacity as “managers” or “appointees” of CASA DI CURA SAN ROSSORE S.r.l., such as personnel belonging to the administrative, medical, technical offices and the IT Office.

The updated list of the subjects to whom the data are communicated is available upon request by the User at the offices of CASA DI CURA SAN ROSSORE S.r.l. Personal data will not, in any case, be subject to dissemination.

Pursuant to the General Data Protection Regulation EU 2016/679 (GDPR), it should be noted that the data provided to CASA DI CURA SAN ROSSORE S.r.l. with the help of electronic or, in any case, automated, computerized or telematic tools are transferred and stored in:

• ITALY
• USA

The transfer of data was carried out by CASA DI CURA SAN ROSSORE S.r.l. pursuant to the provisions of Regulation 2016/679 and Article 25, paragraph 1, of the Directive 95/46/EC. More information on the Commission’s third-country adequacy decisions is available at Link.

Data retention times
The data provided will be stored in our archives according to the following parameters: stored within our management system. Data will be retained for a period not exceeding that permitted by law and in any case until the declared purpose has been achieved.

Pursuant to GDPR 2016/679, the interested party may contact via PEC or registered mail to CASA DI CURA SAN ROSSORE S.r.l Viale delle Cascine 152/F 56122 Pisa (PI) – Italy, and to the e-mail address info@pec.sanrossorecura.it and in copy to privacy@sanrossorecura.it and dpo@sanrosorecura.it attaching a photocopy of a valid identity document to assert the following rights:

1. Knowing the existence of data processing that may affect him
2. Obtain confirmation of the existence or non-existence of personal data concerning him/her, even if not yet registered, and communication in an intelligible form of the same data and their origin, as well as the logic and purposes on which the processing is based;
3. Obtain the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
4. Know the origin of personal data;
5. Be informed about the purposes and methods of the Treatment
6. To know the logic applied in case of processing carried out with the aid of electronic tools;
7. To be informed about the transfer of personal data from countries belonging to the EU to “third” countries (not belonging to the EU or the European Economic Area)
8. To know the identification details of the owner, managers, and designated representative in accordance with Article 27 of Regulation 2016/679.
9. To know the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as Data Processors or persons in charge.
10. Obtain updating, rectification or, if interested, integration of data;
11. The data subject has the right to object, in whole or in part:
    ◦ for legitimate reasons to the processing of personal data concerning him/her, even if relevant to the purpose of collection;
    ◦ to the processing of personal data concerning him/her for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.
12. Oppose, in whole or in part, for legitimate reasons, the processing of personal data concerning him/her, even if relevant to the purpose of collection.
13. Freely transfer your personal data to other service providers
14. Request the modification, deletion and removal of all or part of one’s data
15. Being able to file a complaint with the supervisory authority

In any case, the User will remain free at any time to revoke the consents given by him by sending a communication via PEC to that effect to info@pec.sanrossorecura.it and in copy to privacy@sanrossorecura.it and dpo@sanrosorecura.it, or by registered mail CASA DI CURA SAN ROSSORE S.r.l Viale delle Cascine 152/F 56122 Pisa (PI) – Italy. A copy of a valid identification document must be attached to the notice.
Data subjects may request general privacy information by sending an e-mail to privacy@sanrossorecura.it and dpo@sanrossorecura.it.