{"id":11691,"date":"2022-05-16T16:57:35","date_gmt":"2022-05-16T14:57:35","guid":{"rendered":"http:\/\/www.marthapalermo.it\/privacy-policy\/"},"modified":"2025-08-02T21:29:53","modified_gmt":"2025-08-02T19:29:53","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.marthapalermo.it\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Privacy Notice Pursuant to Articles 13 and 14 of Reg. (EU) 2016\/679<\/b><\/span><\/span><\/p>

Dear visitor<\/b><\/span>
<\/span>
<\/span>, <\/span>the Privacy legislation (in particular, the EU Regulation 2016\/679,the “General Data Protection Regulation. <\/span>

<\/span><\/span>data<\/b>” – known by the English acronym “GDPR<\/b><\/span>
<\/span>
<\/span> “) requires us to provide you with the following information about the processing of your <\/span>

personal data\u00a0<\/b>
<\/span><\/span>pursuant to Art. 13 and 14 of the GDPR.<\/span><\/p>

The “<\/span>

processing of personal data<\/b>
<\/span><\/span>\u00a0“, simply put, is any operation concerning any “information relating to a natural person, identified or identifiable.” For example, first and last name, or an e-mail address with a “username” that identifies you <\/span>(e.g., mariorossi@….), are considered “personal data<\/span>
<\/span> “, and collecting them, registering them with us, and using them to send you a communication, are considered operations of “processing <\/span>
<\/span> “; so also (again, for example) communication to other parties and archiving. The indication of the pathology from which you possibly suffer is data “falling into special categories,” requiring specific protection in which we are constantly engaged. The website of the Data Protection Authority contains additional information useful to you to better understand the subject (see e.g.: http:\/\/www.garanteprivacy.it\/home\/diritti).<\/span><\/p>

MARTHA SRLS <\/b><\/span>are defined as “<\/span>

data controller<\/b>
<\/span><\/span>\u00a0“, an entity that determines how and for what purposes to process information about individuals.<\/span><\/p>

You, as the “natural person to whom the <\/span> personal data<\/b><\/span><\/span> “, is defined as <\/span>“<\/span> interested<\/b><\/span><\/span> “, and is entitled to receive the following information about who we are, such as <\/span> personal data<\/b><\/span><\/span> we treat, why, how and for how long we treat them, and what obligations and rights you have in this regard.<\/span><\/p>

Depending on whether you are a mere visitor to our websites or want to take advantage of our <\/span> services<\/b><\/span><\/span> , we collect and\/or need you to provide us with certain data, necessary for us to allow you to navigate the <\/span> website<\/b><\/span><\/span> and\/or access to our <\/span> services<\/b><\/span><\/span> ; in the first case it is information that does not allow us to identify you (and therefore we will not process personal data, only “browsing data”).<\/span><\/p>

Definitions of terms and expressions used (shown in bold) are contained in the Glossary.<\/span><\/p>

Who are we? (“Data Controller”)<\/b><\/span><\/span><\/p>


MARTHA SRLS<\/b>
<\/span> ,<\/span>headquartered at 32 Via Siracusa, 90141 Palermo, Pa.<\/p>

Data Protection Officer: Chiara Volpes – chiara.volpes@marthapalermo.it<\/p>

What categories of personal data do we process?<\/b><\/span><\/span><\/p>

Common personal data (e.g., first and last name, social security number, telephone number, addresses, etc.) and special data<\/b><\/span>
<\/span>
<\/span> (relating to health or sexual life or sexual orientation, or revealing racial or ethnic origin or religious beliefs), to the minimum extent necessary to achieve each of the Purposes set forth below, by persons subject to obligations of secrecy and under the responsibility of health care professionals and\/or the Medical Director.<\/span><\/p>

What is the origin of your personal data?<\/b><\/span><\/span><\/p>

You may have transmitted them to us yourself or we may have obtained them from third parties (e.g., a family member booking a service with us on your behalf).<\/span><\/p>

Why do we process personal data (purpose) and what is the basis for the processing (legal basis) of each category of data?<\/b><\/span><\/span><\/p><\/colgroup>
n.<\/span><\/span><\/td>

Purpose<\/b><\/span><\/span><\/p><\/td>

Categories of personal data<\/b><\/span><\/span><\/p><\/td>

Legal Basis<\/b><\/span><\/span><\/p><\/td><\/tr>

1<\/span><\/span><\/td>

allow you to navigate the site<\/i><\/span><\/span><\/p><\/td>

Municipalities (to the extent that the information collected consists of personal data)<\/i><\/span><\/span><\/p><\/td>

Our legitimate interest (that of being able to present our services to you)<\/i><\/span><\/span><\/p><\/td><\/tr>

2<\/span><\/span><\/td>

fulfill your requests regarding our services<\/i><\/span><\/span><\/p><\/td>

Common Personal Data<\/i><\/span><\/span><\/p><\/td>

The need to take pre-contractual measures at your request<\/i><\/span><\/span><\/p><\/td><\/tr>

3<\/span><\/span><\/td>

To provide you with our services and everything related to them (e.g., reservations, appointments, exam pickup, sending reports, reminders, complaints, etc.), for the purpose of prevention, diagnosis, treatment, rehabilitation, health care or therapy<\/i><\/span><\/span><\/p><\/td>

Common and Particular Personal Data<\/i><\/span><\/span><\/p><\/td>

The need to perform the contract with you, and the need to pursue purposes of prevention, diagnosis, treatment, rehabilitation, health care or therapy, or management of health care systems and services<\/i><\/span><\/span><\/p><\/td><\/tr>

4<\/span><\/span><\/td>

Inform her about preventive health initiatives<\/i><\/span><\/span><\/p><\/td>

Common and Particular Personal Data<\/i><\/span><\/span><\/p><\/td>

Significant public interest (to the safety and health of the population)<\/i><\/span><\/span><\/p><\/td><\/tr>

5<\/span><\/span><\/td>

To send you advertising, commercial or marketing communications regarding services similar to those you use, or to inform you about our news (e.g., opening of new clinics, promotions, events, etc.), if you are already one of our users or a newsletter subscriber<\/i><\/span><\/span><\/p><\/td>

Common Personal Data<\/i><\/span><\/span><\/p><\/td>

Our legitimate interest (to carry out promotional activities)<\/i><\/span><\/span><\/p><\/td><\/tr>

6<\/span><\/span><\/td>

Send you questionnaires to check your satisfaction<\/i><\/span><\/span><\/p><\/td>

Common Personal Data<\/i><\/span><\/span><\/p><\/td>

our legitimate interest<\/i><\/span><\/span><\/p><\/td><\/tr>

7<\/span><\/span><\/td>

Send you advertising, commercial or marketing communications, and\/or conduct market research, even if you are not yet one of our users<\/i><\/span><\/span><\/p><\/td>

Common Personal Data<\/i><\/span><\/span><\/p><\/td>

Your explicit consent, freely given and revocable at any time<\/i><\/span><\/span><\/p><\/td><\/tr>

8<\/span><\/span><\/td>

Analyze or predict your habits and\/or preferences regarding our services through profiling activities<\/i><\/span><\/span><\/p><\/td>

Common and Particular Personal Data<\/i><\/span><\/span><\/p><\/td>

Your explicit consent, freely given and revocable at any time<\/i><\/span><\/span><\/p><\/td><\/tr>

9<\/span><\/span><\/td>

fulfill legal obligations, including those related to the need to provide you with our services, or comply with orders from Authorities<\/i><\/span><\/span><\/p><\/td>

Common Personal Data<\/i><\/span><\/span><\/p><\/td>

The duty to fulfill legal obligations to which CMS is subject<\/i><\/span><\/span><\/p><\/td><\/tr>

10<\/span><\/span><\/td>

ascertain, exercise and\/or defend a right of ours in the appropriate forums<\/i><\/span><\/span><\/p><\/td>

Common and Particular Personal Data<\/i><\/span><\/span><\/p><\/td>

the need to ascertain, exercise or defend a right<\/i><\/span><\/span><\/p><\/td><\/tr>

11<\/span><\/span><\/td>

statistical purposes, but with the use of anonymized information (which no longer allows us to trace your identity)<\/i><\/span><\/span><\/p><\/td>

Anonymous information<\/i><\/span><\/span><\/p><\/td>

None, because the information does not consist of personal data<\/i><\/span><\/span><\/p><\/td><\/tr><\/tbody><\/table>

To whom do we disclose the Data (Recipient Categories)?<\/b><\/span><\/span><\/p>

To the minimum extent necessary to achieve each of the Purposes, based on Applicable Law and\/or a contractual agreement with the Owner:<\/span><\/p>

  • Subjects necessary for the performance of activities related and consequent to the execution of the Contract, acting as data processors<\/b><\/span>
    <\/span>
    <\/span> or as autonomous Owners<\/span>
    <\/span>
    <\/span> (e.g. providers of IT, banking, insurance, shipping and transportation, commercial agency, accounting, tax, legal, etc.);<\/span><\/p><\/li>

  • Consultants and\/or professionals appointed by us, self-employed Owners of treatment<\/span>\u00a0
    <\/span> (e.g., medical personnel and Health Care Workers);<\/span><\/p><\/li>

  • subjects authorized by us <\/span>
    <\/span><\/p>

    authorized(e .g., our workers), committed to confidentiality, or recipients of a legal obligation to confidentiality;<\/span><\/p><\/li>

  • private organizations belonging to the same business group as CMS;<\/span><\/p><\/li>

  • public organizations and Authorities<\/b><\/span><\/span>
    <\/span><\/p>


    , if and to the extent required by applicable law or by their orders, or for the exercise, establishment and\/or defense of a right in court.<\/span><\/p><\/li><\/ul>

    We do not give <\/span>dissemination<\/b><\/span>\u00a0<\/span>
    <\/span>
    <\/span> a personal data<\/b><\/span>\u00a0<\/span>
    <\/span><\/p>


    , except when it is required, in accordance with the law, by Authorities, information and security bodies or other public entities for purposes of defense or state security or prevention, detection or prosecution of crimes.<\/span><\/p>

    A list of external data processors is available upon request, with additional data useful for their identification.<\/span><\/p>

    How long do we keep the Data?<\/b><\/span><\/span><\/p>

    We process Data for purposes of <\/span> marketing<\/b><\/span><\/span> until your consent is revoked (e.g., until you unsubscribe from a <\/span> newsletter<\/b><\/span><\/span> ); for other purposes, the maximum retention time is linked to the provisions of the <\/span> applicable regulations<\/b><\/span><\/span> that allow us to (or require us to) retain data for the protection of our rights.<\/span><\/p>

    Do we transfer Personal Data outside the European Union?<\/b><\/span><\/span><\/p>

    No. No extra Eu transfers are made.<\/span><\/p>

    Do we perform profiling activities?<\/b><\/span><\/span><\/p>

    If (and only if) you expressly allow us to do so, we will process your profile of <\/span> user<\/b><\/span><\/span> through the detection of the <\/span> biographical data<\/b><\/span><\/span> and the type of <\/span> services<\/b><\/span><\/span> enjoyed, so that you can stay up-to-date on <\/span> services<\/b><\/span><\/span> and novelties in line with your goals of prevention, treatment and health care.<\/span><\/p>

    \u00a0<\/p>

    Does the site make use of cookies?<\/b><\/span><\/span><\/p>

    Yes. To learn more and to view our policy in this regard, you may consult the cookies<\/b><\/span>
    <\/span>
    <\/span> policy.<\/span><\/p>

    \u00a0<\/p>

    Are you obliged to provide us with personal data?<\/b><\/span><\/span><\/p>

    The communication of navigation data<\/span>
    <\/span><\/p>


    (which, moreover, does not normally<\/span><\/p>

    consist of personal data<\/b><\/span><\/span>
    <\/span><\/p>


    ) is mandatory in order for us to allow you to navigate the site.<\/span><\/p>

    You, of course, are not obliged to use our services or sign up for our newsletter, but if you wish to do so, you must provide us with the personal information we request from you.<\/span><\/p>

    What happens if you refuse to disclose your data?<\/b><\/span><\/span><\/p>

    Due to the operation of the Internet, it cannot refuse the communication of browsing data; it can refuse the installation of certain <\/span>
    <\/span><\/p>

    cookies.<\/span><\/p>

    If you do not agree to disclose your information, we will not be able to provide you with our services or pursue one or more of the other purposes.<\/span><\/p>

    \u00a0<\/p>

    What rights do you have?<\/b><\/span><\/span><\/p>

    You have the right to:<\/span><\/p>

    • Access your Personal Data in our possession;<\/span><\/p><\/li>

    • Request rectification of any incomplete or inaccurate Personal Data;<\/span><\/p><\/li>

    • Request their cancellation if the conditions are met;<\/span><\/p><\/li>

    • request the limitation of treatment<\/span>, where the conditions are met;<\/span><\/p><\/li>

    • Object to processing based on legitimate interest or public interest, for reasons related to your particular situation;<\/span><\/p><\/li>

    • object to the treatment<\/span>
      <\/span>
      <\/span> for purposes of marketing<\/span>\u00a0, by not giving consent initially or revoking it later;<\/span><\/p><\/li>

    • object to the activity of profiling<\/span>
      <\/span> , by not giving consent initially or revoking it later;<\/span><\/p><\/li>

    • Request Data portability, where the conditions are met and to the maximum extent technically possible;<\/span><\/p><\/li>

    • Propose a complaint to the Garante per la Protezione dei Dati Personali (in Italy, www.garanteprivacy.it), or to the Garante Authority of the EU state where he or she normally resides or works, or of the place where the alleged violation occurred.<\/span><\/p><\/li><\/ul>

      Who can you contact?<\/b><\/span><\/span><\/p>

      You may contact Martha SRLS.. for matters pertaining to the treatment<\/span>
      <\/span>
      <\/span> of your personal data<\/b><\/span>
      <\/span>
      <\/span> by sending an email to <\/span>info@marthapalermo.it<\/span> .<\/span><\/p>

      This Privacy Policy is effective as of 25\/July\/2022; we reserve the right to change its contents, in part or in full, including as a result of changes in privacy regulations; we will make the <\/span> publication<\/b><\/span><\/span> at <\/span> website<\/b><\/span><\/span> of the updated version of the Privacy Policy and from that time it will be binding: You are therefore invited to visit this section regularly.<\/span><\/p>

      Glossary<\/b><\/span><\/span><\/p>

      “
      <\/span>Control authority<\/strong>“<\/span>\u00a0means the independent public authority established by a European Union state, or by the European Union itself, charged with overseeing the application of privacy legislation (for Italy, the Garante per la Protezione dei Dati Personali, http:\/\/www.garanteprivacy.it).<\/span><\/p>

      “
      <\/span><\/p>


      Authority<\/b><\/span><\/span> ” means a body or organization, public or private, with administrative, judicial, police, disciplinary, and supervisory powers.<\/span><\/p>

      “Authorized<\/strong>” means the natural person, placed under the direct authority of the controller, who receives instructions from the controller on the processing of personal data, pursuant to and for <\/span> the effects
      <\/span>
      <\/span> Of Art. 29 of the GDPR.<\/span><\/p>

      “Privacy Code<\/strong>
      <\/span>“: the Legislative Decree. 196\/2003 as amended and\/or supplemented (in particular by Legislative Decree No. 101\/2018).<\/span><\/p>

      “
      <\/span><\/p>

      Committee<\/b><\/span>” o “<\/span>
      <\/span><\/p>

      EDPB“: the European Data Protection Board, established by Art. 68 of the GDPR and governed by Articles 68 to 76 of the GDPR, replacing WP29 as of 25\/5\/2018.<\/span><\/p>

      “Communication<\/strong>
      <\/span> ” means “the giving of knowledge of personal data to one or more specified persons other than the data subject, the data controller’s representative in the territory of the European Union, the data processor or its representative in the territory of the European Union, the persons authorized under Article 2-quaterdecies to process personal data under the direct authority of the data controller or the data processor, in any form, including by making them available, consulting them or by interconnecting them” (as defined in Article 2-ter, paragraph 4, letter a of the Privacy Code).<\/span><\/p>

      “Cookie<\/strong>“: short text fragments (letters and\/or numbers) that allow the web server to store information on the browser to be reused during the same visit to the site (session cookies) or later, even days later (persistent cookies). Cookies are stored, based on user preferences, by the individual browser on the specific device being used (computer, tablet, smartphone). The following categories are considered:<\/span><\/p>

      Technical cookies<\/span><\/span><\/em><\/strong> : these are cookies that are indispensable for the proper functioning of the site and are used for the sole purpose of “carrying out the transmission of a communication over an electronic communications network, or to the extent strictly necessary for the provider of an information society service explicitly requested by the subscriber or user to provide such a service” (see Art. 122, c. 1, of the Privacy Code).<\/span><\/p>

      Analytical cookies<\/i><\/span><\/span><\/strong> : are cookies used to anonymously collect and analyze site traffic and usage. These cookies, while not identifying the user, allow, for example, detection of whether the same user returns to log on at different times. They also allow the system to be monitored and improve its performance and usability. Disabling these cookies can be done without any loss of functionality.<\/span><\/p>

      \u00a0<\/span><\/p>


      Profiling cookies<\/i><\/span><\/span>: these are persistent cookies used to identify (anonymously and non-anonymously) user preferences and improve the user’s browsing experience.<\/span><\/p>

      Third-party cookies (analytical and\/or profiling)<\/i><\/span><\/span> : these are cookies generated by organizations outside the Site, but embedded in parts of the Site page. Think, for example, of Google “widgets” (e.g., Google Maps) or “social plugins” (Facebook, Twitter, LinkedIn, Google+, etc.).<\/span><\/p>

      “
      <\/span>Navigation Data<\/strong>“<\/span>: these are the data that the computer systems and software procedures used to operate the site acquire, in the course of their normal operation, and whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the user’s operating system and computer environment. This data is used for the sole purpose of obtaining anonymous statistical information about the use of the site and to check its correct operation and is deleted immediately after processing.<\/span><\/p>

      “Particular Data
      <\/span> “: personal data “revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, […] relating […] to a person’s sex life or sexual orientation” (Art. 9.1 GDPR), “relating to health” (“personal data relating to the physical or mental health of a natural person, including the provision of health care services, revealing information relating to his or her state of health,” as defined by Article 4, subsection 1, no. 15, of the GDPR) and “personal data relating to criminal convictions and offenses or related security measures” (Art. 10 of the GDPR), as well as “genetic” data (“personal data relating to hereditary or acquired genetic characteristics of a natural person which provide unambiguous information about the physiology or health of that natural person, and which result in particular from the analysis of a biological sample of that natural person,” as defined by Art. 4, subsection 1, no. 13, of the GDPR); “biometric” (“personal data obtained by specific technical processing relating to the physical, physiological or behavioral characteristics of a natural person that enable or confirm his or her unambiguous identification, such as facial image or dactyloscopic data,” as defined by Art. 4, subsection 1, no. 14, of the GDPR).<\/span><\/p>

      “Data<\/strong>
      <\/span>
      <\/span> ” means one or more of the categories indicated as personal data and special data.<\/span><\/p>

      “

      <\/span><\/span>Personal Data<\/b>” means “any information relating to an identified or identifiable natural person (“data subject”); an identifiable person is any natural person who can be identified, directly or indirectly, by reference in particular to an identifier such as a name, an identification number, location data, an online identifier, or to one or more characteristic elements of his or her physical, physiological, genetic, mental, economic, cultural, or social identity,” as defined by Art. 4, subsection 1, no. 1, of the GDPR).<\/span><\/p>

      “Recipient\u00a0<\/strong>” means “the natural or legal person, public authority, service or other body receiving communication of personal data, whether or not it is a Third Party,” as defined by Art. 4, subsection 1, no. 9, of the GDPR.<\/span><\/p>

      “Spread<\/strong>” means “the giving of knowledge of personal data to unspecified subjects, in any form, including by making them available or consulting them” (as defined in Article 2-ter, paragraph 4, letter b of the Privacy Code).<\/span><\/p>

      “

      <\/span><\/span>GDPR<\/b>“: the EU Regulation 2016\/679 “on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95\/46\/EC (General Data Protection Regulation).”<\/span><\/p>

      “Interested<\/strong>” means “identified or identifiable natural person” as defined by Art. 4, subsection 1, no. 1, of the EU Regulation 2016\/679 (the so-called “GDPR”).<\/span><\/p>

      “
      <\/span>Joined<\/strong>“: the data subject who has activated the newsletter service.<\/span><\/p>

      “
      <\/span>Limitation<\/strong>” means “the marking of personal data stored with the aim of limiting their processing in the future,” as defined in Art. 4, subsection 1, no. 3, of the GDPR.<\/span><\/p>

      “Contact Form<\/strong>“: the section on the main page of the site through which visitors can send inquiries.<\/span><\/p>

      “

      <\/span><\/span>Marketing<\/b>“: singularly or cumulatively, the purposes of sending advertising material, commercial communication, direct sales and carrying out market research.<\/span><\/p>

      “Newsletter<\/strong><\/span>“: editorial and promotional content sent to Subscribers.<\/span><\/p>

      “Applicable Legislation<\/strong>
      <\/span> ” means any provision, of whatever rank, belonging to Italian or European Union law, in any way applicable to the site and\/or services.<\/span><\/p>

      “

      <\/span><\/span>Privacy Policy<\/b>“: the Legislative Decree. 196\/2003 as amended and\/or supplemented (“Privacy Code”), as well as the General Measures issued pursuant to Art. 154 paragraph 1 of the same Code, the EU Regulation 2016\/679 (“GDPR”) and additional applicable legislation of any rank, including the opinions and guidelines developed by the WP29 and, as of 25\/5\/2018, the Committee.<\/span><\/p>

      “Profiling” means “any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects of that natural person’s professional performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements,” as defined in Art. 4, subsection 1, no. 4, of the GDPR.<\/span><\/p>

      “

      <\/span><\/span>Publication<\/b>” means the action by which the owner communicates a piece of information on the site, without the implementation of procedures that require the Visitor to view it.<\/span><\/p>

      “Responsible<\/strong>” means “the natural or legal person, public authority, service or other body that processes personal data on behalf of the controller,” as defined by Art. 4, subsection 1, no. 8, of the GDPR.<\/span><\/p>

      “Services<\/strong>“: the services provided by Santagostino Medical Center.<\/span><\/p>

      “

      <\/span><\/span>Website<\/b>“: the web pages exposed through www.cmsantagostino.it, including subdomains.<\/span><\/p>

      “

      <\/span><\/span>Third<\/b><\/span>\u00a0” means “the natural or legal person, public authority, service or other body other than the data subject, the controller, the processor and persons authorized to process personal data under the direct authority of the controller or processor,” as defined by Art. 4, subsection 1, no. 10, of the GDPR.<\/span><\/p>

      “

      <\/span><\/span>Holder<\/b>” means “the natural or legal person, public authority, service or other body which, individually or jointly with others, determines the purposes and means of the processing of personal data,” as defined by Art. 4, subsection 1, no. 7, of the GDPR.<\/span><\/p>

      “

      <\/span><\/span>Treatment<\/b>” means “any operation or set of operations, whether or not involving automated processes, applied to personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, comparison or interconnection, restriction, erasure or destruction,” as defined by Art. 4, subsection 1, no. 2, of the GDPR.<\/span><\/p>

      “User.”<\/b><\/span><\/span> the person who uses the services of Santagostino Medical Center.<\/span><\/p>

      “Visitor<\/strong>“: the natural person who uses a device and navigates, through the Internet network, on the public pages of the site.<\/span><\/p>

      “WP29.”<\/b>
      <\/span><\/span> The Working Group for the Protection of Individuals with Regard to the Processing of Personal Data, established under Art. 29 of Directive 95\/46\/EC, whose duties are set out in Art. 30 of Directive 95\/46\/EC and Art. 15 of Directive 2002\/58\/EC.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

      \n\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t

      To whom do we disclose your data (categories of recipients)?<\/span><\/h3>\n

      \n Your data will be disclosed, <\/span><\/span><\/span>\n \n to the minimum extent necessary to achieve the purposes<\/span><\/span><\/b>\n <\/span>\n<\/span> \n , based on applicable legislation and\/or contractual agreement with the Controller, to: <\/span>\n<\/span> <\/p>\n\n

        \n \t
      • \n

        Physicians performing the individual health care service;<\/span><\/p>\n<\/li>\n \t

      • \n

        Other physicians involved in your overall care pathway;<\/span><\/p>\n<\/li>\n \t

      • \n

        additional physicians who have performed services at other clinical events handled within the Company;<\/span><\/p>\n<\/li>\n \t

      • \n

        other natural persons authorized to process (e.g., administrative, nursing, technical personnel, etc.), obligated by law or contract to confidentiality;<\/span><\/p>\n<\/li>\n \t

      • \n

        Providers of services related and\/or consequent to health care provision, acting as Data Processors, as Joint Data Controllers or as autonomous Data Controllers (e.g., providers of IT, banking, insurance, accounting, tax, legal services, etc.); <\/span><\/p>\n<\/li>\n \t

      • \n

        public and private organizations (e.g., other public and\/or private health agencies and local, regional, national and international public bodies, welfare and social security agencies, research organizations, Social Services of municipalities for activities related to the assistance of weak individuals, etc.);<\/span><\/p>\n<\/li>\n \t

      • \n

        private organizations belonging to the same business group as the Santagostino;<\/span><\/p>\n<\/li>\n \t

      • \n

        public authorities, if and to the extent required by applicable law or by their orders, or for the exercise, establishment and\/or defense of a right in court.<\/span><\/p>\n<\/li>\n<\/ul>\n

        We do not disseminate personal data, except when we are required to do so by law, by Authorities or other public entities for purposes of defense or state security or the prevention, detection or prosecution of crimes. A list of external data processors is available upon request, with additional data useful for their identification.<\/span><\/span><\/span><\/span><\/p>\n\n

        Do we transfer personal data outside the European Union?<\/span><\/h3>\n

        For some activities we use services that involve the transfer of personal data outside the European Union, only with entities (countries and\/or international organizations) for which there is an adequacy decision by the European Commission, or on the basis of one of the other guarantees or exemptions provided by Chapter V of the EU Regulation 2016\/679 (GDPR). The list of such persons, with an indication of the service for which they are employed, is available upon request of the person concerned.<\/span><\/span><\/span><\/span><\/p>\n\n

        Do we perform profiling activities?<\/span><\/h3>\n

        Only if you give us your consent will we process your user profile through the collection of identifying data, the type of services you use, and the pages of our website you visit, so that you can stay up-to-date on services and news in line with your goals for prevention, diagnosis, treatment, and health care.<\/span><\/span><\/span><\/span><\/p>\n\n

        Are you obliged to provide us with your data?<\/span><\/h3>\n

        Yes, by virtue of legal and\/or contractual obligations, to the extent strictly necessary to achieve the purposes stated above, except for the purpose stated in no. 6.<\/span><\/span><\/span><\/span><\/p>\n\n

        What happens if I refuse to give you my information?<\/span><\/h3>\n

        Failure to provide the data referred to in purposes no. 1 and 2 results in the inability to provide health care. In contrast, your right to the provision of health care will not be affected in the other cases where refusal to disclose data is permissible.<\/span><\/span><\/span><\/span><\/p>\n

        In case of refusal to disclose data for purpose nr. 6, we will not be able to send advertising communications or conduct market research.<\/span><\/span><\/span><\/span><\/p>\n

        In case of refusal to the communication of data for the purpose nn. 10, 11, and 12, the Santagostino will not be able to pursue them.<\/span><\/span><\/span><\/span><\/p>\n\n

        What are your rights?<\/span><\/h3>\n

        You have the right to:<\/span><\/span><\/span><\/span><\/p>\n\n

          \n \t
        • \n

          Access personal data in our possession, and request copies;<\/span><\/p>\n<\/li>\n \t

        • \n

          Request rectification of any incomplete or inaccurate personal data;<\/span><\/p>\n<\/li>\n \t

        • \n

          request cancellation, subject to the exclusions set forth in Art. 17.3 GDPR;<\/span><\/p>\n<\/li>\n \t

        • \n

          Request restriction of processing, subject to the exclusions set forth in Art. 18.2 GDPR;<\/span><\/p>\n<\/li>\n \t

        • \n

          Obtain a list of data processors, with additional data useful for their identification;<\/span><\/p>\n<\/li>\n \t

        • \n

          to request data portability (i.e. to receive the data in a structured, commonly used, machine-readable format, e.g., a computer, in order to transmit them to another data controller without hindrance), to the maximum extent technically feasible, and within the limits of processing based on consent or performance of a contract, and except in cases: – of processing necessary for the performance of a task in the public interest; – where the exercise of the right affects the rights and freedoms of other natural persons;<\/span><\/p>\n<\/li>\n \t

        • \n

          Propose a complaint to the Garante per la Protezione dei Dati Personali (in Italy, www.garanteprivacy.it), or to the Garante Authority of the EU state where he or she normally resides or works, or of the place where the alleged violation occurred.<\/span><\/p>\n<\/li>\n<\/ul>\n

          Right of opposition<\/span><\/span><\/span><\/b><\/span><\/span><\/p>\n

          You can object to Treatment Based:<\/span><\/span><\/span><\/span><\/p>\n\n

            \n \t
          • \n

            on consent (for the purpose of Marketing – No. 6 -, including Profiling insofar as it is related to them, as well as automated decision-making processes in accordance with Article 22 GDPR), not giving consent initially or revoking it subsequently (with the caveat that any subsequent revocation of consent does not affect the lawfulness of the data processing carried out in the period prior to such revocation);<\/span><\/p>\n<\/li>\n \t

          • \n

            on legitimate interest (Purposes Nos. 5 and 7) or public interest (Purposes Nos. 3, 5 and 9), at any time for reasons related to your particular situation (e.g., injury to honor, reputation, decorum), subject to the Holder’s demonstration of a compelling and overriding legitimate interest under Art. 21.1 GDPR, and unless the processing is necessary for the establishment, exercise or defense of a right in court.\nThe exercise of the above rights may also be delayed, limited or excluded in the cases provided for in Art. 2-undecies d.lgs. 196\/2003.<\/span><\/p>\n<\/li>\n<\/ul>\n

            Who can I contact with questions or to exercise my rights?<\/span><\/h3>\n

            You can contact MARTHA SRLS, P.Iva 06914480824 based in Via Siracusa 32, 90141 Palermo, PA<\/span><\/p>\n

            For questions regarding the processing of your personal data by sending an email to info@marthapalermo.it<\/span><\/span><\/span><\/span><\/p>\n

            This Privacy Policy is effective as of July 2022; we reserve the right to change its contents, in part or in full, including as a result of changes in the Privacy Policy.<\/span><\/span><\/span><\/em><\/span><\/span><\/p>\n\n

            Glossary<\/span><\/h3>\n

            “\n \n Supervisory Authority<\/span><\/span><\/span><\/b>\n <\/span>\n<\/span> ” means the independent public authority established by a European Union state, or by the European Union itself, responsible for overseeing the application of privacy legislation (for Italy, the Garante per la Protezione dei Dati Personali, http:\/\/www.garanteprivacy.it).<\/span><\/span><\/span><\/p>\n

            \n \n“<\/span><\/span><\/span>\n \n Authority<\/span><\/span><\/b>\n <\/span>\n<\/span> \n ” means a body or organization, public or private, with administrative, judicial, police, disciplinary, and supervisory powers.<\/span>\n<\/span><\/p>\n

            “\n \n Authorized<\/span><\/span><\/span><\/b>\n <\/span>\n<\/span> ” means the natural person, placed under the direct authority of the controller, who receives instructions from the controller on the processing of personal data, pursuant to Art. 29 of the GDPR.<\/span><\/span><\/span><\/p>\n

            “\n \n Privacy Code<\/span><\/span><\/span><\/b>\n <\/span>\n<\/span> “: the Legislative Decree. 196\/2003 as amended and\/or supplemented (in particular by Legislative Decree No. 101\/2018).<\/span><\/span><\/span><\/p>\n

            “\n \n Committee<\/span><\/span><\/span><\/b>\n <\/span>\n<\/span> ” o “<\/span><\/span><\/span>\n EDPB<\/span><\/span><\/b>\n<\/span> “: the European Data Protection Board, established by Art. 68 of the GDPR and governed by Articles 68 to 76 of the GDPR, replacing WP29 as of 25\/5\/2018.<\/span><\/span><\/p>\n

            “\n \n Communication<\/span><\/span><\/span><\/b>\n <\/span>\n<\/span> ” means “the giving of knowledge of personal data to one or more specified persons other than the data subject, the data controller’s representative in the territory of the European Union, the data processor or its representative in the territory of the European Union, the persons authorized under Article 2-quaterdecies to process personal data under the direct authority of the data controller or the data processor, in any form, including by making them available, consulting them or by interconnecting them” (as defined in Article 2-ter, paragraph 4, letter a of the Privacy Code).<\/span><\/span><\/span><\/p>\n

            “\n \n Particular Data<\/span><\/span><\/span><\/b>\n <\/span>\n<\/span> “: personal data “revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, […] relating […] to a person’s sex life or sexual orientation” (Art. 9.1 GDPR), “relating to health” (“personal data relating to the physical or mental health of a natural person, including the provision of health care services, revealing information relating to his or her state of health,” as defined by Article 4, subsection 1, no. 15, of the GDPR) and “personal data relating to criminal convictions and offenses or related security measures” (Art. 10 of the GDPR), as well as “genetic” data (“personal data relating to hereditary or acquired genetic characteristics of a natural person which provide unambiguous information about the physiology or health of that natural person, and which result in particular from the analysis of a biological sample of that natural person,” as defined by Art. 4, subsection 1, no. 13, of the GDPR); “biometric” (“personal data obtained by specific technical processing relating to the physical, physiological or behavioral characteristics of a natural person that enable or confirm his or her unambiguous identification, such as facial image or dactyloscopic data,” as defined by Art. 4, subsection 1, no. 14, of the GDPR).<\/span><\/span><\/span><\/p>\n

            “\n \n Data<\/span><\/span><\/span><\/b>\n <\/span>\n<\/span> ” means one or more of the categories indicated as personal data and special data.<\/span><\/span><\/span><\/p>\n

            “\n \n Personal Data<\/span><\/span><\/span><\/b>\n <\/span>\n<\/span> ” means “any information relating to an identified or identifiable natural person (“data subject”); an identifiable person is any natural person who can be identified, directly or indirectly, by reference in particular to an identifier such as a name, an identification number, location data, an online identifier, or to one or more characteristic elements of his or her physical, physiological, genetic, mental, economic, cultural, or social identity,” as defined by Art. 4, subsection 1, no. 1, of the GDPR). All personal data not falling under the category of “Particular Data” are considered common personal data.<\/span><\/span><\/span><\/p>\n

            “\n \n Recipient<\/span><\/span><\/span><\/b>\n <\/span>\n<\/span> ” means “the natural or legal person, public authority, service or other body receiving communication of personal data, whether or not it is a Third Party,” as defined by Art. 4, subsection 1, no. 9, of the GDPR.<\/span><\/span><\/span><\/p>\n

            “\n \n Dissemination<\/span><\/span><\/span><\/b>\n <\/span>\n<\/span> ” means “the giving of knowledge of personal data to unspecified persons, in any form, including by making them available or consulting them” (as defined in Article 2-ter, paragraph 4(b) of the Privacy Code).<\/span><\/span><\/span><\/p>\n

            “\n \n GDPR<\/span><\/span><\/span><\/b>\n <\/span>\n<\/span> “: the EU Regulation 2016\/679 “on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95\/46\/EC (General Data Protection Regulation).<\/span><\/span><\/span><\/p>\n

            “\n \n Interested<\/span><\/span><\/span><\/b>\n <\/span>\n<\/span> ” means “identified or identifiable natural person” as defined by Art. 4, subsection 1, no. 1, of the EU Regulation 2016\/679 (the so-called “GDPR”).<\/span><\/span><\/span><\/p>\n

            “\n \n Limitation<\/span><\/span><\/span><\/b>\n <\/span>\n<\/span> ” means “the marking of personal data stored with the aim of limiting their processing in the future,” as defined in Art. 4, subsection 1, no. 3, of the GDPR.<\/span><\/span><\/span><\/p>\n

            “\n \n Marketing<\/span><\/span><\/span><\/b>\n <\/span>\n<\/span> “: singularly or cumulatively, the purposes of sending advertising material, commercial communication, direct sales and carrying out market research.<\/span><\/span><\/span><\/p>\n

            “\n \n Applicable Legislation<\/span><\/span><\/span><\/b>\n <\/span>\n<\/span> ” means any provision, of whatever rank, belonging to Italian or European Union law, in any way applicable to the site and\/or services.<\/span><\/span><\/span><\/p>\n

            “\n \n Privacy Policy<\/span><\/span><\/span><\/b>\n <\/span>\n<\/span> “: the EU Regulation 2016\/679 (“GDPR”), the Legislative Decree. 196\/2003 as amended and\/or supplemented (“Privacy Code”), as well as the measures adopted by the Supervisory Authority in execution of the tasks established by the GDPR and the Privacy Code, and additional applicable legislation of any rank, including the opinions and guidelines developed by the Committee. <\/span><\/span><\/span><\/p>\n

            “\n \n Profiling<\/span><\/span><\/span><\/b>\n <\/span>\n<\/span> ” means “any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects of that natural person’s professional performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements,” as defined in Art. 4, subsection 1, no. 4, of the GDPR.<\/span><\/span><\/span><\/p>\n

            “\n \n Responsible<\/span><\/span><\/span><\/b>\n <\/span>\n<\/span> ” means “the natural or legal person, public authority, service or other body that processes personal data on behalf of the controller,” as defined by Art. 4, subsection 1, no. 8, of the GDPR.<\/span><\/span><\/span><\/p>\n

            “\n \n Services<\/span><\/span><\/span><\/b>\n <\/span>\n<\/span> “: the services provided by the Santagostino.<\/span><\/span><\/span><\/p>\n

            “\n \n Third<\/span><\/span><\/span><\/b>\n <\/span>\n<\/span> ” means “the natural or legal person, public authority, service or other body other than the data subject, the controller, the processor and persons authorized to process personal data under the direct authority of the controller or processor,” as defined by Art. 4, subsection 1, no. 10, of the GDPR.<\/span><\/span><\/span><\/p>\n

            “\n \n Holder<\/span><\/span><\/span><\/b>\n <\/span>\n<\/span> ” means “the natural or legal person, public authority, service or other body which, individually or jointly with others, determines the purposes and means of the processing of personal data,” as defined by Art. 4, subsection 1, no. 7, of the GDPR.<\/span><\/span><\/span><\/p>\n

            “\n \n Treatment<\/span><\/span><\/span><\/b>\n <\/span>\n<\/span> ” means “any operation or set of operations, whether or not involving automated processes, applied to personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, comparison or interconnection, restriction, erasure or destruction,” as defined by Art. 4, subsection 1, no. 2, of the GDPR.<\/span><\/span><\/span><\/p>\n

            “\n \n User<\/span><\/span><\/span><\/b>\n <\/span>\n<\/span> “: the person who uses the services of the Santagostino.<\/span><\/span><\/span><\/p>\n

            “\n \n WP29<\/span><\/span><\/span><\/b>\n <\/span>\n<\/span> “: the Working Group for the Protection of Individuals with Regard to the Processing of Personal Data, established under Art. 29 of Directive 95\/46\/EC, whose duties are set out in Art. 30 of Directive 95\/46\/EC and Art. 15 of Directive 2002\/58\/EC.<\/span><\/span><\/span><\/p>\n

            <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

            Privacy Notice Pursuant to Articles 13 and 14 of Reg. (EU) 2016\/679 Dear visitor , the Privacy legislation (in particular, the EU Regulation 2016\/679,the “General Data Protection Regulation. data” – known by the English acronym “GDPR “) requires us to provide you with the following information about the processing of your personal data\u00a0pursuant to Art. […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"elementor_header_footer","meta":{"_acf_changed":false,"give_campaign_id":0,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"class_list":["post-11691","page","type-page","status-publish","hentry"],"acf":[],"campaignId":"","_links":{"self":[{"href":"https:\/\/www.marthapalermo.it\/en\/wp-json\/wp\/v2\/pages\/11691","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.marthapalermo.it\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.marthapalermo.it\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.marthapalermo.it\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.marthapalermo.it\/en\/wp-json\/wp\/v2\/comments?post=11691"}],"version-history":[{"count":0,"href":"https:\/\/www.marthapalermo.it\/en\/wp-json\/wp\/v2\/pages\/11691\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.marthapalermo.it\/en\/wp-json\/wp\/v2\/media?parent=11691"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}