Information for patients

Reserved area

Privacy policy statement in accordance with art. 13 of Regulation (EU) 2016/679 on the processing of personal data

HERNIAMESH s.r.l., with headquarters at Via Fratelli Meliga 1/C, 10034 Chivasso (TO), Italy, in the person of their pro tempore legal representative, in their role as Data Controller, hereby inform, pursuant to art. 13 and ff. of Reg. (EU) 679/2016 (known as GDPR), that the personal data, including special data, provided voluntarily, will be processed in accordance with the principles of correctness, lawfulness, transparency and protection of confidentiality and rights, in full compliance with the personal data protection regulations in force.

Privacy Office can be contacted, for the purpose of exercising the rights as set forth in art. 15 of Reg. (EU) 2016/679, at the following email address: privacy@herniamesh.it.

A. Purposes of the processing and legal basis

In compliance with the provisions of art. 6 comma 1 letter b) GDPR, the purpose of the data proces-sing is to proceed with the contractual relationship established with the Controller.

It should be noted that the processing will be carried out for the following purposes:

  • Administrative purpose, for the execution of a contract or of precontractual activities and for the access to the reserved area, for a period of time not exceeding the achievement of the contractual purposes and of the retention obligations provided for by law;
  • Human Resource purpose, for the execution of job vacancy activities and for a period of time not exceeding the achievement of the contractual purposes and of the retention obligations provided for by law;

B. Processing methods and duration

The personal data provided will be processed by the Data Controller in outsourcing also (contracting out the management of the processing), in an automated manner or on paper media, through the organisation and processing of the data, correlated to the purposes envisaged in point A and in any case assisted by guarantees of security and confidentiality of the data, in compliance with the appro-priate technical and organisational measures pursuant to art. 32 of Reg. (EU) 2016/679.

The personal data acquired for the aforementioned purposes shall be processed for the time required to pursue the purposes envisaged in point A. When this period has elapsed the data shall be deleted and/or destroyed or they may possibly be filed in anonymous form for mere statistical purposes, as provided for by the regulations in force.

C. Third parties who might become aware of the data

The personal data provided will be processed by authorized organization internal employee; they may be communicated to public, institutional or professional subjects authorised by law to request their acquisition as well as, solely for the purposes envisaged in point A.

D. Transfer of the data abroad

The personal data acquired shall be processed by the Data Controler in the European Union.

Data transfers to bodies in states outside the European Union (third countries) will take place

  • if you have given your consent, and/or
  • with appropriate safeguards implemented to provide an adequate level of data protection such as standard contractual clauses approved by the European Commission or adequacy decision by the European Commission.

E. Cookies

The automatic data collection is performed also by “cookies”.
More information on “Coolie Policy”.

F. Rights of the data subjects

You may exercise your rights towards the Data Controller at any time.

In compliance with articles 15 and ff. of Reg. (EU) 2016/679 you have the right:

  1. to obtain confirmation of the existence or not of personal data that concerns you, even if not yet recorded, and their communication in intelligible form;
  2. to obtain indication of the origin of the personal data, of the purposes and methods of processing, of the logic applied in the event of processing carried out with the aid of electronic means, of the identifying details of the Data Controller, of the Data Processers and of the designated representative pursuant to article 5, comma 2, of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them as designated representative in Italy, processors or persons tasked with processing;
  3. to obtain the updating, correction or, when interested, integration of the data;
  4. to obtain the deletion of the data in the cases provided for by art. 17 Reg. (EU) 2016/679, transformation into anonymous form or blocking of the data processed in violation of the law, including those that do not need to be retained in relation to the purposes for which the data were collected or subsequently processed;
  5. to obtain the limitation of the processing in the cases provided for by art. 18 Reg. (EU) 2016/679;
  6. to receive in structured form, of common use and readable by automatic device, the personal data of reference and the right to transmit them, by HERNIAMESH S.r.l, to another Data Controller;
  7. to oppose, entirely or in part for legitimate reasons, the processing of the personal data that concerns you, albeit pertinent to the purpose of the collection;
  8. right to data portability;
  9. to lodge a complaint with the Personal Data Protection Authority (Garante) (garanteprivacy.it).

The rights listed above may be exercised at any time by sending an email request to: privacy@herniamesh.it.