When you visit egosan-inco.com, should you decide to use the services offered, we will collect data which is recognised by the GDPR as personal, in particular the e-mail address of the visitor. These data will be used in accordance with current legislation on the protection of personal data and as set out in the policy below.
This policy is intended solely for the website www.egosan-inco.com; for other sites or services accessible from the Egosan pages, please refer to the specific privacy policies.
For further information on the navigation or cookies used, please refer to the Legal Notes.
The data controller is Santex SPA, with registered office in via San Giovanni sul Muro 1, Milan; e-mail email@example.com
Purpose and Legal basis of the processing
The visitor’s e-mail address can be collected at two different times during navigation:
a) To subscribe to the newsletter service: the data collected will be used to send promotional e-mails about the products and activities of the company;
b) To receive promotional e-mails customised according to the outcome of the anonymous questionnaire on incontinence: depending on the answers provided, visitors will be divided into clusters according to the incontinence profile resulting from the questionnaire and, if they wish, they will receive e-mails concerning the products best suited to the particular situation.
Both processing purposes are based on the data subject’s consent, as set out in Art. 6 c.1 letter a) GDPR.
Processing methods and recipients
The data will be processed by duly trained Santex personnel, in compliance with their confidentiality.
The data will be communicated to subjects outside the company, qualified as autonomous Data Controllers or as Data Processors, where required for implementing the envisaged activities, e.g. providers of IT services for sending newsletters.
The data will be kept and processed until revocation of the processing consent.
Right of the data subject
Data subjects are entitled to the rights set out in Articles 15 to 20 of the GDPR. By way of example, each data subject may:
a) obtain confirmation as to whether or not data related to him or her are being processed;
b) if processing is in progress, obtain access to personal data and information relating to the processing and request a copy of his/her personal data;
c) obtain the rectification of inaccurate personal data and the integration of incomplete personal data;
d) obtain, if one of the conditions provided for by art. 17 of the GDPR should apply, the erasure of personal data concerning him/her;
e) obtain, in the cases provided for by art. 18 of the GDPR, the limitation of the processing;
f) receive personal data concerning him/her in a structured format, commonly used and readable by an automatic device and request their transmission to another controller, if technically feasible.
Right to withdraw consent
In the event that consent should be required for processing personal data, every data subject may also, at any time, revoke the consent already given, without prejudice to the lawfulness of the processing based on the consent given before revocation. The consent can be revoked by writing an e-mail to firstname.lastname@example.org.
Right to lodge a complaint with the italian data protection authority
In addition, any data subject may lodge a complaint with the Italian Data Protection Authority in the event that he/she believes that his/her rights under the GDPR have been violated, in the manner indicated on the website of the Authority, accessible at the address: www.garanteprivacy.it.