Information on the processing of personal data pursuant to article 13 of the EU Regulation 2016/679

Dear Dr,

in compliance with the obligations set out in the EU Regulation 2016/679 on the processing of personal data (hereinafter "GDPR"), Univet S.r.l. intends to provide you with information about the processing of their personal data.

1. Data Controller and Processor of the processing of personal data

The Company UNIVET S.R.L., with registered office in Bergamo, Via Giuseppe Verdi 11 (hereinafter also "UNIVET" or "Company") is the Data Controller of the processing of personal data supplied by you.

Dr Alessandro Ceriani is the Processor of the processing of your personal data.

UNIVET keeps an updated list of the people in charge of processing personal data at UNIVET’s headquarters.

2. Personal data processed

In order to provide the requested products or services, UNIVET may request and use some of your personal data. This personal data consists of the name, surname, e-mail, telephone number, address.

3. Purposes of processing personal data

The purposes of processing personal data are the following:

1) Operational, management and accounting requirements;

2) Company staff security;

3) Video monitoring;

4) Fulfillment of legal obligations;

5) Commercial purposes, advertising, marketing (for example, sending newsletters, advertising emails, activities carried out via hubspot).

4. Legal bases for the processing

For the purposes referred to in points nn. 1-4 of the preceding paragraph, the processing is lawful as it is supported:

- from the pursuit of the legitimate interest of UNIVET (Art. 6, co. 1, lett. f, GDPR);

- the need to fulfill a legal obligation to which the Data Controller is subject (Art. 6, co. 1, lett. c, GDPR);

The legal basis of the processing for the purpose referred to in point n. 5 of the preceding paragraph is the user’s consent (art. 6, co. 1, lett. a, GDPR).

5. Provision of personal data

The provision of personal data for the purposes indicated above in numbers 1-4 of the paragraph n. 3 is mandatory to fulfill the obligations established by law. A possible refusal would make it impossible for UNIVET to implement all the corporate safety measures required by law.

The provision of personal data for the purpose indicated above in point n. 5 of the paragraph n. 3 is optional and in any case it is always possible to deny the possibility of processing personal data already provided for that purpose.

6. Modalities of processing personal data

The processing of personal data may consist specifically in collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, communication by transmission, alignment or combination, restriction, erasure or destruction. UNIVET will process personal data both with the use of paper support and with the aid of electronic IT and telematics tools both with automated methods.

7. Communication of personal data

Personal data are accessible for the purposes indicated in paragraph n. 3 to:

a) Employees and collaborators of the Data Controller, in their capacity as assignees and / or internal Processor;

b) Third party companies or other entities that carry out outsourcing activities on behalf of the Data Controller (for example a marketing and advertising management and production company).

Your personal data will not be disseminated.

8. Data subjects' rights

Pursuant to articles 13, 15, 16, 17, 18, 20, 21 GDPR, the user has the right to:

a) obtain from UNIVET the confirmation that it is or is not underway the processing of personal data concerning him and, in this case, to obtain access to personal data and the following information: (i) the purposes of the processing; (ii) the categories of personal data in question; (iii) the recipients to whom the personal data have been or will be communicated, in particular if recipients of Third Countries or international organizations; iv) whenever it is possible, the retention period of the personal data provided or, if it is not possible, the criteria used to determine this period; (v) the existence of the right to request to UNIVET the rectification or cancellation of personal data or the limitation of the processing of personal data concerning him or to object to their processing; (vi) the right to lodge a complaint with the supervisory authority; (vii) if the data are not collected from the data subject, all information available on their origin; (viii) the existence of an automated decision-making process, including profiling;

b) obtain from UNIVET the correction of inaccurate personal data concerning him without undue delay and the integration of incomplete personal data;

c) obtain from UNIVET the cancellation of personal data concerning him without undue delay if one of the reasons indicated in art. 17 GDPR;

d) obtain from UNIVET the limitation of the processing when one of the hypotheses foreseen by the art. 18 GDPR;

e) receive, in a structured format, commonly used and readable by automatic devices, the personal data supplied to UNIVET and to transmit such data to another Data Controller without impediments by UNIVET and, if technically feasible, to obtain direct transmission of the data personal data from one Data Controller to another;

f) oppose at any time the processing of personal data concerning him pursuant to art. 6, co. 1, lett. f, GDPR;

g) withdraw the consent given in relation to the processing of personal data for marketing purposes at any time (point n. 5 of the paragraph n. 3).

9. The procedure for the exercise of the rights

At any time, the user can exercise his rights by sending:

- an e-mail to the following address: privacy@univet.it;

- a registered letter to the following address: Bergamo, Via Giuseppe Verdi 11.

10. Personal data retention

UNIVET will process the personal data provided by the user for the time necessary for the performance of the contract and for the fulfillment of its legal obligations. Furthermore, UNIVET will keep the data for as long as necessary to fulfill the obligations and the exercise of rights related to the existing user relationship, the need to defend and control fraud.

At any time the user can request the deletion of his data and / or the interruption of their processing for marketing purposes.