PRIVACY NOTICE FOR PERSONAL DATA PROCESSING
Dedicated to pregnant women
Introduction
This privacy notice describes the characteristics of the processing carried out by Fondazione ANDI E.T.S. on your personal data within the "Salute Ora" Project and informs you of the rights that the regulations guarantee you.
Personal data
What personal data do we collect?
Fondazione ANDI ETS collects the following data:
- Identification and contact data;
- Data related to ISEE and related indicators;
- Data related to your pregnancy condition;
- Data related to your medical history;
- Data related to your salute orale;
- Data related to your oral hygiene prevention and care habits.
For what purposes do we use your personal data?
We process personal data for the following purposes:
- To evaluate the requirements for participation in the "Salute Ora" project (the legitimacy of the processing is based on the execution of regulatory obligations and on article 9, par. 2 letter g, namely for the pursuit of public interests);
- To proceed with the payment of the dentist's compensation (the legitimacy of the processing is based on the execution of regulatory obligations);
- To collect data related to the medical history and services performed by the dentist to verify the correct implementation of the project and to anonymize the data so that they can then be used for study and research purposes (the legitimacy of the processing is based on article 9, par. 2 letter g, namely for the pursuit of public interests).
How does Fondazione ANDI ETS process your personal data and for how long does it retain them?
Your personal data are processed both in paper and electronic format (servers, cloud databases, application software, etc.). Fondazione ANDI E.T.S. retains your data in personal form only for the time necessary to achieve the purposes for which they were collected and for the times established based on criteria dictated by sector regulations. After the deadline, data stored on paper support are physically destroyed, data contained on digital support are deleted with computer procedures, unless there are specific legal obligations that require their further retention. Specific retention times can be requested at any time from the Data Controller.
To whom do we communicate your personal data?
Your personal data may be accessed by employees and collaborators who need it to carry out the activities provided for by the Project in which you are participating. In particular:
- personnel assigned to administrative services;
- personnel appointed as Data Controller or data processor, within the limits of the assigned functions (including the company ANDI Lab srl).
The employees and collaborators of Fondazione ANDI E.T.S. are informed about the importance of protecting the confidentiality of personal data, about the need to maintain maximum confidentiality in the processing of personal data, about the obligations to use the available physical and IT security measures, about the responsibilities regarding personal data protection. Some of your personal data may be communicated to external subjects for the implementation of the "Salute Ora" project. External suppliers and consultants are bound, through appropriate contractual clauses, to respect the specific instructions given by Fondazione ANDI E.T.S. as well as the current regulations on personal data protection. Furthermore, your personal data may be communicated to Authorities, Bodies and Institutions when such communication takes place in execution of a regulatory obligation.
What are your rights as a data subject and how can you exercise them?
The European Regulation on personal data protection (2016/679) guarantees you, as a data subject, specific rights, in particular: the right of access to your personal data (art. 15), the right of rectification (art. 16), the right of erasure (right to be forgotten) (art. 17), the right to restriction of processing (art. 18), the right to data portability (art. 20), the right to object (art. 21), the right to object to a decision based solely on automated processing (art. 22), the right to withdraw consent given, the right to lodge a complaint with the Data Protection Authority if you believe that the processing of your data is contrary to current regulations.
How can you contact us?
This privacy notice aims to inform you about what personal data are collected by Fondazione ANDI E.T.S. and how they are processed. If you need any kind of clarification, or if you wish to exercise the rights set out above, you can contact us at the following addresses:
Fondazione ANDI E.T.S. with registered office in Rome, Lungotevere Sanzio 9; email address: dpo@fondazioneandi.org
The Data Controller has designated, pursuant to art. 37 of the GDPR, the Data Protection Officer, whose contact details are: dpo@fondazioneandi.org
