Information to data subjects
In accordance with the applicable legislation on the protection of personal data (including EU Regulation 2016/679 and the Italian Privacy Code, as amended by Italian Legislative Decree 101/2018), the following information is provided regarding the processing of personal data carried out by Theras Lifetech S.r.l. within its business operations (including the data collected through the filling in of the “contacts” form on the www.theras-group.com website), and during personnel recruitment activities (with reference to the data provided through the filling in of the forms in the “work with us” section of the aforementioned website).
The information to data subjects and privacy policy must be carefully read before forwarding any kind of information and/or personal data by filling in the above-mentioned forms.
The information to data subjects and the privacy policy are addressed to the person or persons to whom the personal data belong, hereinafter referred to also as “data subject(s)”.
Data Controller
The data controller is Theras Lifetech S.r.l. unipersonale (from now on also just Theras Lifetech), with registered office in Salsomaggiore Terme (PR), via Parma 112, having the following contacts:
Phone +39 0524 587 874
Fax +39 0524 587834
E-mail address privacy@theras-group.com
In order to ensure the utmost clarity and transparency towards data subjects, it must be pointed out that, in certain cases and in relation to certain types of processing, Theras Lifetech may act as the personal data processor on behalf of third parties (e.g. Local National Health System Agencies), which the data subject will have to contact in order to obtain information concerning the processing of his/her personal data.
Types of personal data processed
-
Personal data processed within Theras Lifetech operations
In carrying out its business operations, Theras Lifetech may process personal data that identity data subjects and their contact details, which might also be supplied through interaction with the www.theras-group.com website (and, in particular, supplied through the filling in of the “contacts” form available at the link www.theras-group.com/contatti/), in addition to data concerning any of its own medical devices and/or products that might be requested, purchased and/or for which assistance might be requested, as well as other personal data that may be supplied to Theras Lifetech (also through telephone conversations with the latter) within its business operations.
-
Personal data on personnel selection via the www.theras-group.com website
In the “work with us” section of the www.theras-group.com website, users can answer advertisements for job vacancies and send open applications by filling in the appropriate form (available at this link www.theras-group.com/careers/) in which they can enter their personal data, including identifiers, contact details and any data about the data subject’s professional qualifications.
The “work with us” section also allows a CV and/or accompanying letter to be attached, so Theras Lifetech also processes the personal data contained in these files, which could contain special categories of personal data.
Processing purposes
-
Personal data processed within Theras Lifetech operations
In carrying out its business operations, Theras Lifetech processes the personal data collected for purposes associated with the services requested, or linked to the manufacture, distribution and sale of its own medical devices and/or, in any case, its own products.
Specifically, personal data are processed for the following purposes:
- to respond to requests for information, quotations or any other request regarding Theras Lifetech and/or any of its products, received also through the aforementioned “contacts” form or following telephonic contact with Theras Lifetech;
- to supply its products and send information regarding them at the request of data subjects;
- to provide After-Sales care;
- to fulfil contractual obligations, and, more in general, to handle relations with its customers and/or suppliers and providers;
- to manage any disputes and/or to fulfil the obligations laid down by the law, including those regarding accounting and tax matters;
- to safeguard its own rights, also through the storage of certain personal data. Among the above-mentioned rights, there is also the need to keep track of the corporate history of Theras Lifetech and of its relations with customers, suppliers, providers and/or associates.
The provision of the personal data requested for the above-mentioned purposes, and the granting of the consent for the required processing (when necessary) is voluntary and up to the data subject to decide, it being understood that refusal to provide the data could make it impossible for Theras Lifetech to supply the services requested.
-
Personal data on personnel selection via the www.theras-group.com website
The personal data provided when responding to advertisements for vacancies or sending open applications through the “work with us” section are used by Theras Lifetech to examine the profiles of the candidates from a personnel recruitment perspective, as well as to send a reply should such profiles prove to be of interest to Theras Lifetech.
The provision of personal data in order to respond to advertisements for vacancies or send open applications is absolutely voluntary, it being understood that these data are indispensable for Theras Lifetech to be able to evaluate the profiles of potential candidates.
Legal basis of processing
-
Personal data processed within Theras Lifetech operations
Theras Lifetech processes personal data within its own business operations:
- in order to fulfil contracts to which the data subject is a party or for the performance of pre-contractual measures adopted at the request of the data subject, as laid down in Article 6(1)(b) of Regulation (EU) 2016/679;
- on the basis of the consent granted by the data subject to the processing of his/her own data, which can be expressed also by ticking the box “I have read the privacy policy and authorise the processing of my data to respond to my request” displayed underneath the “contacts” form available at the address www.theras-group.com/contatti/, as provided for by Article 6(1)(a) of Regulation (EU) (UE) 2016/679;
- in order to fulfil any legal obligation to which Theras Lifetech is subject, as provided for by Article 6(1)(c) of Regulation (EU) 2016/679;
- on the basis of its legitimate interest in conducting business activities, as well as for the protection of its own rights, including the handling of disputes, as provided for by Article 6(1)(f) of Regulation (EU) 2016/679.
-
Personal data on personnel selection via the www.theras-group.com website
Theras Lifetech processes the personal data supplied through the “work with us” section::
- In case of data provided for profile evaluation purpose, in order to fulfil contracts to which the data subject is a party or for the performance of pre-contractual measures adopted at the request of the data subject, as laid down in Article 6(1)(b) of Regulation (EU) 2016/679
- in the event of replies to advertisements for vacancies regarding “protected categories”, on the basis of the consent granted when the candidate sends his/her application, which may be expressed also by ticking the box next to the words “I have read the privacy policy and authorise the processing of my personal data to reply to the advertisement for the vacancy regarding protected categories” shown underneath the “work with us” form, which can be accessed at the following link www.theras-group.com/careers/, as provided for by Article 6(1)(a) of Regulation (EU) 2016/679;
- on the basis of its own legitimate interest in conducting activities designed to protect its own rights, including the handling of disputes, as provided for by Article 6(1)(f) of Regulation (EU) 2016/679.
Processing methods
Theras Lifetech processes personal data with and without the aid of electronic means, possibly through dedicated electronic platforms, within the limits of the purposes set out and in compliance with applicable legislation, adopting appropriate measures to maintain the confidentiality and secrecy of the personal data.
The personal data can be provided by the data subjects, interacting with the www.theras-group.com website, acquired through Theras Lifetech sales network, supplied during events, trade fairs and exhibitions in which Theras Lifetech takes part and/or organised by Theras Lifetech, acquired by the After-Sales Customer Care service or by Theras Lifetech’s business partners, also through telephone contacts with the data subjects.
Theras Lifetech will everything possible to maintain the personal data updated and to correct, where necessary, any already acquired data.
Communication of personal data
The personal data can be accessed by the personnel members authorised by Theras Lifetech, including sales personnel, any human resources consultants, parties who, because of their role, have access to the company’s IT resources, including the www.theras-group.com website, Theras Lifetech’s business and the company that runs the After-Sales Care call center, in addition to any parties Theras Lifetech cooperates in general with, within its business operations.
Theras Lifetech only supplies the above parties with the personal data required to carry out the activities agreed, and said parties act as authorised data processors and/or persons in charge of data processing.
Moreover, Theras Lifetech reserves the right to communicate personal data to third parties, including its lawyers and/or consultants for the following reasons: a) to proceed with pre-contractual activities; b) to ensure compliance with the law and/or fulfil the demands of authorities and public bodies for institutional purposes; c) to safeguard the rights of Theras Lifetech in court and/or before the competent authorities.
Personal data storage period
-
Personal data processed within Theras Lifetech operations
The personal data processed within Theras Lifetech’s business operations are stored for the time required to fulfil the specific purposes of the processing, as described above.
Any personal data processed for the fulfilment of contracts are kept for 10 years from the contract signing, with the possibility to extend this period should their storage be necessary to ensure protection of the rights of Theras Lifetech, e.g. for managing disputes and preventing abuses, also for the purpose of ensuring efficient management of Theras Lifetech’s resources. The personal data processed within the management and keeping of corporate accounts are stored for the time required for the fulfilment of tax obligations and for the time accounting records are required to be kept.
-
Personal data on personnel selection via the www.theras-group.com website
The personal data supplied through the “work with us” section are kept for the time required to evaluate the application sent, but in any case not longer than 24 months from the date on which the application was sent.
Rights of data subjects
Data subjects can contact Theras Lifetech at the above-mentioned addresses/numbers to receive the list of data processors (i.e. the Theras Lifetech service providers that carry out the processing of the personal data).
The data subjects have all the rights provided for by Articles 15 to 22 of Regulation (EU) 2016/679, which can be exercised at any moment.
In particular, data subjects have the right to:
- obtain confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, check their contents, origin and accuracy;
- obtain that their personal data be supplemented, updated, rectified, erased or anonymized, as restrictions to their processing;
- object, for reasons connected with a specific situation, to the processing of their personal data on the basis of a legitimate interest of Theras Lifetech, provided that Theras Lifetech does not have overriding grounds for proceeding with the processing despite the objection (e.g. the need to protect its rights in court);
- lodge a complaint with the Data Protection Authorities (in Italy, “Garante per la protezione dei dati personali”).
Furthermore, in accordance with Article 7(3), of Regulation (EU) 2016/679, we inform you that you are entitled to exercise, at any time whatsoever, your right to withdraw your consent, without affecting the lawfulness of the processing, based on the consent provided, carried out before withdrawal.
Latest update: June 13, 2023