PRIVACY POLICY
This Privacy Policy describes the methods of processing personal data by J-CARE S.r.l. (hereinafter referred to as “J-CARE” or the “Data Controller”), in relation to the services offered in the healthcare, social healthcare, assistance, diagnostic, informational, and commercial fields. The processing of data is carried out in compliance with the current regulations on the protection of personal data.
DATA CONTROLLER
In accordance with Article 13 of EU Regulation No. 2016/679 (hereinafter "GDPR"), and in relation to personal data, the Data Controller is: J-CARE Srl, VAT No. IT11830790967, located at Piazza Cavour, 7, 20121 Milan (MI), registered with the Milan Business Register under No. 2627203, PEC j-care@legalmail.it, and authorised to provide healthcare assistance by means of Prot. No. 12204/24 of 19.01.24 from ATS MetroMilano AOO_ATSMI OFFICIAL REGISTER EXIT.
J-CARE recognises the importance of personal data and is committed to protecting that of its Users (hereinafter referred to as “Users” or “Data Subjects”). Therefore, it is dedicated to respecting and properly processing this data. J-CARE processes the personal data (hereinafter referred to as “Personal Data”) of the User when the User visits the Site and uses the services and functionalities available on the Site. The Privacy Policy has been drafted in accordance with the GDPR, Legislative Decree No. 196/2003 as amended by Legislative Decree No. 101/2018, as well as based on the guidelines of the supervisory authority - the Data Protection Authority - and also serves as information to Data Subjects pursuant to Article 13 of the GDPR and applicable national legislation (collectively referred to as “Privacy Legislation”). The Privacy Policy specifies:
- who the Data Controller is;
- who controls and manages the Personal Data collected and processed through the Site;
- what personal information is collected - for what purposes and in what ways the Personal Data is processed;
- the scope of communication to third parties and any potential transfer abroad;
- the ways in which the User can verify the processing of Personal Data concerning them and exercise the rights recognised by the Privacy Legislation.
This information is provided solely for the Site and for the activities carried out on the Site and the services provided by J-CARE, including through its own data processors, and not for other websites that may be consulted by the User via links and/or activities carried out by third parties. In the case of consulting other websites, it is recommended to review their respective privacy policies.
LEGAL BASIS FOR PROCESSING
The legal bases identified and selected for the processing of Personal Data are:
A. Regarding the response to your requests for contact, information, consultation with J-CARE, as well as the management and fulfilment of your orders in the e-commerce section, the legal bases for processing are represented by those referred to in Article 6, letters b) and f) of the GDPR;
B. Regarding the aforementioned contractual relationship, assuming, hypothetically, the sharing of information related to your health status, it also implies processing your data based on the legitimacy condition referred to in Article 9, letter h) of the GDPR;
C. Regarding the navigation of the Site and the use of technical-analytical-third party cookies, the legal bases are represented by Article 6 letters a) and f). In the first case, J-CARE is legitimised by your explicit consent, which can be freely given and revoked at any time directly on the Cookie policy at the following [link] for managing preferences; in the second case, it is based on the legitimate interest of the Data Controller.
PURPOSES AND METHODS OF PROCESSING
The purposes pursued by the processing are:
the provision of services, the establishment of pre-contractual negotiations with prospective client-users and/or for the establishment and management of contractual relationships as well as the management and fulfilment of Your orders in the e-commerce section;
management and organisation of healthcare or social systems and/or services aimed at diagnosis, assistance or therapy;
analysis of the use and navigation of the various sections of the Site, the Site's analytics and related performance, thus generic marketing;
anonymised analysis of preferences, habits, behaviours, interests inferred, by way of example, from online clicks on sections and touch points of the Site;
To send You personalised communications and carry out targeted promotional actions.
The processing of Your Personal Data for profiling purposes will be carried out by third parties, that is, set by a website different from that of J-CARE and on servers different from that of the Site, as independent data controllers and based on their privacy policies as well as on Your explicit consent to their use on the Site. This data processing tool relates the data collected during Your browsing of the sites through the use of third-party cookies if accepted, with the data collected. The interactions and information acquired through these tools are subject to the User's privacy settings related to each social network and are accessible exclusively by the managers of the platforms themselves. J-CARE will only have visibility of aggregated data related to visits to the Site. Regarding the enabling or disabling of the installation of third-party cookies on your internet browser, click here [link] to manage Your preferences and disable them at any time;
The data will be processed both manually and with the aid of electronic tools for:
- to respond to and manage user requests for information and/or support, to handle questions, communications, or user feedback;
- management and fulfilment of your orders in the e-commerce section;
- to provide the services requested through the Site, including administrative, accounting, and fraud prevention services and activities, including compliance with legal, regulatory, and community obligations (including anti-money laundering regulations) and for the exercise of rights in judicial proceedings.
Personal Data will be retained for a period not exceeding that necessary to achieve the purposes for which it was collected and, in any case, not exceeding the period provided for by applicable law.
Therefore, with regard to the Personal Data subject to consent given for the installation of third-party cookies and for general marketing, the retention periods are those established in the Cookie policy. In any case, the retention period in these instances will last until the consent is revoked, at any time, by the User or within twelve (12) months from the collection of the Data.
As for the pre-contractual, contractual, and administrative management of the provision of professional services and consultancy contact, the retention period will be ten (10) years.
TYPES OF DATA PROCESSED
The visit and consultation of the Site generally involve the collection and processing of the User's Personal Data limited to:
Common data:
- Name, surname and gender;
- Tax code, date of birth and place of birth;
- Contact details (address, phone number and email);
- Credit card number and/or bank account number;
- IP address;
Particular category data:
- Related to health status;
- Related to racial or ethnic origin;
The processing of Personal Data of users who visit and consult the Site concerns:
- The navigation data whose transmission is necessary for the functioning of the computer systems and the programmes required for the operation of the Site; but in association with other data, they allow for the identification of users. This category includes, for example, IP addresses (internet protocol) or the domain names of the computer used to visit the Site, as well as other parameters related to the operating system used by the User to connect to the Site.
The acquisition of browsing data occurs automatically and inevitably, and it may only be used to derive statistical information and aggregated data on the use of the Site and to verify its proper functioning.
Data provided voluntarily by individual users
Furthermore, J-CARE collects and processes Personal Data voluntarily provided by individual users, which consists of data collected through the sending of emails, interaction with the Site's features at the appropriate touch points, requests for information/services offered by the Site, and the completion of other specific forms. The Personal Data that J-CARE collects and processes includes first and last name, nickname, contact information such as: addresses, phone numbers, email, personal and related to business position, gender, and potentially, the sharing of information related to your health status, racial or ethnic origin, nationality.
NATURE OF DATA PROVISION
The provision of Personal Data is voluntary and refers to art.1 letters a) to c), art.2.1 letters a) to e) that precede and relate to the Personal Data referred to in art.3, which are necessary to allow J-CARE to respond to information requests, provide the services requested through the Site, and manage activities related to consultancy services. In the event of failure to provide Personal Data for the aforementioned purposes, J-CARE will not be able to respond to information requests, provide the services requested through the Site, or manage activities related to the delivery of professional services.
DATA COMMUNICATION
J-CARE is bound by confidentiality, therefore Personal Data will not be subject to general communication, and will only be accessible to J-CARE - Data Controller, but also to other parties and under certain conditions. There may indeed be communications for reasons related to the provision of services according to criteria of necessity.
Personal Data may be made accessible to professionals and self-employed collaborators, also organised in an associative form, third-party providers of professional and technical services, functional to the processing purposes indicated in art. 2.1 and who assist J-CARE in fiscal, social security, accounting and/or organisational matters, who will act as External Managers or Appointed Processors, as the case may be, provided that they adopt security and protection criteria for Personal Data in line with current regulations.
Personal Data may finally be communicated for administrative or judicial reasons to entities, authorities, public institutions, and legitimate recipients in accordance with the law in compliance with laws and regulations.
The complete and updated list of external data processors will be provided upon request to be made to J-CARE at the address privacy@j-care.it
Personal Data shall not, in any case, be subject to transfer or dissemination.
AUTOMATIC DATA COLLECTION MECHANISMS – COOKIES
The Site uses cookies and other technologies for reading and/or storing information on the User's device, as well as buttons and widgets from Facebook, LinkedIn, Instagram, and YouTube.
These services allow interactions with social networks and/or other external platforms directly on the Site.
In order to provide a detailed description of such technologies, please consult the extended Cookie Policy: [link], which is fully referenced here.
RIGHTS OF THE DATA SUBJECT
At any time, the User can exercise the rights recognised by Articles 15 – 22 of the GDPR, including, for example, the right to obtain confirmation of the existence or non-existence of Personal Data concerning them, to verify its content, origin, and accuracy, to request its integration, updating, rectification, deletion, transformation into anonymous form, and portability. The User may object in whole or in part, or request the limitation of data processing for legitimate reasons.
For any questions or requests regarding the processing of their Personal Data and to exercise the rights recognised by the GDPR, the User can contact J-CARE at the following address: privacy@j-care.it or to the Pec address J-CARE@legalmail.it
DATA PROTECTION OFFICER
Any kind of request for information or for the exercise of the rights granted to you, which we invite you to review in our privacy policy at the following [link], the one referred to here as fully cited and transcribed, the Data Controller can be contacted directly at the address privacy@j-care.it or the D.P.O. at the following address dpo@j-care.it
UPDATES AND CHANGES TO THE PRIVACY POLICY
The Privacy Policy is subject to changes and updates, and the version currently in effect is the one published on the Site on 15.06.2022. Changes to the Privacy Policy are communicated through publication on the Site. Please check the Privacy Policy periodically to be informed of any changes.