INFORMATION ON THE PROCESSING OF PERSONAL DATA OF THE APPLICATION “AMICOMED”
(art. 13 EU Reg. 679/2016)
The purpose of this Information Notice is therefore to explain to you, in the most transparent and simple way possible, how Newel Health Srl will process your personal data through the AMICOMED application
WHO PROCESSES MY DATA?
The Owner of the processing of your personal data is Newel Health, with registered office in Largo Abate Conforti – 84121 Salerno. You may contact the Data Controller:
- via e-mail at the address, support@amicomed.com
- via PEC at administration@pec.newel.health.
HOW CAN I CONTACT THE DATA PROTECTION OFFICER?
The Data Protection Officer (DPO) oversees the proper handling of your personal data to ensure overall compliance with privacy regulations. You may contact the DPO by e-mail by writing to: dpo@newel.health.
WHAT DATA OF MINE IS PROCESSED?
For registration to the Application, the Controller will process your personal and contact data (first and last name, address, social security number, telephone number, email address.
For the conclusion of the purchase contract, the Owner will process your personal and contact data as well as the data relating to your credit card or means of payment chosen by you.
For the use of the Services provided by the Application, the Controller will process special data related to your blood pressure and all additional information related to your health status and lifestyle.
FOR WHAT PURPOSES IS MY DATA PROCESSED AND WHY IS THE PROCESSING LEGITIMATE?
- Registration to the Application.
Your data is processed in order to allow you to register, create your personal account, and take advantage of the services offered by the Application.
We can process your data if you have given us your explicit consent, which you can always revoke by contacting the Data Controller at the contact details specified above.
- Conclusion of the purchase contract
Your data is processed in order to allow you to finalize the purchase contract for the services provided by the Application.
We can process your data if you have given us your explicit consent, which you can always revoke by contacting the Data Controller at the contact details specified above.
- Use of services
Your special health-related data are processed in order to allow you to take advantage of the blood pressure and blood pressure wellness assessment services and, if necessary, to request the development of a personalized blood pressure reduction program.
You will also have the opportunity to interface the data entered into AMICOMED with the data entered into the Health App (Apple) or Google Fit (Android) on your device by providing explicit consent to such transfer.
We can process your data if you have given us your explicit consent, which you can always revoke by contacting the Data Controller at the contact details specified above.
HOW IS MY DATA COLLECTED?
Your data is entered by you into the Application by filling out forms or may be automatically sent by blood pressure measurement devices or downloaded from the Health App (Apple) or Google Fit (Android) on your device assuming you have provided consent for interfacing.
HOW DOES THE APPLICATION WORK?
The AMICOMED application is a tool to support the User in knowing and updating his or her pressor health status, provides a special electronic and personal pressure diary of all blood pressure and heart rate values and related assessments, provides an assessment of the state of pressor wellbeing, and elaborates, if required, a personalized program for pressure reduction based on lifestyle actions. To do this, the application uses an algorithm that can profile the patient, process the information entered, and return judgments based on the pressure values entered.
TO WHOM ARE MY DATA DISCLOSED?
Personal references that may make you identifiable or recognizable are known only to the Data Controller. In order to carry out some activities, the Owner turns to individuals outside its organization for support and assistance. For this reason, some of your data may be disclosed to consultants, companies and entities that process the data as Data Controllers or Processors under Article 28 of the GDPR.
Specifically, your data will be processed by the following entity:
- Service providers and consultants (cloud providers, IT services, etc.).
This list is not exhaustive, but you may request the full list of recipients of your personal data by contacting the Controller at the contact details above.
WILL MY DATA BE DISSEMINATED?
Your personal data will not be disseminated, nor will it be published.
IS MY DATA TRANSFERRED OUTSIDE THE EUROPEAN UNION?
Your data will not be transferred by the Data Controller to countries outside the European Union. The data storage system of Newel Health srl, as well as the services and back-end data of the AMICOMED application are based on servers hosted by third parties located in the territory of the European Union. In the event that your data is transferred outside the European Union, this will be done in one of the ways permitted by applicable law, such as your consent, the adoption of Standard Clauses approved by the European Commission, or the adoption of other safeguards that ensure an adequate level of protection of personal data. You may obtain more information by contacting the Controller at the contact details above.
HOW LONG IS MY DATA KEPT?
The Controller will retain your personal data as long as your account within the Application remains active. As for the data necessary for the conclusion of the purchase contract, the same will be kept for the time required by law.
WHAT ARE MY RIGHTS?
The EU Regulation 2016/679 grants you a number of rights, and in particular:
- Right of access to data, which consists in the right to obtain from the Data Controller confirmation as to whether or not personal data concerning you are being processed and, if so, to obtain: access to your data, copies thereof, information regarding the processing;
- Right to rectification of data, i.e., the right to obtain from the Controller, without undue delay, the rectification of inaccurate personal data concerning you, as well as the integration of incomplete personal data, including by providing a supplementary statement;
- Right to data deletion, i.e., the right to obtain from the Data Controller, without undue delay, the deletion of personal data concerning you, if one of the following reasons exists:
- the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
- You object to the processing and there is no overriding legitimate reason to proceed with the processing anyway;
- the data are or have been processed unlawfully;
- the data must be deleted to comply with a legal obligation to which the Data Controller is subject;
- Right to restrict processing, i.e., the right to obtain from the Data Controller the restriction of processing when one of the following occurs:
- You dispute the accuracy of the personal data, the Controller will restrict the processing for the period necessary to carry out the necessary verifications;
- the processing is unlawful and You object to the deletion of the personal data and instead request that its use be restricted;
- although the Controller no longer needs the data for processing purposes, the data are necessary for you to establish, exercise or defend a right in court;
- You have objected to the processing pending verification as to whether the Data Controller’s legitimate grounds prevail over yours.
- Right to data portability, which consists of the right to receive from the Data Controller, in a structured, commonly used and machine-readable format, personal data concerning you that are processed by the Data Controller, and to transmit such data to another data controller where the processing is based on consent or contract and is carried out by automated means.
- Right to object to processing, which consists of the right to object to processing carried out for the performance of a task carried out in the public interest or in connection with the exercise of official authority or on the basis of the legitimate interest of the data controller or a third party, as well as the right to object to the processing of personal data concerning you that is carried out for direct marketing purposes, including profiling insofar as it is related to such direct marketing.
- Right not to be subjected to a decision based solely on automated processing of your personal data, including profiling, that produces legal effects concerning you or significantly and similarly affects you.
- Right not to be subjected to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or that significantly and similarly affects your person.
HOW CAN I EXERCISE MY RIGHTS?
You can exercise your rights by contacting the Data Controller at the contact details above. The Controller will respond to you as soon as possible and, in any case, no later than 30 days after your request.
HOW CAN I FILE A COMPLAINT?
If you wish to file a complaint regarding the manner in which your personal data is processed by the Controller or regarding the handling of a complaint you have filed, you have the right to file a complaint directly with the Supervisory Authority in the manner set forth at www.garanteprivacy.it.
UPDATES
The date of last update of this policy was on 26/01/2023. The Holder will notify you promptly if the text undergoes any updates or revisions.