Privacy policy

2)        Processing methods

Your personal data will be processed in written form and/or on magnetic, electronic or telematic media; Providing data is optional but failure to provide it may make it impossible to satisfy contractual obligations and/or requests from interested parties.

3)    Recipients of personal data

Without prejudice to the communications and dissemination carried out in compliance with legal obligations, also for the purposes of credit protection and better management of our rights relating to the individual commercial relationship, exclusively for the purposes related to contractual needs and/or the satisfaction of your requests, in addition to Chinesport staff, the data may be communicated to:

- our network of retailers

- our partners specialized in providing after-sales assistance

- suppliers of devices that can be customized on the patient

- marketing agencies

- credit institutions and insurance companies

- commercial information and debt collection companies

- professionals and consultants

- companies operating in the transport sector

- other External Data Processors pursuant to art. 28 GDPR

4)    Data storage

The data will be stored for the periods indicated in the following table:

 5)      Data Transfer

The Data will be processed within the European Union. In the event that Your Data is transferred outside the European Union, the Data Controller assesses the impact of data transfers and adopts, if applicable, the most appropriate guarantees (for example, adequacy decisions or standard contractual clauses).

Exercise of the Rights of the interested party

The provision of personal data is optional but necessary to fulfill the contractual relationship or to satisfy a pre-contractual request with Chinesport Spa, and therefore, any refusal to provide them in whole or in part gives rise to the impossibility for Chinesport Spa to follow up on the contractual relationship.

With regard to the same data, natural persons may exercise the rights provided for in Chapter III articles. from 12 to 23 of the European Regulation 679/2016, which we summarize below:

I. The interested party has the right to obtain from the Data Controller confirmation as to whether personal data concerning him or her are being processed, and, where that is the case, access to the personal data and receive the following information:

a) the purposes of the processing;

b) the categories of personal data concerned;

c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;

d) where possible, the envisaged period for which the personal data will be stored, or, if that is not possible, the criteria used to determine that period;

e) the existence of the right to request from the Data Controller rectification or erasure of personal data or restriction of processing or to object to processing;

f) the right to lodge a complaint with a supervisory authority;

II. The Data Controller shall provide, upon request of the interested party, a copy of the personal data undergoing processing. Where the data subject makes the request by electronic means, and unless otherwise requested by the data subject, the information shall be provided in a commonly used electronic format.

III. The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

IV. The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay where:

a) the personal data are no longer necessary in relation to the purposes for which they were collected

b) the personal data have been unlawfully processed;

c) the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;

Point IV does not apply to the extent that processing is necessary: ​​for the establishment, exercise or defense of a right in court.

V. If the legal basis of the processing is based on consent, the interested party may withdraw consent at any time, without prejudice to the lawfulness of the processing based on the consent given before the withdrawal.

The rights listed above may be exercised by writing to the contact details indicated in the point "Data Controller".