GENERAL DISCLOSURE

Privacy Policy – Disclosure – Articles 13 and 14 of EU Regulation 2016/679

1. Controller of data processing

OIC S.r.l., headquartered in Florence, Viale della Giovine Italia 17, herein after “OIC”, in the person of the pro- tempore legal representative, domiciled at the company headquarter, is the Controller, pursuant to art. 26 of the GDPR, for processing of your personal data, and inform you, herebelow, regarding the method, purpose and scope of communication and dissemination of your personal data and your rights, in conformity to EU Regulation 2016/679 and to the applicable norms regarding protection of personal data.

The Controller can be contacted at the above addresses or by sending an e-mail to privacy@oic.it

2. Type of data, Purpose and method of data processing

With reference to the navigation experience of this web site, portal and/or platform (herein after “site”), OIC processes the following data:

Navigation data

During the course of their normal operations and for the duration of the connection, information systems and software procedures responsible for the operation of this site acquire some data communication of which is implicit in the use of communication protocols on Internet.

This information is not collected for the purpose of associating it to the users; however, due to their very nature, could through processing and association with data held by the Controller or third parties allow identification of the users. These data are deleted a few hours after processing.

This category is comprised of IP addresses or names in the computer domain used by the users who connect to this site, the addresses in the Uniform Resource Identifier, the requested resources, the time of the request, the method used when submitting a request to the server, the size of the file obtained in answer, the numeric code indicating the status of the answer provided by the server (success, error, etc) and other parameters pertaining to the operating system and to the computer environment of the user.

These data may be used by the Controller for the sole purpose of obtaining anonymous statistical information regarding the use of the site in order to identify pages preferred by the users and in order to provide increasingly adequate contents and to verify proper operation. The data could be used to ascertain responsibility in case of hypothetical computer-related crimes which damage the site.

Cookies

To improve the navigation experience, this site uses cookies and/or markers which technically are information packets sent by a web server (in this case by this site) to the user’s browser or are memorized by the latter on their own devices and automatically sent back to the server during each subsequent access to the site. In order to learn about the types and purposes of the cookies used by the site and to show one’s own preference regarding the use of the cookies, please consult the Cookie policy published on the home page of this site.

Personal data voluntarily provided by site users/visitors

The personal data provided by you through this site, necessary to access certain services, will be processed by the Controller for the sole purpose of providing said services and will be kept for the amount of time required for their execution and will be deleted if it is no longer necessary to fulfil contractual or legal obligations and, therefore, should it be necessary, also for the purpose of managing possible disputes and complaints. In conformity to art. 9 of the GDPR particular categories of data are not required for navigation and for the implementation of services, with the exception of what you may indicate in regards to any potential food preferences or intolerances in the registration form on the website which will be processed with the sole scope of customizing the requested service.

During the browsing and interaction with the site you may find links or hyperlinks redirecting to exhibitors and third parties (which will be Autonomous Controllers) stand and/or Symposia. By clicking on these links you may be requested to insert your e-mail or other personal data. If you consent to give your personal data, these will be processed by the Autonomous Controllers for their own purpose, or dissemination and promotion of information material relating to activities and services that may be of any related interest.

Once you click on the links as above, these may redirect outside the site and the Controller will not be responsible for your Navigation Data and of any other consequent consent you will give to exhibitors/third parties.

The data will not be disseminated but could be communicated, if necessary for the provision of the service or to carry out the activities, to Societies that perform tasks of a technical or organizational nature necessary to provide the requested services, as specified in the specific disclosures for the single services/events.

Following the required registration for the requested service, should you want to request/use other services or other activities, you can use the credentials (user name/mail/password) already used for the first time registration.

If necessary you will be asked to provide additional data required for the provision of more requested services.

Data conferment is necessary to provide the services of this site. Should it be necessary to obtain proper consent for provision of the service, in conformity to the law and to the GDPR, this will be requested by a specific and suitable disclosure.

Your data will be processed with the support of computer and electronic methods and is protected by means of adequate security measures which are suitable to guarantee confidentiality and the dignity of those involved in processing.

In particular, the above Controller of data processing has adopted and adopts organizational measures (assignment of roles and responsibility for implementing the activity and carrying out controls) and procedural and technical measures (firewall, antivirus and other advanced technologies) which are appropriate to protect your data against loss, theft and use, dissemination or unauthorized modification.

OIC processes the above mentioned navigation data (anonymous) for the purpose of monitoring the technical operation and the performance of the site, to better understand how to improve the services and make them evolve. These data are necessary to guarantee a successful navigation experience.

These data are used for the sole purpose of obtaining anonymous statistical information regarding the use of the site and to verify its proper operation, as best explained in the Cookie Policy published on the home page of this site.

Should the Controller needs to communicate your personal data to third parties (for example, regarding the services for which you are registered), they will proceed as autonomous Controllers or will be nominated as Processors of processing.

Furthermore, your data could be communicated to subjects, institutions or authorities if such data communication is required by law.

3. Rights

You can access all the information that concerns you at any time and can request updates, changes and integration as well as deletion, transformation into an anonymous form or request that it be blocked.

You can oppose processing in full or partly; should opposition be expressed provision of the service will become impossible.

In order to exercise these and other rights as specified under articles 15-22 of the GDPR you can write to the Controller at the above addresses or send an email to privacy@oic.it

You have the right to oppose processing of your data as well as presenting a complaint to the Authority for the protection of personal data according to Art. 77 of the EU Regulation 2016/679.

4. Modification and updates

In the course of time this disclosure could undergo changes – also resulting for the entry in force of new norms for this sector, updates and the provision of new services as a result of technological innovations – and therefore we ask you to periodically consult this page.

CLIENT DISCLOSURE – Reference 1

(Participants and Candidates for Education Support) – Reference 1

Disclosure on the processing of personal data in conformity to Articles 13 and 14 of the EU Regulation 2016/679

We inform you that pursuant to Articles 13 and 14 of the EU Regulation 2016/679 “relative to the protection of natural persons with regard to data processing as well as to free circulation of such data (the “Regulation” follows), processing of data provided by you, or acquired within the scope of our activity, will be based upon principles of correctness, lawfulness and transparency and the safeguarding of your privacy and your rights.

1. Controller of data processing

OIC S.r.l, headquartered in Florence, Viale della Giovine Italia 17, herein after “OIC”, in the person of the pro- tempore legal representative, domiciled at the company headquarter, is the Controller, pursuant to art. 26 of the GDPR, for processing of your personal data, and inform you, herebelow, regarding the method, purpose and scope of communication and dissemination of your personal data and your rights, in conformity to EU Regulation 2016/679 and to the applicable norms regarding protection of personal data.

The Controller can be contacted at the above addresses or by sending an e-mail to privacy@oic.it

2. Type of data, purposes, method of processing and legal basis

Type of data processed may regard:

• Name, surname, place and date of birth, ID code, etc.
• Contact details (telephone number, e-mail, residence/domicile address, etc.)
• Job data (place and employer, specialization, department, etc.)
• Payment data (IBAN, credit institute, etc.)
• Dietary preferences or requests (if needed)
• Personal images (photos/videos if any), in which you may be portrayed during the Event, as well as related initiatives

Your data will be processed by the Controller only for the following purposes:

• Applications for Educational Support for congress Events, application for CME procedure or for the fulfillment of all contractual commitments related to registration or participation, including all processing, operational and management activities required to activate the economic relationship and implement the contract
• To meet requirements established by laws, regulations, national and EU legislation, civil and tax laws, and existing agreements related to the Controller’s activity
• Travel and hospitality management, if needed
• To send updates via email about similar future projects, initiatives, and events promoted by the Controller within the same area of interest
• Dissemination and/or publication of personal images/portraits on the Data Controller’s website, social media, or other channels related to events organized and/or promoted by the Controller
• Following specific consent, processing of personal data for transfer to exhibitors and third parties acting as Autonomous Controllers, for their own purposes, including dissemination and promotion of information about activities and services that may be of interest

If, on the other hand, personal data are directly collected during the Event by exhibitors and third parties, these will always act as Autonomous Data Controllers, with methods and purposes of processing indicated by themselves; it is intended that in this case OIC S.r.l. will not be able to process such personal data except as a result of services specifically commissioned by exhibitors and/or third parties, or with instructions and indications provided by the Autonomous Data Controllers.

We wish to specify that:

• The legal basis for data processing, as specified under letters a), b), c) and d), is the voluntary submission of applications for Educational Support or CME procedures, the contractual relationship established between the parties, and the fulfillment of the related legal obligations

Processing of data supplied by you is necessary to present the application or to implement the stated contractual relationship of which you are a part.

If needed, your personal data may be transferred to travel agencies, carriers or accommodation facilities and / or hotels in a third country (non-EU) for the sole purpose of organizing and booking the trip related to the participation in the event for which you have registered.

Lack of consent for data processing will make it impossible to proceed to the correct establishment and/or continuation and fulfillment of contractual commitments and relative legal obligations. The data will be deleted if it is no longer necessary to fulfil contractual or legal obligations.

• The legal basis for data processing, as specified under letter e), is your consent, as well as your legitimate interest in participating in a scientific event and its related initiatives, assessed through a fair balance of your rights and freedoms. The Controller may process personal images/portraits in which you appear in the background or within the context of the Event, and in any case for purposes not directly focused on the image itself

The data processed will be kept in the headquarter of the Controller for the period strictly necessary for the exploitation of the related purposes, and in any case for a period which will not exceed 24 months.

• The legal basis for data processing, as specified under letter f), is your explicit consent. Refusal to provide consent will result in the inability to use your data for the purposes outlined under letter f), but will not affect the provision of the service, and is therefore optional

The data will be kept in the headquarter of the Controller for 24 months as specified in the provisions issued on 02/24/2005 by the Authority for the protection of privacy.

The data will be kept in the headquarter of the Controller for 24 months as specified in the provisions issued on 02/24/2005 by the Authority for the protection of privacy.

All data will be treated correctly and transparently, both manually and with electronic and informatic tools; they will be inserted in specific paper and/or electronic archives or in any other form of adequate support, and will be constantly monitored through adequate operating procedures and safeguard measures, as established under Art. 32 of the Regulation, for the purpose of guaranteeing the security and confidentiality of personal data in order to prevent loss of such data, unlawful or improper use or unauthorized access.

Data will not be disseminated but can, besides being processed by individuals authorized by the Controller, be communicated only for the above indicated purposes, to:

• Subjects appointed by the Controller who process data as external Processors on behalf of OIC S.r.l., requiring access to perform specific collaboration tasks necessary or functional to the activity (e.g. IT service providers, outsourcing administrators, fiscal, legal and financial consultants, other professionals)
• Subjects who process data as autonomous Controllers for the purposes described in this Disclosure, limited to what is necessary to fulfill contractual commitments and related legal obligations
• Subjects who need access to data to perform necessary or complementary services related to the relationship (e.g. hotels, airline companies, etc.)
• Public and private entities that may access data in accordance with laws, regulations and EU provisions, within the limits established by such norms

An updated list of the Processors and persons authorized to process data can be consulted at the headquarter of the Controller of processing.

3. Rights

You can access the information that concerns you at any time and request updates, changes and integration as well as deletion, transformation into anonymous form or block data.

You can also oppose all or partial processing; if opposed it will not be possible to provide the service.

In order to exercise these and other rights as specified under articles 15-22 of the GDPR you can write to the Controller at the above addresses or send an email to privacy@oic.it

You have the right to oppose processing of your data and to present a complaint to the Authority for the protection of personal data according to Art. 77 of the EU Regulation 2016/679.

4. Changes and updates

In the course of time this disclosure could undergo changes – also resulting for the entry in force of new norms for this sector, updates and the provision of new services as a result of technological innovations – and therefore we ask you to periodically consult this page.

DISCLOSURE FOR SCIENTIFIC ACTIVITY

(Faculty and submission of abstracts) – Reference 2

Disclosure on the processing of personal data in conformity to Articles 13 and 14 of the EU Regulation 2016/679

We inform you that pursuant to Articles 13 and 14 of the EU Regulation 2016/679 “relative to the protection of natural persons with regard to data processing as well as to free circulation of such data (the “Regulation” follows), processing of data provided by you, or acquired within the scope of our activity, will be based upon principles of correctness, lawfulness and transparency and the safeguarding of your privacy and your rights.

1. Controller of data processing

OIC S.r.l, headquartered in Florence, Viale della Giovine Italia 17, herein after “OIC”, in the person of the pro- tempore legal representative, domiciled at the company headquarter, is the Controller, pursuant to art. 26 of the GDPR, for processing of your personal data, and inform you, herebelow, regarding the method, purpose and scope of communication and dissemination of your personal data and your rights, in conformity to EU Regulation 2016/679 and to the applicable norms regarding protection of personal data.

The Controller can be contacted at the above addresses or by sending an e-mail to privacy@oic.it.

2. Type of data, purposes, method of processing and legal basis

Type of data processed may regard:

• Name, surname, place and date of birth, ID code, etc.
• Contact details (telephone number, e-mail, residence/domicile address, etc.)
• Job data (place and employer, specialization, department, etc.)
• Payment data (IBAN, credit institute, etc.)
• Dietary preferences or requests (if needed)
• Personal images (photos/videos if any), in which you may be portrayed during the Event, as well as related initiatives

Your data will be processed by OIC S.r.l. exclusively for the purposes pertaining to the Faculty and Abstract Selection and to carry out all those commitments and to meet the pertinent connected and consequent legal indications (indicatively).

• Evaluation, publication and dissemination of scientific papers or abstracts
• Travel and hospitality management, if needed
• Compliance with legal requirements, regulations, national and EU laws, civil and tax legislation related to the activities and existing agreements, including obligations involving third parties such as the Italian Drug Agency, Continuing Medical Education (CME), and European Accreditation (EACCME)
• Sending updates via email about similar future projects, initiatives, and events promoted by the Controller within the same area of interest
• Dissemination and/or publication of personal images/portraits on the Data Controller’s website, social media, or other channels related to events organized and/or promoted by the Controller
• Following specific consent, processing of personal data for transfer to exhibitors and third parties acting as Autonomous Controllers, for their own purposes, including dissemination and promotion of information about activities and services that may be of interest

If, on the other hand, personal data are directly collected during the Event by exhibitors and third parties, these will always act as Autonomous Data Controllers, with methods and purposes of processing indicated by themselves; it is intended that in this case OIC S.r.l. will not be able to process such personal data except as a result of services specifically commissioned by exhibitors and/or third parties, or with instructions and indications provided by the Autonomous Data Controllers.

We wish to specify that:

Lack of this conferment will make it impossible to proceed to establishment and/or continuation and performance of the proper implementation of the commitments and pertinent legal obligations.

The data processed for such purposes will be kept at the headquarter of OIC S.r.l. and will be deleted if it is no longer necessary to fulfil contractual or legal obligations.

The data processed will be kept in the headquarter of the Controller for the period strictly necessary for the exploitation of the related purposes, and in any case for a period which will not exceed 24 months.

The data will be kept in the headquarter of the Controller for 24 months as specified in the provisions issued on 02/24/2005 by the Authority for the protection of privacy.

All data collected by the Controller will be treated correctly and transparently, both manually and with electronic and informatics tools; they will be inserted in specific paper and/or electronic archives or in any other form of adequate support, and will be constantly monitored through adequate operating procedures and safeguard measures, as established under Art. 32 of the Regulation, for the purpose of guaranteeing the security and confidentiality of personal data in order to prevent loss of such data, unlawful or improper use or unauthorized access.

Data will not be disseminated but can, besides being processed by individuals authorized by the Controller, be communicated only for the above indicated purposes, to:

An updated list of the Processors and persons authorized to process data can be consulted at the headquarter of the Controller of processing.

3. Rights

You have the right to access the information that concerns you at any time and request updates, changes and integration as well as deletion, transformation to anonymous form or block data.

You also have the right to totally or partly oppose processing of your data but if opposed it will not be possible to provide the service.

In order to exercise these and other rights as specified under articles 15-22 of the GDPR you can write to the Controller at the above addresses or send an email to privacy@oic.it

You have the right to oppose processing of your data as well as presenting a complain to the Authority for the protection of personal data according to aft. 77 of the EU Regulation 2016/679.

4. Changes and updates

In the course of time this disclosure could undergo changes – also resulting from the entry in force of new norms for this sector, updates and the provision of new services as a result of technological innovations and therefore we ask you to periodically consult this page.