Privacy Policy

Data Controller

Artexe – Via Durando 39 – 20158 Milano

Contitolari: Maps Healthcare S.r.l. e Maps S.p.A. – Via Paradigna 38/A, 43122 Parma

Email address of controller: privacy@mapsgroup.it

Email address of DPO: dpo@mapsgroup.it

Types of Data Collected

The Personal Data collected by mryou.mapsgroup.it, directly or through third parties include: email, cookies, use data, first name, last name and company name.
Complete details on each type of data collected are provided in the privacy policy sections or through specific information messages displayed before data collection.
Personal Data can be provided by the user, or in the case of use data, they can be collected automatically while using mryou.mapsgroup.it.

Unless otherwise specified, all the data requested by mryou.mapsgroup.it are mandatory. If the User refuses to provide such data, mryou.mapsgroup.it may be unable to supply the requested service. In cases where mryou.mapsgroup.it indicates that data provision is optional, users may refrain from supplying such data, with no consequences on the availability of the service or on its efficiency.

Should you have any doubt regarding which information is mandatory, please contact the Data Controller.

Unless otherwise specified, the use of cookies or other tracking tools by mryou.mapsgroup.it or by third party services used by mryou.mapsgroup.itis aimed at providing the service requested by the user, in addition to the purposes described in this document and in the Cookie Policy, if available.

The User is responsible for any third party Personal Data obtained, published or shared via mryou.mapsgroup.it and guarantees to be entitled to communicate or disclose it, thus relieving the Controller from any third party liability.

Data processing procedure and location

Processing method

Legal basis for processing

The Data Controller processes Personal Data related to the User where one of the following conditions apply:

• the User has given his/her consent to one or more the specific purposes; Note: in some judicial systems, the Data Controller may be entitled to process Personal Data without the consent of the User or another one of the legal bases specified below, unless the User opts out of such process. However, this may not apply if processing of Personal Data is regulated by European laws on Personal Data protection;
• processing is necessary for the performance of a contract with the User and/or or in order to take steps prior to entering into a contract;
• processing is necessary for compliance with a legal obligation to which the Data Controller is subject;
• processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;

However, it is always possible to ask the Data Controller to clarify the specific legal basis for each processing activity and in particular to specify whether the processing activity is based on the law, set forth in a contract or needed to close a contract.

Location

Data shall be processed at the operating offices of the Controller and at any other place where the parties involved in data processing are located. For further information, please contact the Controller. The User’s Personal Data may be transferred to a country other than the one where the User is located. For further information on the location of processing, the User may refer to the section on details about the processing of Personal Data.

The User is entitled to obtain information regarding the legal basis for transfer of Data outside the European Union or to an international organization under public international law or established by two or more countries, such as the UN, as well as regarding the security measures adopted by the Data Controller to protect Data.

The User may check whether the above-described transfers take place by viewing the section of this document relating to details of Personal Data processing or request information from the Data Controller, using the contact details provided at the top.

Retention period

Data will be processed and retained for the period of time needed for the purposes for which they have been collected.

Therefore:

• Personal Data collected for purposes connected with the performance of a contract between the Data Controller and the User will be retained until the performance of said contract has been completed.
• Personal Data collected for purposes linked to a legitimate interest of the Data Controller will be retained until such interest is fulfilled. The User may obtain further information on the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.

When processing is based on the User’s consent, the Data Controller may retain the Personal Data for longer until said consent is revoked. Moreover, the Data Controller may be obliged to retain the Personal Data for a longer period of time to comply with a legal obligation or by order of an authority.

At the end of the retention period, the Personal Data will be erased. Therefore, upon expiry of said period, the right to access, erasure, rectification and data portability may no longer be exercised.

Data processing purposes

Users’ data are collected to enable the Data Controller to provide its Services, as well as for the following purposes: Managing contacts and sending messages, interacting with data collection platforms and other third parties, contacting the User, interacting with social networks and external platforms, statistics and spam protection.

For further detailed information on the purpose of processing and on the Personal Data required for each purpose, the User may refer to the relevant sections of this document.

Details on Personal Data processing

Personal Data are collected for the following purposes and using the following services: