In compliance with the fulfillments required by Articles 13 and 14 of the EU Regulation 2016/679 for the protection of personal data, we communicate the methods of collection and use of the data you voluntarily made available to Hospitex International S.r.l. in order to obtain the provision in your favor of the Urine24 reporting service.

1. Data controller

The data controller (“Data Controller”) is Hospitex International Srl, in the person of its legal representative Dr. Francesco Trisolini, with registered office at Via Massimo D’Antona n. 17, 50019, Sesto Fiorentino (FI), VAT no. IT07345680487.

2. Types of data processed

The Data Controller will process your personal identification, contact, tax, and accounting data (hereinafter “Common Data”) and data belonging to special categories of personal data (Article 9 of the GDPR), in particular health-related data (hereinafter “Your Health Data”).

3. Purpose of data collection

Your Common Data and Data related to your Health will be processed for the purpose of executing the Urine24 reporting service (“Urine24”) and for the purpose of diagnosis and treatment and consequent investigations for the purpose of health protection; it may also be processed for the operational, administrative, tax and accounting purposes related to the provision of the service and to fulfill legal obligations (tax obligations; filing and storage of documents); for the drafting, presentation of studies and research with scientific purposes; for marketing purposes; and for sending online reports.

4. Legal basis

The processing of personal data carried out by the Data Controller is legitimate because it is based on the following elements and circumstances: (i) contract signed by the data subject; (ii) explicit consent of the data subject; (iii) fulfillment of legal obligations; (iv) legitimate interest of the Data Controller; and (v) the processing of Data related to Your Health is necessary to pursue the purpose of treatment and to execute a contract with a health care professional, as well as for archival purposes in the public interest, for scientific and historical research purposes, and for statistical purposes. Processing of Data related to Your Health will take place under the responsibility of health care professionals subject to confidentiality.

5. Compulsory or optional nature of provision of data and consequences of failure to provide data

The provision of data is necessary for the performance of the Urine24 service. Any refusal to provide such data may result in the non-performance of the requested service. You will be able to access the online reporting service and obtain the sending of the report by e-mail, only with your explicit consent, which you must express in the appropriate section of this form. This consent is optional, in case of your refusal you may receive your reports in paper mode. You may revoke your consent at any time, in the manner described in this notice.

6. Principles and Modalities of Processing

The personal data acquired by the Data Controller are processed, by paper and computer methods, in compliance with the GDPR, Legislative Decree no. 196/03 (“Code regarding the protection of personal data”), the provision of the Guarantor for the protection of personal data of November 19, 2009 (G.U. no. 288, Dec. 11, 2009) “Guidelines on the subject of online reports,” the Prime Minister’s Decree 08/08/2013, as well as the principles of lawfulness, fairness and transparency, integrity and confidentiality, adequacy and relevance, and with the adoption of adequate protection measures. Data are not profiled and are not subject to automated decisions.

7. Data access and communication

Your personal data may be made accessible to third parties who cooperate with the Data Controller in the performance of the requested service and who process the data as autonomous data controllers or will be appointed for this purpose by the Data Controller as Data Trustees, Data Processors, System Administrators. The list of these subjects is available from the Data Controller. Your personal data may be made accessible to public bodies/bodies if there are legal obligations.

8. Retention period

The data will be processed for the period of time strictly necessary for the performance of the Urine24 service. At the end of the period the data will be destroyed, except for the possible preservation, in accordance with the law, of the act or document containing it. Where permitted the data will be retained for 10 years, this is to cover the legal limitation period. When processing is based on your consent, the Controller may retain personal data until that consent is revoked.

9. Non-EU Diffusion

The data will be stored on servers located within the European Union. Currently, the servers are located in Italy. They will not be diffused in countries outside the European Union.

10. Provision of Data for Marketing Purposes

Your contact data (email) may be used, subject to your explicit, optional consent, which is the legal basis of the processing, to periodically communicate to you news concerning the requested service or new services/products provided by the Owner, forwarding of informative material and promotional campaigns and for other commercial, promotional and marketing purposes (“Marketing purposes”) in the field of health treatments carried out by the Owner. Any refusal will not affect the possibility of obtaining the other services and benefits requested. Data provided for Marketing purposes will be retained by the Controller for 24 months. You understand that you may revoke your consent at any time by sending a communication to the e-mail address: urine24@hospitex.com.

11. Online referral

You will receive instructions for downloading the Urine24 exam report via e-mail to the e-mail address you provided by completing the Patient Data Form (MDP). Emailing the security codes to access the report will be done from notifiche@gipo.it. The report will be downloadable as a pdf attachment after entering the security codes received by email and by SMS on your cell phone. Unless you expressly and know otherwise, this procedure for accessing the report portal is the only method of sending the report provided by the Urine24 service. You may choose to opt in or opt out of this service, without in any way affecting your right to receive the health care service requested. As an alternative to sending the report by email, you may request that the paper report be sent to your home by making a request to urine24@hospitex.com, or by phone by calling Customer Service.

You have the right to authorize the communication of Urine24 test results to your attending physician. Only the data subject to whom the data relate may give consent. If the data subject is a minor or under guardianship, it is the individuals who have legal authority to give consent.

12. Rights of the data subject

You are guaranteed all the rights specified in Articles 15 – 22 GDPR, including the right to access, rectification and deletion of data, the right to restriction and opposition to processing, the right to obfuscation, forgetting and portability of data, and the right to withdraw consent to processing (without prejudice to the lawfulness of processing based on consent obtained prior to withdrawal). The above rights may be exercised by written notice to be sent to: Hospitex International Srl, Via Massimo D’Antona 17, 50019 Sesto Fiorentino (FI) – Tel. +39.055.0135766 – E-mail: urine24@hospitex.com – PEC: hospitex.international@pec.it or by contacting our Data Protection Officer (DPO) at: dpo@hospitex.com. You have the right to lodge a Complaint with the Data Protection Authority if you believe that the processing concerning you violates the GDPR or Italian law. For more information regarding your rights and data protection regulations, you can visit the website of the Data Protection Authority at www.garanteprivacy.it.

13. DPO

Please be advised that Hospitex International S.r.l. has appointed a Data Protection Officer (DPO) whom you may contact, for any eventuality, at the email address: dpo@hospitex.com. The Owner reserves the right to make changes to this Privacy Policy at any time by giving notice to users.