Privacy Policy

This Application collects certain Personal Data from its Users.

Users may be subject to different levels of protection. Some Users therefore enjoy enhanced protection. Additional information regarding protection criteria can be found in the applicability section.

This document can be printed using the print command available in any browser’s settings.

Data Controller

Astra For Medic Srl
VAT No. 09328790150
R.E.A. Milan n. 1287717
Operational Headquarters: Via Piero Portaluppi, 15 – 20138 Milan (MI)
Controller’s email address: info@astraformedic.it

Types of Data collected

Among the Personal Data collected by this Application, independently or through third parties, are: Tracking Tool; Usage Data; name; surname; physical address; company name; country; date of birth; email; gender; phone number; username; password; device information; Data communicated during service use; payment information; fax number; ZIP code; city; Tax ID; User ID; number of employees; profession; province; state; website.

Complete details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific information texts displayed before the data collection.

Personal Data may be freely provided by the User or, in the case of Usage Data, automatically collected during the use of this Application.

Unless otherwise specified, all Data requested by this Application is mandatory. If the User refuses to communicate them, it may be impossible for this Application to provide the Service.

The use of Cookies or other tracking tools serves the purpose of providing the Service requested by the User, in addition to the other purposes described in this document and in the Cookie Policy.

The User assumes responsibility for the Personal Data of third parties obtained, published, or shared through this Application and guarantees the right to communicate or disseminate them.

Methods and place of processing the collected Data
Processing methods

The Controller implements appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.

The processing is carried out using computer and/or telematic tools, with organizational methods strictly related to the indicated purposes.

In addition to the Controller, access to the Data may be available to other parties involved in the organization of the Application (administrative, commercial, marketing, legal personnel, system administrators) or external parties (technical suppliers, hosting providers, IT companies, communication agencies) appointed as Data Processors.

Legal basis of processing

The Controller processes User’s Personal Data when:

  • the User has given consent for one or more purposes;

  • processing is necessary for the execution of a contract or pre-contractual measures;

  • processing is necessary for legal obligations;

  • it is necessary for a task of public interest;

  • it is necessary for the legitimate interest of the Controller or third parties.

The User can always request clarification regarding the applicable legal basis.

Location

The Data is processed at the Controller’s operational headquarters and any involved third parties.
The Data may be transferred to countries different from the User’s.

Additional information is available in the dedicated sections or by contacting the Controller.

Retention period

The Data is retained:

  • for the entire duration of the contract, when collected for contractual purposes;

  • as long as necessary to pursue the Controller’s legitimate interest, for such purposes;

  • until consent is revoked, in consent-based processing;

  • or longer, if required by legal obligations.

At the end of the retention period, the Data will be deleted.

Purpose of Processing the collected Data

The Data is collected to allow the Controller to:

  • provide the Service,

  • comply with legal obligations,

  • respond to requests,

  • protect its rights and those of users,

  • detect abuse or fraudulent activities,

  • conduct marketing, statistical activities, contact management and social network interaction.

Details on specific purposes are available in the section “Details on Personal Data processing”.

Facebook permissions used by the Application

The Application may request Facebook permissions to collect data from the User’s account.
Permissions may include:

  • basic information (id, name, picture, gender, language),

  • access to private data,

  • access to activities,

  • access to friend requests.

Details on Personal Data processing

Personal Data is collected for the following purposes:

  • Access to third-party service accounts

  • Contact with the User

  • Tag management

  • Interaction with social networks and external platforms

  • Statistics

  • Display of content from external platforms

User Rights

The User can exercise the following rights:

  • withdraw consent at any time;

  • object to processing;

  • access their Data;

  • verify and request rectification;

  • obtain restriction of processing;

  • obtain erasure of their Data;

  • receive their Data in a portable and transferable format;

  • lodge a complaint with the supervisory authority.

Right to object

Users may object to processing for reasons related to their particular situation.
In the case of direct marketing, objection can be exercised without justification.

How to exercise rights

Requests should be addressed to the Controller through the contacts provided in this document.
They are handled free of charge within one month.

Applicability of enhanced protection level

It applies when:

  • the Controller is based in the EU;

  • the Data concerns EU users who are offered goods or services;

  • the Data concerns EU users whose behavior is monitored.

Cookie Policy

This Application uses tracking tools. For more information, please consult the Cookie Policy.

Additional information about processing

Legal defense

The Data may be used by the Controller in legal proceedings or to defend against abuse by the User.

Specific information notices

Upon request, the Application may provide additional information notices.

System logs and maintenance

For technical reasons, system logs containing Personal Data, such as IP addresses, may be collected.

Response to “Do Not Track” requests

This Application does not support “Do Not Track”.

Changes to this privacy policy

The Controller may modify this document at any time, informing Users on this page or through available contact tools.

Scroll to Top