Information pursuant to Art. 13 of Regulation (EU) 2016/679 - European Parliament and Council 27 April 2016 (General Data Protection Regulation)

The legislation in question regulates the protection of personal data and imposes a number of obligations on those who process such data. One of these obligations is to inform the person to whom the data refer.

In view of the above, and in relation to the provision of the service you have requested,

We inform you of the following:

1. Identity and contact details of the data controller

Zucchetti Centro Sistemi S.p.A., VIA LUNGARNO, 248 E 305/A - 52028, TERRANUOVA BRACCIOLINI (AR), TEL. (+39) 055 91971 FAX. (+39) 055 9197515, EMAIL: privacy@glucologweb.com .

2. Purposes of the processing for which the personal data are intended and legal basis of the processing

The personal data, including special data, which will be requested from you during the use of the application are necessary for:

1. Detecting blood glucose data and information that may influence the diabetic state (e.g. carbohydrate intake);
2. Carrying out legal obligations and requirements.

The legal basis justifying the processing is determined by the laws in force and, in particular, by the consent of the person concerned. Zucchetti Centro Sistemi S.p.A. has considered it fundamental to carry out an impact assessment on the patient's data processing, in order to implement all the adequate measures for managing the same. For regulating the use of the web application called GlucoLog WEB, please refer to the section dedicated to the General Use Conditions (General Conditions of Use).

3. the nature of personal data

your personal data are the subject of the processing and will be used for the purposes indicated in Section 2:

personal data are collected for the purpose of identifying patients by doctors enabled to view their clinical data. The personal data collected include:

1. identification data: first name, last name, date of birth
2. particular data: type of diabetes, sex, height, weight, type of treatment, year of onset of diabetes and blood glucose values, insulin administered, carbohydrate intake, physical activity carried out.
3. Navigation data received as a result of your interactions with the Web-App (technical cookies), such as user recognition, language and session storage. This is information that is not collected in order to be associated with you, but which by its very nature could, through processing and association with data held by third parties, make it possible to identify the person to whom it refers. This category includes data such as the time and date of access, the type, IP address and position of the devices used by you during access, the queries made to the Web-App, the responses delivered by the Web-App during the use of the Web-App. Please refer to the relevant cookie policy (cookie policy).

These data are necessary for the proper functioning of the service provided.

4. Recipients or categories of recipients of personal data

The data in question, for organisational reasons only, will be brought to the attention of the persons designated as data processors and persons in charge of processing, i.e. employees and collaborators of the undersigned Company and also, for functional reasons only, as part of the execution of the storage service, they will be communicated, subject to your consent, to the doctors or caregivers identified by you.

A detailed list of the subjects and categories described above is available at the undersigned Company.

Personal data will not be disclosed in any way whatsoever unless you give your express permission.

5. Transfer of personal data to a third country or international organisation

Please note that the aforementioned data are not subject to transfer outside the European Union. If there are any changes and the transfer takes place outside the European Union, the data controller will inform the data subject of the change (by direct e-mail).

6. Period of retention of personal data/criteria used to determine this period

Personal data will be stored for the duration of the service you have requested and, unless specifically provided for by law, for a subsequent period of up to 10 years.

7. Exercisable rights

We wish to point out and remind you that, in addition to being able to lodge a complaint with the Supervisory Authority, you may also exercise a series of rights provided for by current legislation which, in brief, are set out below: Art. 15 - the data subject's right of access; Art. 16 - the right to rectification; Art. 17 - the right to erasure ("right to be forgotten"); Art. 18 - the right to restriction of processing; Art. 20 - the right to data portability; Art. 21 - the right to object; Art. 22 - the right not to be subject to automated decision-making, including profiling.

The full text of these articles is available on the Company's website https://www.zcscompany.com/it/privacy-policy in the "Privacy Policy" section.

These rights may be exercised by sending an e-mail to privacy@glucologweb.com.

8. any changes

Zucchetti Centro Sistemi S.p.A. reserves the right to change this informative report and in this case you will be informed. Nevertheless, it is advisable to periodically review the information in the appropriate section of the Web-App.