INFORMATION NOTICE
– Sign-up –
The company MANMED SOLUTIONS, having its registered office in Via Ricardo J. Alfaro, P.H. Golden Point, Piso 16, Oficina 1, Ciudad de Panama Republica de Panama, in its capacity as Controller, hereby informs website users that their data shall be processed as specified and for the purposes below, pursuant to Article 13 of Regulation (EU)
2016/679 – GDPR.
1. Subject of Data Processing
The Controller shall process personal data, i.e. “identification data” such as name, surname, tax reg.number, company name, VAT number, address, telephone number, e-mail, etc., which are requested at the time of sign-up to MANMED SOLUTIONS website.
In addition to these data, whenever the user logs into the website, the ICT systems and software procedures designed for website operation indirectly acquire additional personal information whose transmission is implicit in the use of the Internet communication protocols (for instance, but not limited to, the so-called “cookies”, the IP addresses, the domain names of the computers used by website surfers, the “Url” addresses of the requested resources, and the time of the request to the server). These data are only processed for anonymous statistical investigations.
2. Purposes of Data Processing
Personal “identification” data shall be processed to enable sign-up to the website, which is required to access specific website areas and to deliver and manage the various services offered.
The Company shall process personal data for the following purposes:
i) commercial and marketing activities (such as, but not limited to, delivery of the newsletter and information, promotional and advertising material) towards the Company and/or legal person to which the website user and/or Company contact person belongs.
As marketing activities are not addressed to natural persons, but to legal persons only, no need exists to collect their explicit consent.
3. Data processing method
Personal data are processed following the procedures specified in Article 4 (2) of the GDPR, notably through collection, recording, consultation, storage, retrieval, disclosure, dissemination, erasure and destruction. Personal data are subject to processing in both paper and electronic and/or automated form.
The Controller shall process personal data for as long as required to fulfil the purposes above and shall store data for no longer than 2 years from sign-up. After this time has elapsed, the user’s personal data shall be destroyed.
Data processing shall in all cases be based on the principles of fairness, lawfulness and transparency, and it shall be implemented with the help of such tools and procedures as to prevent the risk of loss, unauthorised access, and unlawful use and dissemination.
4. Access to data
Personal data shall be made accessible to the following persons for the purposes laid down in Article 2:
– Controller’s employees and collaborators, in their capacity as entities authorised to process data;
– third-party companies or other entities, including, but not limited to, professional firms, etc. that perform outsourced activities on behalf of the Controller, in their capacity as Processors.
5. Data disclosure
As laid down in Article 6 (b) and (c) of the GDPR, the Controller shall be entitled to disclose personal data to the following entities, without an explicit consent being required, for the purposes specified in Article 2 (a): Supervisory Bodies, Judicial Authorities, and any entity to which disclosure is mandatory by law. These entities shall process data in their capacity as independent Controllers.
6. Data transfer
Personal data shall be stored in paper archives located at the Company headquarters and in servers within the European Union.
It is however understood that the Controller shall be entitled, where required, to move the servers and paper archives outside the EU. In this case, the Controller shall as of now guarantee that data transfer outside the EU shall take place in accordance with the applicable statutory provisions (Article 44 and subs. of the GDPR).
7. Nature of data submission and consequences of submission denial
The provision of some services offered on the website does not require users’ sign-up. However, users may file requests concerning these services whose fulfilment requires them to provide personal data. Such data shall be processed exclusively for the relevant purposes and for as long as strictly required.
8. Rights of the data subject
With reference to processing of personal data, the data subject shall be entitled to:
– be informed about the Controller’s details and place of business, the purposes and methods of data processing, the Processor’s details and place of business;
– obtain the following from the Controller or Processor, without undue delay:
1) confirmation of processing of personal data concerning him or her, and disclosure of such data and their origin, as well as the purposes on which processing is based in an intelligible form;
2) erasure of personal data concerning him or her in the following cases: i) the personal data are no longer necessary in relation to the purposes for which they were collected, ii) consent is withdrawn and there is no other legal ground for the processing, iii) the personal data have been unlawfully processed, iv) the data subject objects to the processing and there are no overriding legitimate grounds for the processing v) the controller is legally obliged to erase the personal data;
3) update, rectification or, where there is an interest with this respect, completion of incomplete data;
4) certification that any entity to which data have been disseminated and disclosed have become aware of the operations illustrated in items 2) and 3) above, including their contents, unless this proves impossible or involves an evidently disproportionate effort with respect to the safeguarded right;
– object, on grounds relating to his or her particular situation, to processing of personal data concerning him or her, based on point (e) or (f) of Article 6(1);
– object to processing of personal data concerning him or her for direct marketing purposes;
– lodge a complaint with a supervisory authority;
– receive personal data concerning him or her in a structured, machine-readable format, and transmit these data to another Controller without hindrance from the Controller to which data had been given originally. In exercising his or her right to data portability, the data subject shall be entitled to have his/her personal data transmitted directly from one controller to another, where technically feasible;
– not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly affects him or her in a significant manner.
The Controller shall provide a copy of the personal data that are subject to processing. If the data subject requests additional copies, the Controller shall have the right to charge a fee, based on the administrative costs actually incurred.
10. Methods for exercising rights
The data subject shall at any time exercise his or her rights above sending the Controller:
-a registered letter with acknowledgement of receipt to MANMED SOLUTIONS, registered office in Via Ricardo J. Alfaro, P.H. Golden Point, Piso 16, Oficina 1, Ciudad de Panama Republica de Panama.
– an e-mail to the following address: info@manmed.net
11. Minors
Sign-up on the Controller’s website is only permitted to users over 16. Where information is recorded concerning minors below this age, the Controller shall immediately erase such data.
12. Data Controller and Processor
The data Controller is MANMED SOLUTIONS, having its registered office in Via Ricardo J. Alfaro, P.H. Golden Point, Piso 16, Oficina 1, Ciudad de Panama Republica de Panama. The updated list of the data Processors is stored at the legal office of the data Controller.