Medical Information Privacy Notice

INFORMATION NOTICE PURSUANT TO ART. 13 OF EU REGULATION 679/2016 AND THE PRIVACY CODE AS AMENDED BY LEGISLATIVE DECREE 101/2018

Introduction
For Kedrion S.p.A. and its subsidiaries (Kedrion), your privacy and the security of your personal data are of utmost importance. Therefore, we collect and process such data with the greatest care and attention, adopting specific technical and structural measures to ensure full security during processing.
We inform you, pursuant to Article 13 of the European Regulation 2016/679 (hereinafter “Regulation”) and the Privacy Code as amended by Legislative Decree 101/2018, that the processing of your personal data is carried out in a manner that ensures the security and confidentiality of your data; the processing is carried out using IT and/or telematic tools, as detailed in this notice.
This notice concerns the processing of personal data of individuals who submit unsolicited requests for information about Kedrion’s medicinal products through the specific form provided by the Company and available on its website.

Data Controller
The processing of your personal data is carried out by Kedrion S.p.A., as the Data Controller, pursuant to and for the purposes of EU Regulation 2016/679 and the Privacy Code as amended by Legislative Decree 101/2018.
For any questions or requests related to the processing of your personal data, you may contact:
Kedrion S.p.A.
Registered office address: Loc. Ai Conti Castelvecchio Pascoli (LU)
Email contact: [email protected]

The Data Controller has appointed a Data Protection Officer (DPO), who can be contacted regarding policies and practices adopted in the field of personal data protection.
DPO contact details: [email protected]

Types of Data and Purpose of Processing
The personal data processed by Kedrion include your identifying information, such as name, surname, email address, landline and/or mobile phone number, and possibly special categories of data (Art. 9 of the EU Regulation) related to your health status (in the case of patients). These are necessary for the Controller to respond to your request for information about Kedrion’s medicinal products.

Disclosure and Dissemination of Personal Data
Your data will not be disclosed or disseminated, except for communication to “Eureka InfoMed srl Unipersonale” and/or Cencora, Inc., which manage unsolicited requests for information about Kedrion’s medicinal products on behalf of Kedrion and have been duly appointed as Data Processors pursuant to Art. 28 of EU Regulation 2016/679.
Your personal data (if you are a healthcare professional) may also be communicated to our internal Medical Affairs department, which may contact you to provide updates regarding the medicinal product you inquired about through the medical information channel.
The Controller may transfer your personal data to companies controlled by Kedrion S.p.A., ensuring all security measures required by current regulations.

Mandatory Nature of Data Provision
Your personal data is necessary to fulfill your request for information about Kedrion’s medicinal products.

Data Processing Methods
Your data is processed using both electronic and paper-based tools by individuals expressly authorized and trained according to the Controller’s specific instructions.

Legal Basis for Processing
The legal basis for data processing is consent.

Data Retention
Personal data is retained for the time necessary to fulfill your information request and, in any case, in accordance with the Company’s data retention policies.

Data Subject Rights
Your rights under EU Regulation 679/2016 (Articles 15–22) and the Privacy Code as amended by Legislative Decree 101/2018 include, for example:

  • Accessing your personal data and knowing its origin (purposes and methods of processing, recipients, retention period or criteria used to determine it);
  • Updating or correcting your personal data to ensure it is always accurate;
  • Deleting your personal data from the Controller’s databases and/or backup archives;
  • Restricting the processing of your personal data in certain circumstances, such as when you contest its accuracy, for the time needed by the Controller to verify it.

For further information or to submit a request, contact the Controller at: [email protected]
You may object at any time to the processing of your personal data based on legitimate interest by sending your request to: [email protected]

Complaint
Without prejudice to any other administrative or judicial remedy, you may lodge a complaint with the supervisory authority as provided by EU Regulation 2016/679 and the Privacy Code as amended by Legislative Decree 101/2018.

Consent
If you have received and understood this notice, we ask you to give your consent to the processing of your personal data and health-related data (in the case of patients) necessary to manage your unsolicited request for information about Kedrion’s medicinal products, submitted through the specific form provided by Kedrion and available on its website.

☐ I give my consent
☐ I do not give my consent

Signature and date

_________________________