Dear Guest,

Pursuant to the current legislation on the protection of personal data, with particular reference to Article 13 of Regulation (EU) 679/2016 (hereinafter Regulation or GDPR), as Data Controller,

I inform you that your personal data, collected exclusively for the purpose of participation in the MedGenerAction (MDG) event, will be processed in compliance with legal obligations and principles, ensuring full protection of the fundamental rights and freedoms recognized to you, with particular regard to the principles applicable to the processing of personal data referred to in Article 5 of the Regulation.

Data Controller

The processing of your personal data is carried out by Complife Italia S.r.l. with registered office at Via Guido Rossa, 1 – 20024 Garbagnate Milanese (MI), VAT No. 11093320155, e-mail info@complifegroup.com, PEC complifeitalia@legalmail.it, as Data Controller pursuant to and for the purposes of the Regulation.

Data Protection Officer

The Controller has appointed a Data Protection Officer whom you may freely contact for any clarification or issue regarding your privacy at the following e-mail address: dpo@complifegroup.com, dpo@pec.complifegroup.com

Type of personal data processed

The personal data being processed include:

  • identifying data such as name, surname, educational qualification, role held in the company;
  • contact details (e-mail address);
  • billing data (VAT No./Tax Code);
  • contact details for billing operations (billing address).

Purpose of processing, legal basis and retention period

Personal data are processed for purposes related to participation in the MDG event. Specifically, the data will be processed for the following purposes:

The registration form includes a section to provide consent to the processing of personal data for promotional purposes.

Legal nature of data provision

The provision of your personal data is mandatory. Failure to provide such data will make it impossible to provide the service and, therefore, to execute contracts and other related obligations, as well as to properly manage mutual commercial relations.

For the soft spam purpose, the Data Subject may exercise the right to opt-out, i.e., the right to refuse in a simple and free manner the sending of such communications, by clicking the “Unsubscribe” button, located within each e-mail received at the indicated e-mail address.

For the purpose relating to receiving informational and promotional communications, the provision of data is optional; however, failure to provide such data will make it impossible to carry out the processing operations related to this purpose. Should you consent to receiving the newsletter, please note that you have the right to revoke it at any time and with the same ease with which it was previously granted.

Categories of data recipients

For the purposes stated above, the following may access your data: the Controller’s employees, persons authorized to process data, who operate under the authority of the same and act on the basis of specific instructions provided regarding the purposes and methods of processing;

  • entities providing services or functions instrumental to the purposes indicated in this notice, to whom adequate operational instructions are provided and who are designated as Data Processors (e.g., the company managing the platform, service providers, assistance and maintenance of IT systems and equipment);
  • entities, professionals, companies or other structures entrusted by us with the processing related to the fulfilment of administrative, accounting and management obligations associated with the ordinary course of our business;
  • banks, financial institutions or other entities to whom the communication of the aforementioned data is necessary for carrying out the activity in relation to the fulfillment of contractual obligations undertaken;
  • payment services are provided through the PayPal provider, which operates, for processing related to transaction management, as an independent Data Controller. For further information, please consult PayPal’s privacy policies at the following address: PayPal Privacy Statement

The list of Data Processors is available, upon request, at the following addresses:

Processing methods

Personal data will be processed in a manner that preserves the integrity, confidentiality, and availability of the information; therefore, the Data Controller implements technical and organizational measures appropriate to the level of risk.
The data are subject to predominantly computerized processing, with residual cases of paper-based processing.
The aforementioned information may be contained in acts and documents prepared by the Controller (or on its behalf) during the employment relationship and stored in paper or electronic archives.

Data transfer

Personal data may be transferred to countries within the European Union or outside the EU for purposes related to the requested services and for territorial jurisdiction requirements. Data are shared in compliance with the principle of necessity, limited to strictly necessary information. Data transfer takes place exclusively under the following conditions:

  • to countries covered by adequacy decisions pursuant to Article 45 of Regulation (EU) 2016/679;
  • in the absence of adequacy decisions, processing, with reference to Article 46 of Regulation (EU) 2016/679, takes place following agreement with the data recipient on standard data protection clauses, approved by the European Commission.

The newsletter service is managed on the Mailchimp email marketing platform, owned by Intuit, which is based in the United States and adheres to the EU-US Data Privacy Framework (adequacy decision “Data Privacy Framework” approved by the European Commission on July 10, 2023).
For further information, please consult Mailchimp’s privacy policies at the following address: Global Privacy Statement | Intuit.

Data Subject rights

In relation to the processing of your personal data, you may exercise the following rights vis-à-vis the Data Controller at any time:

How to exercise your rights

Your rights may be exercised at any time by contacting the Data Protection Officer: