Privacy Policy

ai sensi dell’art. 13 del Regolamento (UE) n. 679/2016

Dear user,
We hereby inform you that Regulation (EU) No. 679/2016 and Legislative Decree No. 196/2003, as amended (hereinafter collectively referred to as the ‘applicable legislation’), govern the protection of the fundamental rights and freedoms of natural persons (hereinafter referred to as ‘Data Subjects’) with regard to the processing of personal data.
Cefla S.c., recognising the importance of protecting personal data and considering its protection one of the main objectives of its business, provides this policy (hereinafter the ‘Policy’) to describe how personal data collected through its website (hereinafter the ‘Website’) is processed.

***

1. Data controller
Name: Cefla S.c., in the person of its pro tempore legal representative (hereinafter the ‘Controller’); the internal privacy contact person for the Medical Equipment Business Unit is Paolo Bussolari;
Address: Via Selice Provinciale, 23/A, 40026, Imola (BO), Italy;
Contact details: privacy@cefla.it.

2. Type of data processed
I. The following data may be collected and processed when using the Website:

II. I. browsing data: during normal operation, the IT systems and software procedures used to operate the Website acquire some personal data whose transmission is implicit in the use of Internet communication protocols (by way of example and not limited to: IP addresses or domain names of computers and terminals used by users, URI/URL addresses of requested resources, time of request, method used to submit the request to the server, size of the file obtained in response and other parameters relating to the user's operating system and IT environment);
III. II. cookies: small text strings that can be sent and stored on the user's computer by the websites visited, to be then retransmitted to the same sites when the user visits them again. For further details, please refer to the Cookie Policy on the Website.

3. Purpose of data processing and legal basis
Browsing data is processed for ‘statistical purposes’, i.e. to allow statistical research/analysis on aggregated or anonymous data, aimed at measuring the functioning and traffic of the Website and evaluating its usability on the basis of the Data Controller's legitimate interest in ensuring efficient and functional navigation and use of the content.

4. Scope of data circulation
The data may be processed: - by employees and/or collaborators of Cefla S.c. belonging to the offices involved for the purposes set out above in their capacity as authorised processors; - by Cefla S.c. suppliers, such as, for example, technology service providers, appointed, if necessary, as external processors, pursuant to Article 28 of Regulation (EU) No. 679/2016; - by judicial authorities and/or public administrations in the exercise of their institutional functions. The data will not be disclosed.

5. Transfer of data within the EEA and outside the EEA
Where Cefla S.c. transfers your Data outside the European Union and the European Economic Area, this will be done on condition that an adequate level of protection is guaranteed, recognised by a specific adequacy decision of the European Commission or in compliance with the standard contractual clauses adopted by the Company. Failing this, the transfer will only be carried out with your explicit consent or in the cases provided for by the GDPR. In such cases, please note that, although the Cefla Group adopts operating instructions in all the countries in which it operates, the transfer of Data may be exposed to risks related to the peculiarities of local legislation on Data processing.

6. Methods and duration of processing
Data processing will be carried out in accordance with the principles of lawfulness, fairness and transparency, using IT and telematic tools with logic strictly related to the purposes of the processing and, in any case, in such a way as to guarantee the security and confidentiality of the data. The data processed will not be stored for more than 12 hours (except for any verification requirements by the judicial authorities).

7. Rights of the data subject
The data subject may exercise the following rights at any time:
- access their personal data;
- obtain the rectification of their personal data;
- obtain the erasure (“right to be forgotten”) of their personal data;
- obtain the restriction of the processing of personal data;
- object to the processing;
- exercise the right to data portability;
- not be subject to a decision based solely on automated processing, including profiling;
- withdraw consent at any time without prejudice to the lawfulness of processing based on consent given prior to withdrawal;
- lodge a complaint with the competent supervisory authority (in Italy, the Garante per la protezione dei dati personali) in the event of a breach of personal data protection regulations.

To exercise the above rights, report problems or request clarification on the processing of personal data, the Data Subject may send a registered letter with return receipt to Cefla S.c., Via Selice Provinciale, 23/A, 40026, Imola (BO), Italy, or write an e-mail to: privacy@cefla.it..

8. Links and other websites and social networks
Links to third-party websites are provided solely for the convenience of the user. Interactions and the resulting processing of personal data carried out by and on external platforms are to be considered governed by and subject exclusively to the privacy policies established by the relevant data controllers, i.e. the companies that manage the relevant websites and social networks.

9. Modifiche
This Policy is updated as of 23/10/2025. Should any changes be made in the future, Cefla S.c. will give appropriate notice by publishing the updated version of the Policy on this Site.