Privacy Policy of BASMEDICAL.CH

Information disclosure on the processing of personal data – Articles 12 and 13 of EU Regulation 2016/679
of the European Parliament and of the Council.

This Website collects personal data about its users.

Data Controller

Bas Medical SA Via Besso n° 15 6900 Lugano Switzerland

Email Address of Data Controller: info@basmedical.ch

Types of Data Collected

The personal data collected by this Website may include usage data, Email, name, surname, profession, country and various types of data.

Personal data may be freely provided by the user or, in the case of usage data, collected automatically during the use of this Website.
All data requested by this Website, unless otherwise indicated, is mandatory.
If the User refuses to provide such data, this Website may not be able to provide the service. In the case of optional data required by the Website, users are free to refrain from disclosing such information, without this having any consequence on the availability of the service or its operation.
Users assume responsibility for the personal data of third parties obtained, published or shared through this Website and warrant that they are entitled to disclose or disseminate them, releasing the Data Controller from any liability towards third parties.

Method and location of processing for collected data

Data processing methods

The Data Controller adopts appropriate security measures for the prevention of unauthorised access, disclosure, modification or destruction of the Personal Data.
Processing is carried out using computer and/or IT tools, with organisational methods and rationale strictly related to the stated purposes. In addition to the Data Controller, other parties involved in the organisation of this Website (departmental staff in administration, sales, marketing, legal, system administration) may also have access to the Data. This also applies, if necessary, to external entities that may be designated as Data Processors by the Data Controller, e.g. third-party technical service providers, couriers, hosting providers, IT companies and communication agencies.

The Data Controller manages users’ personal data when the following conditions apply:

• the processing is necessary for the execution of a contract with the user
• and/or the execution of pre-contractual measures
• the Data Controller must fulfil a specific legal obligation
• the processing is necessary for the performance of a task carried out in the public interest
• or for the exercise of public powers vested in the Data Controller
• the processing is necessary for the pursuit of the Data Controller’s legitimate interest of that of third parties.

Location

Personal data are processed at the Data Controller’s operational headquarters and at any other place where the parties involved in the processing are located.

Data retention period

Data is processed and stored for the time required for the purposes for which it was collected.
As such:

• Personal data collected for purposes related to the fulfilment of a contract between the Data Controller and the user will be retained until the full conclusion of that contract.
• Personal data collected for purposes related to the legitimate interest of the Controller will be retained until this interest is fulfilled. Users may obtain further information on the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.

When the processing is based on a user’s consent, the Data Controller may keep the Personal Data for a longer time until such consent is revoked.
Note that the Data Controller may be obliged to keep personal data for a longer period if required to do so by law or by order of an authority.
At the end of the retention period, the personal data will be deleted. As
a result, at the end of this period, the right of access, cancellation and rectification
may no longer be exercised.

Purposes for processing collected personal data

User data is collected to enable the Data Controller to provide the Service, comply with legal obligations, respond to requests or executive actions, protect their rights and interests (or those of users in general or third parties), identify any malicious or fraudulent activities.

User rights

Users can exercise certain rights in relation to data processed by the Data Controller.
In particular, users have the right to:

• withdraw their consent at any time
• object to the processing of their data
• access their personal data
• verify their data and ask for them to be corrected
• have the processing restricted
• have their personal data removed or deleted
• ask for their personal data to be consigned to them
• file a complaint.

Procedure for exercising rights

To exercise their rights, users can send a request using the contact details of Data Controller provided in this document.

Cookie Policy

This Website does not use tracking tools. For further information, users can consult the Cookie Policy.

Further information on data processing

Legal defence

The Data Controller may reference user’s personal data in court proceedings or the preparatory stages thereof in defence against any abuse by users themselves in their use of this Website or related services.
Users declare to be aware that the Data Controller may be required to disclose their data at the request of the public authorities.

Amendments to this privacy policy

The Data Controller reserves the right to ammed this privacy policy at any time.

Details on personal data processing:

Data Controller
Bas Medical SA Via Besso n°15 – 6900 Lugano Switzerland
Indirizzo E-mail del Titolare: info@basmedical.ch