{"id":10200,"date":"2024-10-30T12:50:31","date_gmt":"2024-10-30T11:50:31","guid":{"rendered":"https:\/\/dermacademy.it\/privacy-policy\/"},"modified":"2026-05-26T09:23:47","modified_gmt":"2026-05-26T07:23:47","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/dermacademy.it\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<h2>INFORMATION ON THE PROCESSING OF PERSONAL DATA<\/h2>\n<p><strong>PROMOTIONAL ACTIVITIES<\/strong><\/p>\n<p><strong>Articles 13 and 14 of Regulation (EU) 2016\/679 (GDPR)<\/strong><\/p>\n<p>Dermacademy Institute srl (hereinafter referred to as the Institute), acting as Data Controller with registered office in Pisa, Via Darsena 2, hereby provides information regarding the methods of processing personal data for activities related to the dissemination and promotion of its Services (marketing).<\/p>\n<p>These activities, carried out in particular through newsletters and digital communications containing promotional information or invitations to events and initiatives, involve the processing of the identifying personal data of individuals who have requested to receive such information via email, including by Dermaveris Institute, which carries out certain processing activities jointly with Dermacademy.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>DATA PROTECTION OFFICER<\/strong><\/p>\n<p>The Institute has appointed a Data Protection Officer, who can be contacted at the following email address: <a href=\"mailto:dermacademy.dpo@gmail.com\">dermacademy.dpo@gmail.com<\/a>.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>PURPOSE OF PROCESSING AND LEGAL BASIS<\/strong><\/p>\n<p>The purpose of the processing is to <strong>advertise and promote<\/strong>, including through the sending of advertising, informational, and promotional materials, the <strong>services<\/strong> offered by <strong>Dermacademy S.r.l.<\/strong><\/p>\n<p>The legal basis for the processing of personal data is found, pursuant to Article 9(2)(a) of the GDPR, in the consent provided by the data subjects, and pursuant to Article 6(f) of the GDPR.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>SOURCE OF PERSONAL DATA<\/strong><\/p>\n<p>The personal data processed by the Institute are provided either directly by the data subjects themselves or by their legal representatives.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>METHODS OF PROCESSING<\/strong><\/p>\n<p>The processing of personal data is carried out electronically, in compliance with professional secrecy and confidentiality obligations, by specifically authorized individuals pursuant to Articles 28 and 29 of the GDPR and Article 2-quaterdecies of Legislative Decree no. 196\/03, following the adoption of appropriate security measures pursuant to Article 32 of the GDPR and in accordance with the principles of lawfulness, purpose limitation, and data minimization.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>RECIPIENTS OR CATEGORIES OF RECIPIENTS TO WHOM PERSONAL DATA MAY BE DISCLOSED<\/strong><\/p>\n<p><strong>Dermacademy S.r.l.<\/strong> will communicate the data processed for marketing purposes to Dermaveris, which will process them under a joint controllership arrangement. The Data Controller may not disclose the data to other parties unless required by law.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>RETENTION PERIOD OF PERSONAL DATA OR CRITERIA USED TO DETERMINE SUCH PERIOD<\/strong><\/p>\n<p><strong>Dermacademy S.r.l.<\/strong>, pursuant to Article 5 of the GDPR, retains personal data for a period of 1 year from the date consent is obtained (or alternatively until December 31 of the year following the acquisition of consent). Before this deadline, the Institute will request renewed consent; if consent is not renewed, the personal data will be deleted.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>TRANSFER OF PERSONAL DATA<\/strong><\/p>\n<p>The personal data processed are not transferred outside the European Union or the European Economic Area. It is understood that, if necessary, the Institute may relocate its servers outside the EU, ensuring from now on that any transfer of data outside the EU will take place in compliance with applicable legal provisions and after entering into the standard contractual clauses provided by the European Commission.<\/p>\n<p><strong>&nbsp;<\/strong><\/p>\n<p><strong>DATA SUBJECT RIGHTS AND HOW TO EXERCISE THEM<\/strong><\/p>\n<p>Data subjects may exercise the rights set out in Articles 15 to 22 of the GDPR, including the right to obtain access to personal data, rectification of inaccurate data, completion of incomplete data, and, where provided by law, restriction, deletion, or objection to processing, by submitting a specific request to the Data Controller indicated above or by email to <a href=\"mailto:dottgiovannimenchini@dermacademy.it\">dottgiovannimenchini@dermacademy.it<\/a> or the Data Protection Officer at <a href=\"mailto:dermacademy.dpo@gmail.com\">dermacademy.dpo@gmail.com<\/a>.<\/p>\n<p>If the data subject believes that their data are being processed in a manner that does not comply with current legislation, they may file a complaint with the Data Protection Authority or seek judicial remedy before the competent authority.<\/p>\n<p>&nbsp;<\/p>\n<p style=\"text-align: right;\">THE DATA CONTROLLER<\/p>\n<p><a class=\"scarica-privacy\" style=\"font-family: inherit;\" href=\"https:\/\/dermacademy.it\/wp-content\/uploads\/2026\/05\/a-Dermacademy-informativa-generale-sul-trattamento-dei-dati-carta-intestata.docx\">General Information Notice on Data Processing<\/a><br \/>\n<a class=\"scarica-privacy\" href=\"https:\/\/dermacademy.it\/wp-content\/uploads\/2026\/05\/Dermacademy-INFORMATIVA-PRESTAZIONI-SANITARIE-1.docx\">Information Notice for Diagnosis and Treatment (Healthcare Services)<\/a><br \/>\n<a class=\"scarica-privacy\" href=\"https:\/\/dermacademy.it\/wp-content\/uploads\/2026\/05\/Dermaveris-informativa-contitolarita-carta-intestata.docx\">Information Notice Regarding Joint Data Processing Activities<\/a><br \/>\n<a class=\"scarica-privacy\" href=\"https:\/\/dermacademy.it\/wp-content\/uploads\/2026\/05\/Dermacademy-All1-MODELLO-esercizio-diritti-in-materia-di-protezione-dei-dati-personali-carta-intestata.docx\">Data Subject Rights Request Form<\/a><\/p>\n<p><strong>Last updated on 21-May-2025<\/strong><\/p>\n<p><strong>Effective date: 12-Nov-2024<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>INFORMATION ON THE PROCESSING OF PERSONAL DATA PROMOTIONAL ACTIVITIES Articles 13 and 14 of Regulation (EU) 2016\/679 (GDPR)&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"class_list":["post-10200","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/dermacademy.it\/en\/wp-json\/wp\/v2\/pages\/10200","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dermacademy.it\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/dermacademy.it\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/dermacademy.it\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dermacademy.it\/en\/wp-json\/wp\/v2\/comments?post=10200"}],"version-history":[{"count":4,"href":"https:\/\/dermacademy.it\/en\/wp-json\/wp\/v2\/pages\/10200\/revisions"}],"predecessor-version":[{"id":10254,"href":"https:\/\/dermacademy.it\/en\/wp-json\/wp\/v2\/pages\/10200\/revisions\/10254"}],"wp:attachment":[{"href":"https:\/\/dermacademy.it\/en\/wp-json\/wp\/v2\/media?parent=10200"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}