Privacy Policy for cdhls.org

pursuant to Art. 13 of Regulation (EU) 2016/679

This policy describes how the personal data of users who visit this website is processed. This information does not apply to other sites, pages, or online services accessible via hyperlinks that may be published on the site but refer to resources external to the Controller’s domain.

This document can be printed using the print command in any browser’s settings.

A. Data Controller

Data Controller
The Data Controller is:
Coalition for Decentralized Healthcare in Life Sciences™
Headquarters: 241 Hamilton Avenue, Stamford CT 06902 | USA
Controller’s email address: info@cdhls.org

B. Purposes and Legal Bases of Processing

Your personal data is processed for the following purposes:

1. Navigation and technical operation of the site

• Data Processed: Navigation data such as IP addresses, domain names of computers, URI/URL addresses, time of the request, and other parameters relating to the user’s operating system and IT environment.
• Legal Basis: Processing is necessary for the pursuit of the legitimate interest of the Controller (Art. 6, par. 1, lett. f) GDPR) to ensure the security and proper functioning of the website.
• Retention Period: Navigation data does not persist for more than 7 days (except for any need to investigate crimes by the judicial authorities).

2. Responding to contact requests (via forms or email)

• Data Processed: Name, surname, email address, and any other personal data voluntarily entered by the user in the message.
• Legal Basis: Processing is necessary for the performance of pre-contractual measures taken at the data subject’s request (Art. 6, par. 1, lett. b) GDPR).
• Retention Period: Data is stored for the time strictly necessary to handle the request and for any subsequent interactions, and in any case no longer than 24 months from the last communication, unless a contractual relationship is established.

3. Details on third-party services and Tracking Tools

This website uses services provided by third parties and Tracking Tools (such as cookies). Non-technical Tracking Tools (e.g., for profiling or marketing purposes) are used only with your explicit consent (Art. 6, par. 1, lett. a) GDPR). For detailed information, please consult our Cookie Policy.

Below are the details of the main third-party services used:

C. Data Recipients

In addition to the Controller, in some cases, other parties involved in the organization of this Website (administrative, commercial, marketing, legal staff, system administrators) or external parties (such as third-party technical service providers, hosting providers, IT companies) may have access to the Data, also appointed, if necessary, as Data Processors by the Controller pursuant to Art. 28 of the GDPR. An updated list of Processors can always be requested from the Data Controller.

D. Transfer of Personal Data outside the European Economic Area (EEA)

Some of the third-party services used by this Website may involve the transfer of your personal data to countries outside the European Economic Area (EEA), particularly to the United States of America.

The Controller ensures that such transfers comply with applicable law (Chapter V of the GDPR), based on one of the following conditions:

• Adequacy Decisions of the European Commission (Art. 45 GDPR), as in the case of the “EU-US Data Privacy Framework”.
• Standard Contractual Clauses (SCCs) adopted by the European Commission (Art. 46 GDPR), supplemented by any additional measures.

For more information on the safeguards adopted for each specific service, you can contact the Controller at the contact details provided.

E. Rights of the Data Subject

As a data subject, you have the right to exercise the following rights, provided for in Articles 15 et seq. of the GDPR, by contacting the Controller at the contact details above:

• Right of access: Obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, to receive a copy of such data.
• Right to rectification: Obtain the rectification of inaccurate personal data concerning you.
• Right to erasure (“right to be forgotten”): Obtain the erasure of personal data concerning you in the cases provided for by law.
• Right to restriction of processing: Obtain the restriction of processing when certain conditions are met.
• Right to data portability: Receive the personal data concerning you in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.
• Right to object: Object at any time to the processing of personal data concerning you which is based on legitimate interest. For direct marketing purposes, the right to object may be exercised at any time and without providing any reason.
• Right to withdraw consent: Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Right to lodge a complaint
You have the right to lodge a complaint with the competent supervisory authority.

F. Nature of data provision and consequences of refusal

The provision of navigation data is necessary for the functioning of the site. The provision of data for other purposes is optional; failure to provide it may make it impossible to obtain what is requested (e.g., receive a response or the newsletter).

G. Automated decision-making processes

This Website does not use fully automated decision-making processes, including profiling, that produce legal effects concerning you or similarly significantly affect you.

H. Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time by giving notice to Users on this page. Therefore, please check this page regularly, referring to the date of the last modification indicated at the bottom.

Definitions and legal references

Personal Data (or Data)

Any information that directly, indirectly, or in connection with other information — including a personal identification number — allows for the identification or identifiability of a natural person.

Usage Data

Information collected automatically through this Website (or third-party services employed in this Website), which can include: the IP addresses or domain names of the computers utilized by the Users who use this Website, the URI addresses (Uniform Resource Identifier), the time of the request, the method utilized to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server’s answer (successful outcome, error, etc.), the country of origin, the features of the browser and the operating system utilized by the User, and the details of the path followed within the Application.

User

The individual using this Website who, unless otherwise specified, coincides with the Data Subject.

Data Subject

The natural person to whom the Personal Data refers.

Data Processor (or Processor)

The natural or legal person, public authority, agency or other body which processes Personal Data on behalf of the Controller.

Data Controller (or Controller)

The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data. The Data Controller, unless otherwise specified, is the owner of this Website.

Tracking Tool

Any technology – e.g., Cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting – that enables the tracking of Users.

Legal references

Unless otherwise specified, this privacy statement relates solely to this Website.