Privacy Policy

1. Data Controller

The Data Controller is:

EcosysPharma S.r.l.
Registered office: Via Emilia, 47, 00187, Roma
Tax Code and VAT Number: 18530551003
Email: info@ecosyspharma.com
Certified email address — PEC: ecosyspharma@pec.it

For any request concerning the processing of personal data, users may contact EcosysPharma S.r.l. at the email address indicated above.

2. Personal Data Collected

Through the contact form available on the website, EcosysPharma may collect the personal data voluntarily provided by the user, including:

• first name and surname;

• email address;

• company or organization;

• company size, where requested;

• service of interest;

• content of the message;

• any other information voluntarily included by the user in the form.

Users are invited not to include unnecessary information in the free-text field and, in particular, not to provide special categories of personal data, such as information concerning health, ethnic origin, religious beliefs or political opinions.

3. Purposes of Processing

Personal data submitted through the contact form is processed exclusively for the following purposes:

• receiving and managing the user’s request;

• contacting the user and initiating a first introductory discussion;

• providing information about the EcosysPharma services requested by the user;

• assessing a potential professional or commercial collaboration;

• responding to any pre-contractual requests made by the user.

Personal data will not be used for newsletters, automated promotional communications or profiling activities unless the user subsequently provides specific and separate consent.

4. Legal Basis for Processing

The legal basis for the processing is the performance of pre-contractual measures taken at the request of the data subject, pursuant to Article 6(1)(b) of the GDPR.

The user independently chooses to complete the contact form and request contact from EcosysPharma. The processing of personal data is therefore necessary to receive, assess and respond to the request.

Consent is not required for processing that is strictly necessary to manage and respond to the user’s request.

5. Nature of Data Provision

Providing personal data is optional.

However, failure to provide the information marked as mandatory, particularly the user’s name, email address and message, may prevent EcosysPharma from processing the request and contacting the user.

6. Processing Methods

Personal data is processed using electronic and digital tools in accordance with the principles of lawfulness, fairness, transparency, data minimization and purpose limitation.

EcosysPharma adopts reasonable technical and organizational measures to protect personal data against unauthorized access, loss, destruction, disclosure or unlawful alteration.

Personal data is not subject to exclusively automated decision-making processes or profiling.

7. Data Retention Period

Personal data collected through the contact form will be retained for the period necessary to manage the request and any subsequent communication with the user.

If no contractual or professional relationship is established, the data will be deleted within 12 months from the closure of the request, unless a longer retention period is required to comply with legal obligations or to establish, exercise or defend legal claims.

If the initial contact leads to a contractual relationship, personal data may be retained for the additional periods required under applicable civil, accounting and tax legislation.

8. Recipients of Personal Data

Personal data may be processed by:

• authorized directors, employees and collaborators of EcosysPharma;

• IT, hosting, website maintenance and email service providers;

• providers of the platform used to manage the website and contact form;

• professional advisers, where necessary;

• public authorities or other entities where required by law.

Where required, service providers processing personal data on behalf of EcosysPharma will be appointed as data processors pursuant to Article 28 of the GDPR.

Personal data will not be publicly disclosed or sold to third parties.

9. Transfers Outside the European Economic Area

Some technology providers used for the operation of the website, contact form or email services may process personal data outside the European Economic Area.

In such cases, personal data will be transferred in accordance with Articles 44 and following of the GDPR, on the basis of an adequacy decision adopted by the European Commission, Standard Contractual Clauses or other safeguards recognized under applicable law.

10. Browsing Data and Cookies

During normal website browsing, the IT systems used to operate the website may collect certain technical information, such as the user’s IP address, browser type, device used, date and time of the request and pages visited.

This information is processed exclusively to ensure the proper functioning and security of the website, obtain aggregated statistical information and prevent misuse.

If non-essential cookies or tracking technologies are introduced in the future, the website will implement the appropriate information notices and consent management tools required by applicable law.

11. Data Subject Rights

Under the conditions provided by the GDPR, users may exercise the following rights:

• obtain confirmation as to whether their personal data is being processed;

• access their personal data;

• request the correction of inaccurate data or the completion of incomplete data;

• request the deletion of personal data;

• request the restriction of processing;

• object to processing, where applicable;

• receive personal data in a structured, commonly used and machine-readable format, where applicable;

• lodge a complaint with the competent supervisory authority.

Requests may be submitted to:

info@ecosyspharma.com

EcosysPharma will respond within the time limits established by applicable law.

12. Right to Lodge a Complaint

Users who believe that their personal data is being processed in breach of applicable data protection law may lodge a complaint with:

The Italian Data Protection Authority — Garante per la protezione dei dati personali

Alternatively, users may contact the competent supervisory authority in the EU Member State where they reside or work.

13. Changes to this Privacy Policy

EcosysPharma may amend or update this Privacy Policy in response to legal, organizational or technical developments.

The updated version will be published on this page together with the date of the latest revision.