Data Privacy Statement for Information Request

In compliance with Articles 13 and 14 of European Union Regulation 2016/679 on the protection of personal data (hereinafter “GDPR”), COSMED S.R.L. (hereinafter “COSMED”) provides the following information regarding the use of personal data (hereinafter “Data”) provided by you.

1. Data controller

The Data Controller is COSMED S.R.L., with registered office in Albano Laziale - Fraz. Pavona (RM), 00041, via dei Piani di Monte Savello 37, Share Capital €99,000 I.V., VAT number 01284691001, Tax Code and registration number in the Register of Companies of Rome 04646530586, R.E.A. RM-453169, P.E.C. This email address is being protected from spambots. You need JavaScript enabled to view it., e-mail This email address is being protected from spambots. You need JavaScript enabled to view it., telephone +39 06.93.15.492.
COSMED has not appointed a Data Protection Officer, as it does not process data requiring such designation under Article 37 of the GDPR.

2. Purpose of collection and legal basis of the processing

Your Data are collected for the management of the organizational and administrative procedures necessary to respond to your request for information about COSMED and its products and services (hereinafter “Main Processing”).
Connected to the Main Processing, your Data may also be processed for sending commercial communications (hereinafter “Ancillary Processing”). Together, the Main and Ancillary Processing constitute the “Purpose.”

Provision of your Data is mandatory for purposes connected to the Main Processing; without it, COSMED cannot respond to your request.
Consent is not required for the Main Processing, as the processing is lawful under the legal bases indicated above. Consent is required only for the Ancillary Processing, which relates to sending commercial communications.

3. Processing methods

Data will be entered into COSMED’s information system and processed lawfully by authorized and trained personnel pursuant to Article 29 of the GDPR, in a transparent and responsible manner, using manual and partially automated tools to perform the operations indicated in Article 4.2 of the GDPR: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion, and destruction. Data will not be subject to automated decision-making processes, including profiling.

4. Transfer of Data

Your Data may be communicated to external parties and/or companies collaborating on the organizational, administrative, and tax procedures related to the Purpose, which may operate in countries outside the European Union. This includes companies providing administrative and accounting services, sales and support services on behalf of COSMED, and companies controlled by COSMED.
Data may also be communicated to Italian or EU authorities and public bodies if required by law.

5. Retention period

Your Data, processed for the purposes indicated above, will be retained in compliance with the principles of necessity and proportionality for a period of 5 (five) years, after which they will be deleted, without prejudice to any legal obligations requiring longer retention.

6. Rights of the person

Your Data will be processed in accordance with your rights under Articles 15–22 of the GDPR, including the rights of access, rectification, erasure, restriction of processing, data portability, and objection to processing. You may exercise your rights or lodge complaints regarding GDPR violations with the Data Controller above or with the Data Protection Authority.