Data privacy

Privacy Notice for Social Network Users

- art. 14 Regulation (EU) 2016/679 (“GDPR”)

This privacy notice describes how Menarini Silicon Biosystems, (“Menarini”), Via Giuseppe di Vittorio, 21 b/3, 40013 Castel Maggiore (BO), ITALY, processes your personal data when you use your profile on the social network such as, by way of example, Facebook, YouTube, Twitter, Instagram, or LinkedIn and similar networks or portals (also “Social Networks”) to interact with Menarini’s profile/pages on those Social Networks, or surf Menarini’s websites while logged in to those Social Networks.

This document only addresses the personal data processing operations carried out by Menarini: your data are in fact collected and processed in the first place by the Social Network on which you have a profile (which acts as “Data Controller” of your personal data), and only if you interact with Menarini’s social accounts, pages and or websites, will Menarini access to and process a small portion of the data about yourself held by the Social Network. Menarini is an “independent Data Controller” in respects to the personal data about you received from the relevant Social Network: this means that Social Networks and Menarini autonomously decide the purposes and methods with which they process the personal data about you they respectively access.

The processing operations carried out by Menarini are described here below. If you are interested in knowing how Social Networks process your data, we invite you to read the Privacy Policies available via your Social Network profile(s).

If you interact with Menarini’s account/page/profile on the Social Network (“Page”), Menarini may process the following personal data about yourself, inferred from your profile:

name, surname, username and other biographical and professional information, age, gender, information voluntarily made public by you or shared via the Social Network by means of posts or other functionalities; your activities on the social network on Menarini’s Page and on the Social Networks, such as “likes”, comments, public posts, tags and hashtags; content of private messages addressed to Menarini.

Moreover, the Social Network –if  you provided your consent via your Social Network profile and browser’s settings- may make available to Menarini additional information about activities and preferences you expressed when surfing the internet. This information may also be collected with instruments such as cookies, web beacons and pixel tags: for more information, we invite you to check your browser settings, your Social Network profile settings or the policies of the websites you visit. Please be informed that when said instruments are used on Menarini websites, the relevant details are provided in the respective cookie and privacy policies.  We clarify that if you have logged in to your account on the Social Network and surf on the internet with the same device, Menarini may be able to detect some of the information connected to your Social Network Profile, such as age group, “likes”, etc., and in some cases also to identify you.

Your data will be processed for the following purposes:

- answer your posts, requests and queries, and enable you to take part in the activities performed via the Page; manage and optimise the Page’s content, perform statistical analyses and market research on the users who interact with the Page or our websites. The legal basis of the processing is Menarini’s legitimate interest  to promote its activities and enhance its company image (art. 6.1.f GDPR).

 - to fulfil its legal obligations, as well as to clear its obligations pertaining to the protection of public health, which require the monitoring, follow-up and reporting to the authorities/other bodies (licensors, licencees, etc.) any information about actual or potential adverse events related to the use of Menarini’s products.  The legal bases of the processing are complying with legal obligations and pursuing a public interest in the field of public health, consisting in ensuring a high standard of safety and quality of Menarini’s products (arts. 6.1.c and 9.2.i GDPR).

- ensure you comply with the Netiquette; enforce Menarini’s legal rights; enforce Menarini’s Code of Ethics and Group Code of Conduct. The legal bases of the processing are pursuing the legitimate interest to avoid abuses committed by internet users via the Page, including infringing the mentioned Codes or any applicable laws, and defend its legal rights  (art. 6.1.f and 9.2.f GDPR).

- carry out promotional campaigns pertaining to Menarini’s activities, products or services (in compliance with the applicable laws on promotional activities of health-related products and services) by means of Menarini’s Social Network account, including by sending ads or messages. The legal basis of the processing is your consent, expressed to the Social Network (art. 6.1.a GDPR).

- sending you targeted ads (“profiling”) pertaining to the activities, products and services outlined at the previous bullet point. The legal basis of the processing is your consent, expressed to the Social Network, also in connection with cookies, Web beacons/trackers, pixel tags. (art. 6.1.a GDPR).

- regarding user data collected in connection with job openings published by Menarini via the Social Networks, assessing and/or establishing a professional relationship. The legal basis of the processing is the performance of a contract or pre-contractual measures aimed at concluding a contract with you (art. 6.1.b GDPR).

In case you publish data pertaining to third parties, it is your responsibility to clear any requirements pertaining to information and consent collection, in compliance with the applicable data protection laws.

Regarding your consent to the processing of the data about yourself that Menarini receives via your Social Network profile, we clarify that: (i) the relevant consents are conferred by you when you register with the Social Networks, and you may personalise them at any time (Menarini does not, however, control these operations in any way –they are managed entirely by the Social Networks); (ii) data processed by Menarini are those made available by the Social Network: this means Menarini is not responsible for any unauthorised disclosure of information by the Social Network or for the receipt of unwanted ads/messages, in breach of the options you have selected.

Your Data will be processed mainly electronically, and will be entered in its IT systems in compliance with the applicable data privacy laws, including data security and confidentiality aspects, in line with the principles of lawfulness and fairness. Data will be stored for as long as strictly necessary to achieve the specific purposes pursued - in any event, the criterion used to determine the storage period is based on compliance with time limits permitted by law and the principles of data minimisation, storage limitation or rational management of our archives.

Menarini’s staff belonging to the following categories are authorised to process the user’s data: technical and administrative staff, IT staff, product managers, internal audit and compliance as well as other staff members who require processing the data for performance of their job duties.

The Data can be communicated also in foreign countries and/or outside the EU (“Third Countries”) to other companies of the Menarini Group (also located abroad) for administrative and accounting purposes pursuant to Article 6.1.(f) and Recital 48 of the GDPR.

Additionally, the Data can be communicated, also in Third Countries, to Menarini’s Supervisory Body, to third-party companies, such as providers and sub-providers of IT and Cloud Computing services, networking service providers which manage Menarini’s Pages and companies that carry out consulting activities (e.g., tax, administrative, etc.) on Menarini’s behalf, institutions, authorities, public bodies for their institutional purposes, based on the applicable law; third parties in case of audits, mergers and acquisitions (also abroad). Recipients shall process data for the purposes indicated above and in compliance with the applicable laws. 

***

Regarding any transfer of Data outside the EU, including in countries whose laws do not guarantee the same level of protection to personal data privacy as that afforded by EU Law, the Controller informs that the transfer shall in any event take place in accordance with the methods permitted by the GDPR, such as, for example, on the basis of the user’s consent, on the basis of the Standard Contractual Clauses approved by the European Commission, by selecting parties enrolled in international programmes for free movement of data (e.g. EU-USA Privacy Shield) or operating in countries considered safe by the European Commission.

By contacting the Data Protection Officer of Menarini, who may be reached at the email address  dpo@menarini.com (please replace “at” with “@” and “dot” with “.”), you may exercise the rights afforded by arts. 15-22 GDPR, including: obtain confirmation of the existence of personal data which relate to you, check its content, origin, correctness, location (also with reference to any Third Countries), request a copy, request correction and in cases provided by law, restriction of processing, deletion, oppose to direct contact activities (also limited to particular means of communication). Likewise, you may always express any concern you may have about the processing of your data or lodge a complaint with the Data Protection Authority. To withdraw the consent(s) you conferred to Social Networks you need to address your request directly to the Social Networks themselves.

****