Privacy Notice pursuant to Article 13 of EU Regulation 2016/679
Privacy Notice of the Fondazione Quotidiano Sanità website
Fondazione Quotidiano Sanità with registered office at via Giacomo Peroni, 400, 00131 Roma (RM) (hereinafter also referred to as the “Controller” or “FondazioneQS”), is committed to protecting the privacy of all individuals who access the services provided by the Controller (the “Services”). This document (the “Privacy Notice”) has been prepared to allow you to understand how your personal data, as defined below, will be processed in the context of the Services, so that you may give explicit and informed consent to the processing described below, if you deem it appropriate. In general, any information or personal data you provide to FondazioneQS will be processed in accordance with internationally recognized principles of lawfulness, fairness, transparency, purpose and storage limitation, data minimization, accuracy, integrity, and confidentiality.
Data Controller
Please be informed that, pursuant to EU Regulation 679/2016 (the “Regulation”), your personal data will be processed by Fondazione Quotidiano Sanità as the Data Controller (“Controller”). The contact details of the Data Controller are: Fondazione Quotidiano Sanità, Via della Stelletta 23, 00186 Roma; e-mail:contatti@fondazionequotidianosanita.org.
Types of Data Processed
The Controller will process your personal data collected in the context of the requested services, contractual relationship, and/or pre-contractual measures related to the Services. including, but not limited to: first and last name, mobile phone number, email address, area of specialization, and tax code. During the provision of the Services, the Controller may also collect additional personal data you provide by completing forms, including those related to third-party services, to update and complete your profile.
Purpose, Legal Basis, and Optional Nature of the Processing
Your personal data will be processed for the following purposes:
- performance of the requested services, including, for example, the provision of information or advice regarding the activities carried out by FondazioneQS, and responses to requests for information submitted via the online form and/or chat;
- compliance with legal obligations applicable to the Controller;
- allowing the Controller to defend its rights and interests in or out of court.
The legal bases for processing purposes a), b), and c) are respectively: Art. 6(1)(b), Art. 6(1)(c), and Art. 6(1)(f) (i.e., legitimate interest for legal defense) of the Regulation.
Providing your personal data for purposes a) and b) is optional; however, failure to provide such data will prevent the performance of the requested services, contract, or pre-contractual measures.
For the purposes sub a), the Data Controller may also process personal data that you subsequently provide by filling in forms or forms, including those relating to third-party services, in order to update and complete your personal data.
It is also possible that personal data you have sent to the Data Controller may pertain to third parties.
In such cases, you act as an independent data controller, assuming all legal obligations and responsibilities. In this regard, you hereby grant the Data Controller the broadest indemnification against any dispute, claim, or request for compensation for damages arising from processing, etc., that may be received by the Data Controller from third parties whose personal data has been processed through your voluntary submission in violation of applicable data protection laws. In any case, should you provide or otherwise process personal data of third parties, you hereby guarantee, assuming all related liability, that such specific instance of processing is based on a suitable legal basis that legitimizes the processing of the information in question.
Recipients and Transfers of Personal Data
Your personal data may be shared with:
- Individuals authorized by the Controller under Article 29 of the Regulation due to their job duties (e.g., employees and system administrators);
- Service providers (e.g., lawyers, accountants, consultants, debt collection companies, etc.) acting as data processors under Article 28 of the Regulation or as independent controllers;
- Entities or authorities to whom your data must be disclosed by law or by order of the authorities.
The full and updated list of data recipients is available upon request from the Controller using the contact details provided above.
Transfer of Data Outside the EU
If your personal data is transferred to countries outside the European Economic Area (“EEA”), the Controller ensures that the transfer will be made in accordance with one of the lawful mechanisms permitted by current regulations. These include the adoption of Standard Contractual Clauses approved by the European Commission, reliance on organizations adhering to international data transfer frameworks, or transfers to countries deemed adequate by the European Commission. More information is available from the Controller upon request.
Data Retention
Your personal data will be retained only for as long as necessary for the purposes for which it was collected, in accordance with the principles of data minimization and storage limitation under Article 5(1)(c) and (e) of the Regulation.
Further retention may be required under applicable law. Once retention periods have expired, personal data will be deleted in such a way that it can no longer be reconstructed or read. More information is available from the Controller.
Data Processing Methods
In relation to the above purposes, personal data will be processed using manual, electronic, and telematic tools with methods strictly related to the purposes and ensuring data security and confidentiality, as well as compliance with the legal obligations in force.
Your Privacy Rights
You have the right to request from the Controller, at any time: access to your personal data; rectification or erasure; restriction of processing under Article 18 of the Regulation; withdrawal of consent under Article 7 of the Regulation; data portability under Article 20 of the Regulation. You also have the right to lodge a complaint with the competent supervisory authority (the Italian Data Protection Authority) or bring a claim before the Judicial Authority under Article 77 of the Regulation, if you believe that your data has been processed unlawfully. You may also object to the processing of your data under Article 21 of the Regulation, indicating the reasons for your objection. The Controller reserves the right to evaluate your request, which may be denied if there are compelling legitimate grounds to continue the processing that override your interests, rights, and freedoms. Requests should be submitted in writing to the Controller using the contact details above.
Version dated April 24, 2026