The following privacy policy, which is considered information in accordance with Article 13 of EU Regulation No. 2016/679 (hereinafter referred to as the “Regulation”), describes the methods of processing personal data by the MEDI-THEFT platform, available electronically at the following address medi-theft.aifa.gov.it . These provisions do not apply to other websites, pages, or online services that may be accessed through hyperlinks published within the platform.

PURPOSE AND LEGAL BASIS OF PROCESSING

Personal data processed through the platform, requested at the time of user registration, are collected to enable accredited entities to enter reports in accordance with the functions and tasks assigned to CInMED (with the possibility of adding other institutions) for the purpose of public interest in accordance with Article 6(e) of the Regulation.

DATA CONTROLLER

The data controller – concerning the data of accredited entities in Montenegro – is the Institute for Drugs and Medical Devices of Montenegro, located at Bulevar Ivana Crnojevića 64A, Podgorica. Email: [email protected]; Phone: +382 (20) 310 280.

CONTACT SPOKESPERSON

You can contact the CInMED spokesperson at the address [email protected].

PERSONAL DATA SUBJECT TO PROCESSING

In addition to user data, after consultation with the institution, data relating to identified individuals or individuals who can be identified may be processed.

During the operation of the platform, computer systems and software procedures used acquire certain personal data whose transmission is implicit in the use of internet communication protocols. This category of data includes IP addresses or domain names of computers and terminals used by users, addresses in URI/URL (Uniform Resource Identifier/Locator) notation of requested resources, time of request, method used in submitting the request to the server, size of the file obtained as a response, numerical code indicating the status of the response given by the server (successful, unsuccessful, etc.), and other parameters relating to the user’s operating system and IT environment.

These data, necessary for the use of web services, are processed for the purpose of:

• obtaining statistical information on the use of services (e.g., number of visitors per hour or day, geographic areas of origin, etc.)
• verifying the proper functioning of the services.

   

DATA RETENTION PERIOD

The data provided by the user will be processed for as long as necessary to perform the functions and tasks assigned to CInMED (Data Controllers).

DATA RECIPIENTS

CInMED staff (or alternatively, data processors) process the collected personal data, acting in accordance with specific instructions. In carrying out processing activities, CInMED (or alternatively, data controllers) may use the assistance of third parties, consultants, software and service providers, all appointed as Data Processors in accordance with Article 28 of the Regulation. They operate through identified and designated personnel to ensure maximum data security.

RIGHTS OF DATA SUBJECTS

Data subjects have the right to obtain from the Data Controller, in the cases provided for, access to personal data, as well as rectification or erasure of the same, or restriction of processing concerning them (Article 15 of the Regulation). A specific request to CInMED can be made by contacting CInMED via the email address [email protected] or by contacting the CInMED spokesperson at the email address provided above.

RIGHT TO LODGE A COMPLAINT

If data subjects believe that the processing of personal data concerning them infringes the provisions of the Regulation, they have the right to lodge a complaint with the supervisory authority for the protection of personal data, in accordance with Article 77 of the Regulation, or to seek other appropriate legal remedies (Article 79 of the Regulation).

DATA PROCESSING LOCATION

The personal data of users of this website processed by the data controller are stored within the European Union.