Processing Delegate/Witness Data Policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA OF THE DELEGATE/WITNESS

This privacy policy is provided to you by Salvator Mundi International Hospital S.r.l., (P.IVA no. 09023871008), with registered office in Rome (RM) - Viale delle Mura Gianicolensi 67, hereinafter referred to as "SMIH" as the Data Controller, in relation to the processing of your personal data. The following information is provided in this regard:

PURPOSE AND LEGAL BASIS OF PROCESSING

The processing of your data as a delegate or witness, acquired through the request form for the withdrawal of medical records, is aimed at verifying your identity and/or the personal capacity declared. For this purpose, the processing of your personal data is necessary to fulfill a legal obligation for the withdrawal of clinical documentation, in accordance with Article 6, paragraph 1, letter c) of EU Regulation 2016/679. The communication of personal data is mandatory, as failure to communicate it prevents the Data Controller from releasing the requested documentation.

RECIPIENTS AND SCOPE OF COMMUNICATION OF PERSONAL DATA

Data processing will be carried out using paper and/or electronic tools by appropriately authorized personnel of the Data Controller. Any dissemination of data is excluded, but data may also be processed by third parties in a contractual or conventional relationship for the execution and assistance of services provided to the Data Controller and who operate as Data Processors.

DATA RETENTION PERIOD

In order to protect the interests and rights of the Data Controller, the data acquired with the delegation form will be stored for a period of 10 years from their conferment, unless a different term is provided by law.

METHODS FOR EXERCISING DATA SUBJECT RIGHTS

As a data subject in the context of personal data processing, the GDPR grants you the exercise of specific rights. In particular, you have the right to obtain from the Data Controller, in the cases provided, access to your personal data or their erasure or the restriction of processing concerning you or to object to processing (Articles 15 et seq. of the Regulation).

Should you believe that the processing of your personal data occurs in violation of the provisions of the Regulation, you have the right to lodge a complaint with the Garante (Italian Data Protection Authority), as provided by Article 77 of the Regulation itself, or to appeal to the appropriate judicial authorities (Article 79 of the Regulation).

Rights may be exercised by a simple request to be forwarded to the Data Contact Person – Healthcare Directorate Area by writing to the following address: Salvator Mundi International Hospital S.r.l., Via delle Mura Gianicolensi 67/77, 00152 Rome, or by sending an email to smih_direzionesanitaria@upmc.it, or by contacting the Hospital's Data Protection Officer by writing to: Salvator Mundi International Hospital – Responsabile della Protezione dei dati personali, Viale delle Mura Gianicolensi 67/77, 00152 Rome; or by sending an email to smih_dpo@upmc.it.