1. Data Controller

Pharmaturefy, with registered office in Via Torino, 32 – 20123 Seregno (MI), Italy, registered in the Companies Register with number ITA-5614723 and VAT number IT64735492282FHTPR (hereinafter, “Pharmaturefy” or the “Data Controller“), as the data controller of personal data, is required to provide users (hereinafter, the “Users“) with the information required by art. 13 of the European Regulation 679/2016 (hereinafter, “GDPR“) concerning the processing of personal data collected through the website [insert website URL] (hereinafter, the “Site“).

2. Personal Data Collected

Pharmaturefy collects the following personal data of Users:

• Personal data: name, surname, email address, telephone number, address of residence or shipping.
• Browsing data: IP address, type of browser and device used, date and time of access to the Site, pages visited and duration of browsing.
• Data relating to Users’ activities on the Site: interactions with the services offered, products purchased, comments and reviews.
• Optional data: data relating to health, well-being and drug use, voluntarily provided by Users in order to use specific services offered by Pharmaturefy.

Users’ personal data are collected through various methods, including:

• Contact forms: the contact forms on the Site to request information or assistance.
• Registration to the Site: the registration procedure to the Site, which allows Users to create a personal account.
• Product purchase: the product purchase procedure on the Site.
• Interactions with the services offered: the use of the services offered by Pharmaturefy, such as consulting drug information or booking telemedicine services.
• Email communications: email communications sent by Users to Pharmaturefy.

Pharmaturefy processes Users’ personal data exclusively for the purposes specifically indicated at the time of collection, such as:

• Provide information and assistance to Users.
• Fulfill product purchase orders.
• Offer telemedicine services.
• Improve the quality of the services offered.
• Send informative and promotional communications.
• Fulfill legal obligations.

3. Legal Basis for Processing

The processing of Users’ personal data by Pharmaturefy is based on the following legal bases:

• Consent: the consent of Users to the processing of their personal data for the specific purposes indicated at the time of collection.
• Contract performance: the processing of Users’ personal data is necessary for the performance of a contract with them, such as for the fulfillment of a product purchase order.
• Compliance with a legal obligation: the processing of Users’ personal data is necessary to comply with legal obligations to which the Data Controller is subject, such as in matters of accounting and taxation.
• Legitimate interest: the processing of Users’ personal data is necessary for the pursuit of a legitimate interest of the Data Controller, such as to improve the quality of the services offered or to send informative and promotional communications.

4. Data Retention Period

Users’ personal data will be stored for a period of no longer than is necessary to achieve the purposes for which they were collected and, in any case, in accordance with the terms of the law.

In particular, Users’ personal data will be stored for the following periods of time:

• Personal data: for the entire duration of the contractual relationship with the User and for a period of 10 years from its termination.
• Browsing data: for a period of 2 years.
• Data relating to Users’ activities on the Site: for a period of 2 years.
• Optional data: for a period of 2 years from their provision by the User.

At the end of the retention period, Users’ personal data will be deleted or anonymized irreversibly.

5. Processing Methods

Personal data will be processed by Pharmaturefy using manual and electronic tools, with appropriate security measures to ensure the confidentiality and protection of the data.

The processing will be carried out mainly by the internal staff of Pharmaturefy, authorized to process the data for the purposes indicated above.

In some cases, personal data may be processed by external subjects, appointed as data processors by Pharmaturefy, who provide services such as IT maintenance or the sending of communications.

These subjects will operate under the direct control of Pharmaturefy and will be obliged to comply with the instructions received.

6. Data Sharing

Personal data will not be shared with third parties without the prior consent of Users, except in the following cases:

• Judicial authorities: personal data may be disclosed to judicial authorities if this

​