Terms and conditions

PRIVACY INFORMATION ON THE PROCESSING OF PERSONAL DATA THROUGH COOKIES

This information governs the processing of personal data through the use of cookies, carried out by Jennifer Erhabor (hereinafter, the "Owner"), in compliance with current data protection regulations, including, in particular, the EU Regulation 2016/679 (hereinafter, "GDPR"), through the INFERMIERAJAY APP (hereinafter, "APP").

1. Identity and contact details of the data controller

The data controller is J-care srl P.IVA: IT11830790967Pec: j-care@legalmail.it


Since the Data Controller is established in Italy, no representative has been appointed.

2. Contact details of the data protection officer

The Data Controller has not appointed a data protection officer.

3. Processing methods

3.1 Cookies 

Cookies allow you to collect information on navigation performed, they can be stored permanently on the user's computer and have a variable duration (so-called persistent cookies), just as they can disappear when the browser is closed or have a limited duration (so-called. session cookies).

Cookies can be installed by the APP that the user is visiting or they can be installed by other websites that provide services of various kinds to this APP (so-called third-party cookies).

3.2 Technical cookies


  • Navigation and functional and session cookies: navigation cookies allow the APP to function properly. The use of CDs session cookies (which are not stored permanently on the user's device and are automatically deleted when the browser is closed) is strictly limited to the transmission of identifiers for individual sessions. These cookies are used to allow the safe and effective use of the APP

Name

Length

infermierajay.auth

200 days

The Owner uses, for example:

  • ​Statistical cookies: the APP uses statistical cookies created directly by the Data Controller, as the first party, or supplied by third parties. In the latter case, suitable tools have been adopted to reduce their identifying power, also by masking significant portions of the IP addresses thus treated. Furthermore, the use of these third-party statistical cookies has been subject to contractual obligations which commit the third party to use them exclusively for the provision of the service, to keep them separately and not to "enrich" them or not to "cross" them with other information of which they have. The APP uses Google Analytics and Hotjar cookies.

  • Navigation data and environmental variables: the IT systems and procedures used to operate the APP automatically acquire, during their natural operation, some personal data relating to user navigation, including environmental variables. This category of data includes, for example:

  • the IP addresses of the computers used by users who use the service;

  • the number of accesses;

  • the pages used;

  • the date and time of access;

  • the URL your browser was in before viewing our page;

  • the type of navigation browser;

  • the operating system used.

3.3 Non-technical cookies

Third party cookies Google Analytics(https://policies.google.com/privacy) and Hotjar (https://www.hotjar.com/legal/policies/privacy)

4. Delete and disable cookies

To delete cookies you need to follow the guide according to your browser. Below are some guides for the most used browsers:

Google Chrome: https://support.google.com/chrome/answer/95647

5. Purpose of the processing and legal basis of the processing

In relation to personal data processed through technical cookies in order to allow correct use of the APP, the communication of personal data is a contractual obligation; without this treatment given that without this treatment the fully functional web APP could not be made available in accordance with the terms and conditions of use, while it is to be considered optional in relation to non-technical cookies. In the latter case, failure to provide such data will only make it impossible to provide a personalized service. In the latter case, the consent of the interested party, expressed in accordance with current legislation, constitutes a legal basis.. 

In relation to the data provided voluntarily by email, the processing of personal data is not a contractual obligation, but a treatment based on the legitimate interest of the Data Controller to respond to the interested parties; without this treatment it would not be possible to respond to the requests made by the interested party.

In relation to the data provided voluntarily by email, the processing of personal data carried out allows us to respond to requests from interested parties.

The legitimate interest of the Data Controller to respond to the interested parties constitutes the legal basis of the processing.

7. Methods of expressing consent

Consent to the processing of personal data using non-technical cookies can be expressed by clicking on a specific box presented within a banner.

8. Source from which the personal data originates and categories of data

Only the data provided by the user in accordance with this information, collected through the APP, will be processed. Data from sources accessible to the public will not be processed. The personal data of the interested party will be processed. Particular data pursuant to art. 9 of the GDPR.

9. Recipients and any categories of recipients of personal data

The recipients of the user's personal data may be:

  • Companies offering information society services, including, in particular, those offering hosting services; 

  • [Nothing to add]

10. Data Transfer

The Data controller intends to transfer personal data to a third country or to an international organization. 

These subjects could be represented, by way of example, by:

  • Companies offering information society services, including, in particular, those offering hosting services; 

  • Communication company service providers;

  • [Nothing to add]

The transfer of personal data to these subjects, if established in a third country or an international organization, is carried out in the presence of an adequacy decision by the European Commission, which has verified how the third country, the territory or one or more specific sectors within the third country, or the international organization in question ensure an adequate level of protection of your rights. In the absence of such decisions, the Data Controller - or if he deems it appropriate in any case - reserves the right to conclude specific separate agreements which oblige these subjects to adopt adequate security measures, including organizational ones, aimed at offering appropriate guarantees regarding his rights. Google Inc., in particular, is contractually bound to ensure adequate protection of the rights of the data subject. The data may thus be transferred to countries belonging to the European Union, including but not limited to Italy, France and Germany.

To obtain a copy of such data or the place where they were made available, simply send the relevant request to the address: privacy@infermieraprofessionale.com

11. Personal data retention period

Personal data processed and stored in order to allow correct use of the APP are processed and stored for a period not exceeding 12 months starting from the date of the single collection.

The Data Controller reserves the right, in any case, to request the interested party to renew his consent to the processing and/or to verify the consents already expressed.

12. Optional consent and consequences of non-consent

In relation to the personal data processed in order to allow a correct use of the APP, the communication of personal data is a contractual obligation in relation to technical cookies, given that without this treatment the perfectly functioning APP could not be made available while it is considered optional in relation to technical cookies. In the latter case, failure to provide such data will only make it impossible to provide a personalized service.

Rights of the interested party

13. Right to object

The user, as data subject, has the right to object, at any time for reasons related to his particular situation, to the processing of personal data concerning him, pursuant to article 6, paragraph 1, letters e) or f) of the GDPR, including profiling based on these provisions. The Data controller refrains from further processing personal data unless he demonstrates the existence of binding legitimate reasons for proceeding with the processing which prevail over the interests, rights and freedoms of the interested party or for the assessment, exercise or defense of a right in court.

If personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you carried out for these purposes, including profiling insofar as it is connected to such direct marketing.

In case of opposition to the processing for direct marketing purposes, the personal data are no longer processed for these purposes. It is specified that the interested party's right to object to the processing of their personal data for the aforementioned purposes may also be exercised only in part, i.e. by opposing, for example, only the sending of promotional communications via automated and/or digital tools, or the sending of paper communications and/or the receipt of telephone communications.

​If personal data are processed for scientific or historical research purposes or for statistical purposes pursuant to Article 89, paragraph 1 of the GDPR, the interested party, for reasons connected with his particular situation, has the right to object to the processing of personal data that concern him, except in the case in which the treatment is necessary for the execution of a task of public interest.

14. Other rights

The Data controller also intends to inform the user of the existence of the following rights:

  • Right of access of the data subject: the user has the right to obtain confirmation from the Data Controller as to whether or not personal data concerning him is being processed and, in this case, to obtain access to personal data and specific information, in compliance with the art. 15 of the GDPR;

  • Right of rectification: the user has the right to obtain from the Data Controller the rectification of inaccurate personal data concerning him without unjustified delay. Taking into account the purposes of the processing, the user has the right to obtain the integration of incomplete personal data, also by providing a supplementary declaration, in accordance with art. 16 of the GDPR;

  • Right to cancellation: the user has the right to obtain from the Data Controller the cancellation of personal data concerning him without unjustified delay and the Data Controller has the obligation to cancel personal data without unjustified delay, if the reasons defined by art exist. 17 of the GDPR;

  • Right to limitation of treatment: the user has the right to obtain from the Data Controller the limitation of treatment when the hypotheses defined by art. 18 of the GDPR;

  • Right to data portability: the user has the right to receive, in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to the Data Controller and has the right to transmit such data to another data controller without impediments by the Data Controller in the cases and under the conditions specified by art. 20 of the GDPR;

  • The contractor's right to object to commercial communications: the contractor has the right to object at any time, free of charge, to receiving commercial communications.

15. Exercise of rights

Requests to exercise the rights indicated in this disclosure must be addressed directly to the Data Controller at the Pec address: https://j-care@legalmail.it/ Alternatively, it is possible to exercise one's rights by sending the relative communication by registered letter with return receipt to the address Via Aurelio Saffi, n.29, 20123 Milan

16. Accessibility of the information

The information is accessible at the address https://infermierajay.it/privacy-policy, as well as at the Owner. If expressly requested by the user, the information can also be provided orally, provided that the user's identity is proven, by means of a telephone request addressed to the addresses of the Data Controller.