Privacy Policy
Privacy and Cookie Policy
Last update: [June/2025]
What is covered by this notice?
This privacy notice, issued pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (hereinafter, the “GDPR”), describes how NMVO Italia S.C.a.R.L., with registered office in Rome, Largo del Nazareno 3/8, Tax Code – VAT number and registration number in the Rome Companies Register 17459101006, (hereinafter “NMVO”, “we”, “us”), processes personal data relating to visitors and users (hereinafter “Users”) of the website [www.nmvoitalia.it] (hereinafter, the “Website”).
What personal data do we collect, why do we use it, and what is our legal basis for doing so?
When a User interacts with the Website, we collect and process personal data relating to the User (hereinafter collectively referred to as “Personal Data”) both indirectly (e.g., IP address, pages visited on the Website) and directly (e.g., when Personal Data is voluntarily entered into forms provided on the Website or requests are sent to NMVO).
a) Data provided by the User
When a User voluntarily sends messages to NMVO contact addresses, or by completing the Onboarding Form, NMVO acquires information relating to and concerning the User (i.e., information referring to the User as an identified or identifiable individual). This Personal Data includes:
- Name and surname, corporate email address, information about the Marketing Authorization Holder (MAH), including company name, tax code, address, country, certified email (PEC), VAT number, and reference SIS code when the User uses the Onboarding Form. This Personal Data is processed by NMVO, the body responsible for implementing and operating the National Medicines Verification System (NMVS) in Italy, pursuant to Article 9 of Legislative Decree No. 10 of 6 February 2025, within the scope of activities for initiating the company's contractual onboarding for services provided by NMVO under applicable law. The legal basis for the processing is Article 6(1)(f) of the GDPR, i.e., NMVO’s legitimate interest in initiating onboarding activities for companies holding marketing authorizations for the institutional services offered by NMVO and to facilitate the execution of related institutional tasks;
- The name, contact details (email and any other contact information entered by the User in the message) required to respond, as well as any Personal Data included in communications and messages when the User contacts us by means other than the Onboarding Form. The legal basis for the processing is Article 6(1)(f) of the GDPR, i.e., NMVO’s legitimate interest in facilitating the exchange of information related to its institutional activities and responding to User requests.
Personal Data will be stored until the purpose for which it was collected has been fulfilled. For example, data related to User requests made outside of the Onboarding Form will be deleted once the response activities have been completed. For data acquired through the Onboarding Form, NMVO will retain contact information in its records for the duration of the company's onboarding phase and subsequently for the duration of the contractual relationship, subject to the User’s right to request modification or deletion as outlined below, e.g., in the case of a change in the company contact within the context of the contractual relationship with NMVO.
b) Data collected automatically
The computer systems and software procedures used to operate the Website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes IP addresses or domain names of the computers and terminals used by users, URI/URL (Uniform Resource Identifier/Locator) addresses of requested resources, time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the server’s response (success, error, etc.), and other parameters related to the User’s operating system and IT environment.
The legal basis for processing is Article 6(1)(f) of the GDPR, i.e., NMVO’s legitimate interest in enabling browsing on and the proper management of the Website.
Browsing data is not retained for more than 365 days (except where required for investigations by judicial authorities).
Cookies
Cookies are alphanumeric text strings containing information that websites visited by the User send from the web server to the User’s terminal device (e.g., computer, tablet, smartphone) via the browser. These are automatically stored on the device and retransmitted to the web server on each subsequent visit to the site.
Cookies are generally divided into two main categories: “profiling cookies” and “technical cookies.”
a) Profiling cookies
This Website does not use profiling cookies, i.e., cookies intended to create user profiles for the purpose of sending advertising in line with the preferences expressed during navigation on the Website.
b) Technical cookies
The Website uses technical cookies, or cookies of a similar nature, to allow for the safe, fast, and efficient browsing and use of the Website and to provide Users with the services requested. The installation of such cookies does not require the User’s prior consent.
Who are the recipients of personal data?
The above-mentioned Personal Data may be processed by NMVO and by personnel appointed by NMVO to manage the Website and onboarding process.
Where do we transfer personal data?
Personal Data collected is stored in Italy and within the European Economic Area (EEA).
What rights does the user have?
The User may exercise the following rights at any time:
- Right of access – the User has the right to obtain confirmation as to whether or not personal data concerning them is being processed and, if so, to receive information regarding such processing;
- Right to rectification – the User has the right to obtain the correction of their Personal Data if it is inaccurate or incomplete;
- Right to erasure – the User has the right to obtain the deletion of their Personal Data from our archives and systems, or from third parties supporting us in data processing and acting as our processors, where the data is no longer relevant for the continuation of the contractual relationship or is no longer necessary to comply with a legal obligation to which we are subject or to establish, exercise, or defend a legal claim;
- Right to restriction of processing – under certain conditions, the User has the right to restrict the processing of their Personal Data, where the conditions of Article 18 of the GDPR are met;
- Right to object – the User has the right to object at any time, on grounds relating to their particular situation, to the processing of their Personal Data where the processing is based on legitimate interest, unless we demonstrate compelling legitimate grounds for the processing which override the User’s interests, or for the establishment, exercise, or defense of legal claims.
These rights may be limited, for example, if fulfilling the request would involve disclosing personal data of third parties.
If you wish to exercise any of the rights listed above, please contact us using the details provided in the “Contacts” section.
Complaint
If the User believes that the processing of their Personal Data carried out through the Website is in violation of the provisions of the GDPR, they have the right to lodge a complaint with the Data Protection Authority, as provided for in Article 77 of the GDPR, or to take legal action (Article 79 of the GDPR).
Updates to this notice
We reserve the right to update this privacy notice at any time and will provide the User with a new notice when we make substantial updates.
Contacts
The data controller is NMVO. For any questions regarding this notice or any information concerning the processing of Personal Data, you may contact us at the following address: [onboarding@nmvo-italia.it].
Links to social media platforms
Please note that the Website contains a link to NMVO’s LinkedIn social media page.
If the User uses the relevant button, they will be redirected to the social media page, and their personal data will be processed by the platform provider in accordance with LinkedIn’s privacy policy.
NMVO processes the personal data provided by Users through its LinkedIn pages in the context of its social and institutional activities, in order to manage interactions with Users (connections, comments, public posts, etc.), and in compliance with applicable regulations.
