INTRODUCTION
Whereas
IBSA Foundation for scientific research is in the process of establishing or already has a contractual
relationship with its suppliers and consultants (below the “Supplier”) in accordance with the current
legislation on personal data protection:
-
the Data Controller is the natural or legal person responsible for decisions
regarding
the purposes and methods of the processing of the personal data and the instruments used, also
with
respect to security. With regard to the personal data of the employees of the Supplier used by
IBSA
Foundation for scientific research in managing its business dealings with the Supplier, the Data
Controller for that data is IBSA Foundation for scientific research;
-
the “data subject” means the natural person that the personal data belongs to,
which
cannot therefore be a legal person;
-
the Data Controller is required to inform the data subject and the person from
whom the
personal data are collected in advance about the processing of that data;
in the case of relationships between legal persons, as is currently the case between IBSA Foundation for
scientific research and the Supplier, the notice to any data subjects involved in the related processing – when
they provide work or professional or consultancy services to the Supplier and whose data can in any case be
communicated, known and/or processed by the Data Controller in the execution and performance of the main
relationship – is issued by the Controller through the Supplier;
the Supplier undertakes to ensure that the data subject is fully aware of the
essential
elements of this notice
In consideration of the above, IBSA Foundation for scientific research, with
registered
office in Strada di Gandria, 4, 6976 Castagnola-Lugano, Switzerland as the Data Controller, hereby notifies the
data subjects about the purposes and methods of processing of the personal data collected, their scope of
communication and dissemination, as well as the nature of their provision.
PURPOSE OF THE PERSONAL DATA PROCESSING
We wish to inform you that the company IBSA Foundation for scientific research, as the Data Controller (below
the “Company” or the “Controller”), processes the personal data of the data subjects for the sole purpose of the
execution and management of the provision of services, including professional and qualified services, as well as
for purposes strictly related to this.
DATA PROCESSED
The data processed are the identification and contact data of the supplier’s personnel that the Company is in
contact with for the purpose of providing the service regarding the supplier and are necessary for the execution
and management of the contractual relationship between the Controller and the Supplier.
HOW THE DATA ARE PROCESSED
The personal data are used through electronic means, as well as non-automated instruments.
SCOPE OF CIRCULATION OF THE DATA
The data may be used by personnel of the Company that have been assigned a specific role and have been given
appropriate operating instructions. The data may also be used by third-party companies providing operational
services on behalf of the Data Controller, which act as external data processors under the direction and
supervision of the Controller.
The list of the Data Processors is available by sending a request to privacy@ibsafoundation.org
COMMUNICATION OF THE DATA
In addition, the data may also be communicated to the other companies of the group with which specific
agreements are in place for the purposes of shared processing, for administrative and accounting purposes and to
be used for the same purposes, to public bodies for the fulfilment of legal requirements, as well as to third
parties and companies, such as banks, credit institutions and companies strictly linked to the collection of
credit; legal and industry-sector consultants; auditors; and companies providing credit recovery, administration
and contractual advice. The third parties indicated will act as independent data controllers.
Further information on the names of the individual companies in the group or on the categories of data
recipients can be obtained by writing to privacy@ibsafoundation.org
NON-DISSEMINATION OF THE DATA
The personal data are not disclosed to unspecified recipients.
TRANSFER OF THE DATA ABROAD
The personal data can be transferred to foreign countries where branches of our company are based. With regard
to the possible transfer of the Data to third countries outside Switzerland and EU, including countries that may
not provide the same level of protection envisaged by the applicable legislation, we inform you that the
transfer of data abroad is subject to specific guarantees for the protection of personal data through the
adoption of standard contractual clauses.
HOW LONG THE DATA ARE KEPT
The data will be kept for the duration of the entire contractual relationship and in any case up to the
statutory and legal time limit in compliance with the rights and the resulting obligations.
DATA CONTROLLER
The Controller is the company IBSA Foundation for scientific research with registered office in Via del Piano
29, 6926 Montagnola – Collina d’Oro, Switzerland.
RIGHTS OF THE DATA SUBJECT
In relation to the processing of your personal data, you have the right to obtain confirmation at any time of
the existence or otherwise of the data held, to be informed about its content and origin, to verify its accuracy
and to request the supplementation or correction of the data. You also have the right to request the erasure,
transformation into anonymous form or blocking of the data processed in breach of the law, and to object to the
processing of the personal data, on legitimate grounds.
Requests should be addressed as follows:
-
by email to privacy@ibsafoundation.org
You are reminded that data subjects also have the right to lodge a complaint with the Personal Data Protection
Authority if they consider that their rights have not been respected or that they have not received a response
in accordance with the law.
Drafting Date:
18/05/2018
Last Update:
23/11/2023