1. Data controller
The data controller is Health 3000 S.r.l.
2. Scope
This notice describes the processing of personal data carried out through the institutional website www.health3000.com.
It does not cover websites, applications, platforms or digital services relating to Health 3000 products, for which dedicated privacy notices are provided in their respective environments.
Pages reachable via external links are managed by third parties and remain subject to their own notices.
3. Data processed
Browsing data
The IT systems and software procedures that enable the website to operate acquire, in the course of their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols.
This category may include, by way of example, the IP address, browser and device type, operating system, date and time of the request, the address of the requested resource, the server response code and other technical parameters relating to the user’s IT environment.
Data provided voluntarily by email
The website does not contain contact forms, registration areas, newsletters or download features that require the entry of personal data.
Voluntarily sending a message to the email addresses published on the website entails acquisition of the sender’s address and any other personal data included in the message, solely to handle and respond to the communication.
4. Purposes and legal bases
Data may be processed in order to:
- make the website available and ensure it operates correctly;
- protect the website, systems and infrastructure against unauthorised access, abuse or security incidents;
- respond to requests sent voluntarily by email;
- comply with legal obligations or requests from competent authorities;
- establish, exercise or defend a right in judicial or extrajudicial proceedings.
Depending on the case, the legal bases are the performance of pre-contractual measures taken at the data subject’s request, compliance with legal obligations, and the controller’s legitimate interest in managing and securing the website and protecting its rights.
5. Processing methods and security
Data are processed using electronic means and in accordance with the principles of lawfulness, fairness, transparency, data minimisation and storage limitation.
Health 3000 adopts technical and organisational measures appropriate to the risk to prevent loss, unlawful or improper use, unauthorised access and disclosure of data.
6. Recipients
Data may be processed, within the limits of their respective roles, by authorised Health 3000 personnel and by providers supporting the technical management of the website, hosting, email and IT security.
Where required by law, such parties act as processors under Article 28 GDPR. Data may also be disclosed to public authorities or other authorised parties in the cases provided for by law.
Data are not disseminated or sold.
7. Transfers outside the EEA
If a technical provider involves a transfer of personal data outside the European Economic Area, the transfer will be carried out in accordance with Articles 44 et seq. GDPR, by means of an adequacy decision or other safeguards provided for by applicable law.
8. Retention
Browsing data are retained for the time strictly necessary for the operation and security of the website, except where needed to investigate unlawful activity or upon authority request.
Data contained in email communications are retained for the time needed to handle the request and thereafter for the period required by law or necessary to protect the controller’s rights.
10. Data subject rights
Where provided for by the GDPR, the data subject may ask the controller for:
- access to their personal data;
- rectification of inaccurate data or completion of incomplete data;
- erasure of data;
- restriction of processing;
- data portability;
- objection to processing based on legitimate interest.
The data subject may also lodge a complaint with the Italian Data Protection Authority (Garante) or apply to the competent court.
11. How to contact us
Requests relating to personal data protection and the exercise of rights may be sent to info@health3000.com or to the registered office of Health 3000 S.r.l.
12. Updates
Health 3000 may update this notice to reflect regulatory, technical or organisational changes. The version in force is the one published on this page, with the date of the last update indicated.
See also: Terms of Use · AI Transparency