Privacy Notice pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR)

1. Introduction

Pursuant to Articles 13 and 14 of the GDPR, we inform you that, following a corporate demerger of Qualimed S.r.l., the personal data provided during registration, purchase, or interaction with our e-commerce services will be transferred to the new beneficiary company, GoVisionary S.r.l., which will assume the role of data controller in the relationship with the user.

2. Data Controller

GoVisionary S.r.l.
Registered office: Viale dell’Unione Europea 8, 21013 Gallarate (VA), Italy
VAT/Tax Code: IT04048910121
Email: legal@govisionary.biz
Certified Email (PEC): govisionary@legalmail.it
Phone: +39 0331 371464

3. Purpose and Legal Basis of Processing

Personal data will be processed for the following purposes:

• Management of orders and activities related to the online sale of products;
• Fulfillment of contractual and pre-contractual obligations;
• Compliance with legal obligations (e.g., tax and accounting obligations);
• Protection of the controller’s rights in the event of legal disputes;
• Sending of informational and promotional communications, only with explicit consent (marketing).

Legal basis for processing:

• Performance of a contract (Art. 6.1.b GDPR);
• Compliance with legal obligations (Art. 6.1.c GDPR);
• Legitimate interest of the controller (Art. 6.1.f GDPR), particularly to ensure business continuity in the event of extraordinary corporate operations;
• Consent of the data subject (Art. 6.1.a GDPR), where required.

4. Categories of Data Processed

• Identification and contact data (name, surname, email, phone number);
• Shipping and billing information;
• Purchase and transaction data;
• Browsing data and preferences, where collected via cookies (see separate cookie policy);
• Any additional data provided voluntarily.

5. Processing Methods

Data will be processed using electronic and manual tools, in accordance with the principles of lawfulness, fairness, transparency, data minimization, and security as set out in the GDPR.

6. Data Retention

Data will be retained for as long as necessary to fulfill the purposes for which they were collected, and specifically:

• For contractual obligations: 10 years (for tax and accounting purposes);
• For marketing purposes: until consent is withdrawn;
• For legal protection: until the expiration of the relevant statute of limitations.

7. Recipients and Transfers

Data may be shared with authorized third parties and/or external data processors (e.g., IT providers, tax consultants, logistics companies), as well as public authorities within the limits established by law.

There is no planned transfer of data outside the European Union. If such a transfer becomes necessary, it will be carried out in compliance with Articles 44 et seq. of the GDPR, ensuring adequate safeguards.

8. Data Subject Rights

You may exercise your rights under Articles 15–22 of the GDPR at any time, including:

• Right of access;
• Rectification;
• Erasure ("right to be forgotten");
• Restriction of processing;
• Data portability;
• Objection to processing;
• Withdrawal of consent, where applicable.

Requests can be submitted to the Data Controller using the contact information provided above.

9. Updates

This privacy notice may be subject to change. The most recent version will always be available on the website under the “Privacy” section.