|
How Common Systems collects, uses and protects the personal data you share with us.
The Data Controller for the personal data collected through the commonsystems.net website is Christian Marcello, operating the business under the name "Common Systems" (hereinafter, the "Controller" or "Common Systems").
For any request concerning the processing of personal data, the Controller can be contacted at: mail@commonsystems.net.
Through the contact form on the website, we collect the following data, provided directly by the data subject when filling in the form:
We may also automatically collect certain technical data (IP address, device and browser type, pages visited, date and time of access) through cookies and similar technologies. See Section 12 "Cookies and Similar Technologies".
The personal data collected is processed for the following purposes:
Providing the data marked as mandatory on the form (name, phone, email) is necessary in order for Common Systems to respond to the request; failure to provide this data will make it impossible for us to reply. Providing the other data (clinic type, reason for the request) is optional and does not affect the possibility of being contacted back.
Personal data is processed using IT and electronic tools, following logics strictly related to the purposes indicated above, and in a manner that ensures the security and confidentiality of the data. The Controller adopts appropriate technical and organisational measures to prevent loss, unlawful use, or unauthorised access to data, including: encryption of communications (HTTPS/TLS), data access restricted to authorised staff and collaborators bound by confidentiality obligations, and periodic review of the security measures in place.
For the purposes indicated above, personal data may be shared with third parties acting as data processors under Art. 28 GDPR, including in particular:
A Data Processing Agreement under Art. 28 GDPR has been or will be entered into with each of the above parties that processes data on the Controller's behalf. Data is never disclosed or sold to third parties for purposes other than those set out in this policy.
Some of the processors listed in Section 6 (in particular GoHighLevel, OpenAI and Netlify) are based in the United States, a country that does not benefit from a general adequacy decision by the European Commission for personal data transfers.
Transfers of data to these parties are therefore carried out on the basis of appropriate safeguards under Art. 46 GDPR, in particular through the adoption of Standard Contractual Clauses (SCCs) approved by the European Commission under Implementing Decision (EU) 2021/914, and/or the providers' participation in the EU-U.S. Data Privacy Framework, where applicable and verifiable in the relevant public register.
A copy of the safeguards adopted can be requested by writing to the address indicated in Section 1.
As a data subject, in relation to the processing of your personal data you have the right to:
To exercise the rights listed above, you can write at any time to the email address indicated in Section 1. The Controller will respond to the request without undue delay and, in any case, within one month, as provided by Art. 12 GDPR.
You can withdraw your consent to being contacted by phone or SMS/WhatsApp at any time: by replying "STOP" to a message received, by stating so verbally during a call, or by writing to the address indicated in Section 1. Withdrawing consent does not affect the lawfulness of processing carried out beforehand.
Common Systems' services are intended exclusively for adults acting in a professional capacity (owners, managers, or staff of clinics and healthcare facilities). The Controller does not knowingly collect personal data from minors through the contact form.
This website uses one strictly necessary third-party cookie (__cf_bm, set via our service provider's domain) for bot detection and security purposes; this does not require consent under Art. 122 of the Italian Privacy Code and Recital 66 of Directive 2009/136/EC.
The site's contact form is provided through a third-party widget that, once activated, loads Facebook Pixel tracking technology. This form, and the associated tracking, is loaded only after you provide explicit consent through our cookie banner. If you do not consent, you may still contact us via email at mail@commonsystems.net.
You can change your cookie preference at any time using the cookie icon in the bottom-left corner of the site.
This policy may be updated periodically to reflect regulatory, organisational, or service-related changes. The updated version will always be available on commonsystems.net, with the date of the last revision shown at the bottom of this page.
For any question regarding this policy or the processing of your personal data, you can write to: mail@commonsystems.net.