INFORMATION ON THE PROCESSING OF PERSONAL DATA R.E. 679/2016 SWITZERLAND FEDERAL LAW ON DATA PROTECTION

Last updated: July 2025

This information is made in accordance with the Swiss Federal Data Protection Act (nLPD) and, as applicable, EU Regulation 2016/679 (GDPR), to users who access the site www.medswiss.ch, owned by:

Medwiss of Mattia Fuoco
Via Lombardia, 4 – 6833 Vacallo (Cantone Ticino) – Switzerland
Email: medswiss.ch@gmail.com
Telephone: +39 342 680 6227

Your personal data are used by:

which is the controller for the processing, in compliance with the principles of protection of personal data established by GDPR 2016/679 and the Swiss Federal Data Protection Act (nLPD).

SOURCE OF PERSONAL DATA

The Data Controller or Data Processors collect and record personal data in the following ways:

• Information acquired directly by the data subject, both at first contact and in any subsequent communication;
• Data provided by third parties

METHOD AND PURPOSE OF DATA PROCESSING

• We inform you that the data will be processed with the support of the following means:

For the following purposes:

Unless expressly denied by the data subject, the user’s data will also be processed for the following purposes:

Any refusal to allow data processing will make it impossible to use the service requested by the user.

LEGAL BASIS

The legal bases on which the processing of common data is based, according to Art.6 of the GDPR Regulation, are:

• Read
• Contract
• Consent

The legal bases on which the processing of personal data is based, according to Art.9 of the GDPR Regulation, are:

• Read
• Contract
• Consent

The provision of data is mandatory for all that is required by the legal and contractual obligations and therefore any refusal to provide them in whole or in part may result in the impossibility of providing the services requested.

The company processes the optional data of users on the basis of consent, i.e. through the explicit approval of this privacy policy and in relation to the methods and purposes described below.

TARGET CATEGORIES

Without prejudice to communications made in compliance with legal and contractual obligations, all data collected and processed may be communicated exclusively for the purposes specified above to the following categories of recipients:

In the management of your data, the following categories of authorised persons and/or internal and external responsible persons identified in writing and to whom specific written instructions regarding the processing of data have been provided may also become aware of them.

CATEGORIES OF PERSONAL DATA

According to Article 14 of the GDPR Regulation, since the data have not been obtained from the data subject, the categories of personal data subject to processing are indicated:

INFORMATION STRUCTURES

CONSERVATION PERIOD

The data will be processed for as long as necessary to carry out the current commercial relationship and for the next ten years from the date of acquisition of the same.

RIGHTS OF THE INTERESTED PARTIES

Pursuant to the European Regulation 679/2016 (GDPR) and the Swiss national law nLDP, the data subject may exercise the following rights, in accordance with the procedures and within the limits provided for in the current legislation:

• request confirmation of the existence of personal data concerning him (right of access);
• know their origin;
• receive intelligible communication;
• have information about the logic, the modalities and the purposes of the processing;
• require the updating, rectification, integration, cancellation, transformation into anonymous form, blocking of data processed in violation of the law, including those no longer necessary to pursue the purposes for which they were collected;
• in the case of consent-based processing, receive their data provided to the holder, in a structured and readable form by a data processor and in a format commonly used by an electronic device;
• the right to lodge a complaint with the Supervisory Authority (www.garanteprivacy.it)

CONTROLLER AND RDP

Data Controller: the Data Controller, according to the Law, is

The holder has appointed the DPO/RDP which can be reached at the following address:

This privacy policy may be modified over time – also related to the possible entry into force of new sector regulations, the updating or provision of new services or technological innovations – so the user/visitor is invited to consult this page periodically.