Privacy policy

This Privacy Policy is defined on the basis of art. 13 of EU Regulation n. 679/2016  and applies only to all data collected through the website. This Privacy Policy is subject to updates that will be posted on the website on time. The present Privacy Policy and the Cookie Policy, establishes the basis on which the user’s personal data will be processed.

Joint Data Controllers

The Joint Data Controllers of this website are Suanfarma Italia S.p.A., registered office in Rovereto (TN), 38068, Corso Verona n. 165, VAT n. 01129800221 and Suan Farma S.A., Einstein, 8, 28108 Alcobendas, Madrid, Vat n. ESA80624067, e-mail:

Personal Data

Personal Data means any information relating to an identified or identifiable natural person (Data Subject, User). An identifiable natural person who may be identified, directly or indirectly, with particular reference to an identifier such as name, identification number, location data, an on-line identifier, one or more characteristic elements of his physical identity.

Category of personal data processed

Among the personal data processed by this website, autonomously or by third party, there are common data like: Cookies, usage data, name, e-mail, telephone, country, company name, curriculum vitae.

Methods of personal data processing

The personal data provided or acquired are subjected to a treatment based on principles of correctness, lawfulness, transparency and protection of privacy pursuant to current legislation. Joint Data Controllers process the user’s personal data adopting appropriate security measures to prevent unauthorized access, disclosure, modification or unauthorized destruction of personal data. Data are processed by means of IT and/or telematic tools, by implementing organizational methods and strategies that are connected to the purposes of the activity.

Purposes for processing the collected data and legal basis

Personal data can be collected autonomously by the Joint Data Controllers or by third party. In this case, the computer systems and software used by the website acquire certain user’s personal data, IT related (for example, the IP address, the browser used, the operative system, the domain name and the websites addresses from which you have accessed or exit, etc.), whose transmission is inherent to the correct functioning of Internet. Such data can be processed for the sole purpose of obtaining anonymous statistical information on the use of the website and/or controlling its correct functioning; after their processing, they are immediately erased. The Data that the user chooses to provide spontaneously will be processed in compliance with the conditions of lawfulness pursuant to art. 6 GDPR and will be processed to allow the Website to provide its services, as well as for the Purposes indicated below and will be retained for the time necessary for the fulfillment of the aforementioned Purposes.

The purposes of the processing are:

  • Pre-contractual information and compliance
    The Data will be processed in order to contact or to respond to specific requests addressed to the Joint Data Controllers by the Data Subject for communications of an informative nature and/or for the interest in the purchase in relation to the Products of the Joint Data Controllers, via email messages or filling in the contact form and other communication tools such as phone.

    Legal basis: this processing is optional and based on the consent of the Data Subject, however the provision of Data is necessary for the pursuit of the purpose indicated.

    Data retention period: until the Data Subject’s consent is withdrawn.

  • Fulfillment of any obligations provided by current laws
    The Data will be processed to fulfill any type of obligation contemplated and provided for by current laws, regulations, related regulations, commercial uses and tax/tax matters, including also for the purposes provided for by the anti-money laundering legislation d.lgs. 231/2007 and subsequent amendments.

    Legal basis: this processing is necessary to fulfil a legal obligation to which the Data Controller is subject.

    Data retention period: 10 (ten) years or different legal obligation.

  • Statistical analysis
    The Data will be processed to perform statistical analysis on aggregated and anonymous data to analyze the behavior of the Data Subject to improve the products and services provided by the Joint Data Controllers and to meet the expectations of the Data Subject.

    Legal basis: this processing is based on the consent freely expressed by the interested party.

    Data retention period: until withdrawal of consent by the Data Subject.

  • Recruitment
    Data will be processed for the purpose of being contacted or following up on specific requests for spontaneous application and/or for a specific job position addressed to the Joint Data Controllers by the Data Subject.

    Legal basis: this processing is optional and based on the consent of the Data Subject, however, the provision of the Data is necessary for the pursuit of the indicated purpose.

    Data retention period: until withdrawal of consent by the Data Subject.

Data communication

In some cases, in addition to Joint Data Controllers, may have access to data:

  • categories of persons specifically trained involved in the organization of the website (administrative staff, commercial staff, marketing staff, lawyers, system administrators);

  • external parties (like third party technical service providers, hosting provider, IT companies, communication agencies) also appointed as Data Processors by the Joint Data Controllers ex art. 28 GDPR. The updated list of Data Processors, if appointed, can always be requested from the Joint Data Controllers;

  • public or private entities that can access the data in compliance with legal obligations;

  • subjects that perform instrumental tasks with respect to the activity of the Joint Data Controllers;

Processing time

As expressly stipulated by art. 5, co. 1, lett. e) of the GDPR, data are stored for a period of time necessary to provide the service requested by the user, or for the time required for the purposes described in this document.

At the end of the storing time, personal data will be deleted and consequently access rights, deletion rights, rectification rights and data portability rights can no longer be exercised.


This website uses Cookies. They are small text files that may be used by websites to make the user’s experience more efficient, to customize contents and advertisements, to provide the functions of the social networks and analyze the traffic. Cookie Policy

Place of processing and transfer of data abroad

The data are processed at the Joint Data Controllers operating office. For more information, contact the Joint Data Controllers. The data can be processed by natural persons and/or legal entities acting on behalf of the Joint Data Controllers, under specific contractual obligations and located in UE or non-UE countries. If the data are transferred outside the EEA, the Joint Data Controllers will adopt any contractual measure suitable to ensure an adequate data protection.

Exercise of the rights of the data subject

The data subject may exercise the rights as described in the artt. 7, 15-22 of the EU Regulation 679/2016. In particular, the right to withdraw his/her consent in any time and, simply asking the Joint Data Controllers, he/she may request access to personal data, receive the personal data provided by the Joint Data Controllers and, where possible, transmit them to another Data Controller of the processing without impediment (c.d. portability), obtain the update, the limitation of the processing, the rectification of data and the deletion of that processed in contrast with current legislation. The data subject has the right, for legitimate reasons, to oppose the processing of personal data concerning him/her the processing for purposes of sending advertising materials, direct selling and market research. The interested party also has the right to lodge a complaint with the Privacy Authority in its quality of supervisory authority. The data subject may exercise the rights by emailing the owner at:

Tools used for personal data processing



The user, filling in the contact Form with his/her data, agrees to their use to answer any request of information or any other purpose indicated by the form header. Personal data collected by the contact Form: email, name, telephone, company name, country.

Contact Form 7 (Rock Lobster LLC)
Contact Form 7 is a service of Form creation and management that allows this website to integrate those contents within its own pages. Personal data collected: email and name. Different kinds of data as specified in the Privacy Policy of the service. Place of processing: Japan – Privacy Policy


These services permit to manage a database of email contacts, telephone contacts or contacts of any other type, used to communicate with the user. Furthermore, these services could permit to collect data related with user’s date and time of viewing of messages, as well as track user’s interaction with them, such as information on clicks on the links included in the messages.


This type of service analyzes the traffic of this website, potentially containing users’ personal data, with the purpose of filtering it from parts of traffic, messages and content that are recognized as SPAM.


To prevent cyberattacks and block suspicious users and IP addresses, this Website uses the Wordfence Security plugin, which installs a technical cookie (wfwaf-authcookie*) that helps determine if the user has suspicious characteristics. The Joint Data Controllers do not collect, store or share any personal data through this cookie. The data collected by this plugin is kept for 24 hours.
General data protection regulation
Privacy policy


Statistics services allow the Joint Data Controllers only to monitor and analyze the traffic data and keep track of the user’s behavior. This website uses the following services:

Google Analytics (Google Ireland Limited)
Google Analytics is an analysis service offered by Google Ireland Limited. Google uses the collected personal data with the aim of tracking and examining the use of this website, compiling reports and sharing them with other services developed by Google. Google may use the personal data collected to contextualize and personalize notices on its advertising network. Google can also transmit this information to third parties in case there are any legal requirements or in cases where such third parties process the information on Google’s behalf. On this website the function of anonymization of the IP address is active. The IP address transmitted by the browser for purposes connected to Google Analytics will not be embedded with other data that Google already possesses.

At the following link Google provides the Google Analytics Opt-Out Browser Add-on to disable tracking by Google Analytics. Personal data collected: Cookies and usage data. Place of processing: Ireland – Privacy Policy


Google Tag manager (Google Ireland Limited)
Google Tag manager is a service that allows to manage and monitor all the Tags of third parties on the website to get information about the interest demonstrated by the users towards the website and, consequently, towards the quality of the contents. Personal data collected: Cookies and usage data. Place of processing: Ireland – Privacy Policy


These services allow to interact with social networks directly from the website pages. The interactions and information acquired by this website are subject to the user’s Privacy Policy of each social network. If a service for interaction with social networks is installed, the site may collect traffic data about the pages, even if users do not use the service.

LinkedIn (LinkedIn Ireland Unlimited Company)
The LinkedIn buttons are services for interaction with LinkedIn, offered by LinkedIn Corporation. Personal data collected: Cookies and usage data. Place of processing: Ireland – Privacy Policy


These services allow to display contents hosted on external platforms directly from this website pages and to interact with them. If a service for interaction with social networks is installed, the website may collect traffic data about the pages, even if users do not use the service.

This website uses:

  • Google Maps
    Google Maps is a map display service managed by Google that allows this website to integrate those contents within its own pages. Personal data collected: Cookies and usage data. Place of processing: Ireland – Privacy Policy

  • Google Fonts
    Google Fonts is a font style viewing service provided by Google Ireland Limited that allows this website to integrate such content within its pages. Personal data collected: usage data; different kinds of data as specified in the privacy policy of the service. Place of processing: Ireland – Privacy Policy

Changes to this Privacy Policy

The Joint Data Controllers reserve the right to make changes to this Privacy Policy at any time by giving notice to users on this page. Therefore, it is recommended to consult this page very often, taking as reference the date of last modification indicated at the bottom. In case of non-acceptance of the changes made to this Privacy Policy, the user is required to cease the use of this website and may request the Joint Data Controllers to remove their personal data. Unless otherwise specified, the previous Privacy Policy will continue to apply to personal data up to that date collected moment. The Joint Data Controllers are not responsible for the update of the links displayable in this Privacy Policy, therefore, every time a link does not work and/or is not updated, users acknowledge and accept that they must always refer to the document and/or the section of the linked websites.

Privacy Policy updated on October 2022