Newsletter privacy notice

pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data

1. Introduction

At Pizeta Pharma S.p.A., your privacy and the security of your personal data are of paramount importance. We therefore collect and process your data with the utmost care and attention, while implementing appropriate technical and organisational measures to ensure that they are processed securely.

Accordingly, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (the “GDPR”), we hereby inform you that your personal data are processed using methods designed to ensure their security and confidentiality, by paper-based and electronic means, as further described in this Privacy Notice.

2. Definitions

Personal data: means any information relating to an identified or identifiable natural person (the “Data Subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier or to one or more factors specific to that person’s physical, physiological, genetic, mental, economic, cultural or social identity.

Processing: means any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Special categories of personal data: means personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data processed for the purpose of uniquely identifying a natural person, data concerning health or data concerning a person’s sex life or sexual orientation.

Data Controller: means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

Data Processor: means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the Data Controller.

3. Data Controller

Your personal data are processed by Pizeta Pharma S.p.A. (also referred to below as “Pizeta Pharma” or the “Company”), whose registered office is at Via Roma – Loc. Il Piano, 62039 Visso (MC), in its capacity as Data Controller pursuant to Regulation (EU) 2016/679.

For any questions or requests relating to the processing of your personal data, you may contact Pizeta Pharma S.p.A. at any time using the following contact details:

Data Controller

Company name: Pizeta Pharma S.p.A.

Administrative office address: Via Bruno Simonucci, 3, Ponte San Giovanni, 06135 Perugia (PG), Italy

Telephone: +39 075 9474542

E-mail: info@pizetapharma.com

Italian certified email address (PEC): greempharmsrl@legalmail.it

4. Categories of personal data processed

In connection with the management of the newsletter service, the Data Controller processes personal data provided directly by the Data Subject when subscribing, including, in particular, the email address.

5. Purposes of the processing and legal basis

Your personal data will be processed for the following purposes:

6. Withdrawal of consent

The Data Subject may withdraw consent to receive the newsletter at any time, without affecting the lawfulness of processing based on consent before its withdrawal. Consent may be withdrawn by using the “Unsubscribe” link included in each communication or by contacting the Data Controller using the contact details set out in this Privacy Notice.

7. Categories of recipients of personal data

Within the limits of the purposes set out in this Privacy Notice, personal data may be disclosed to the following recipients:

• personnel of the Data Controller authorised to process personal data pursuant to Article 29 GDPR and Article 2-quaterdecies of Italian Legislative Decree No. 196/2003, duly instructed on the applicable processing arrangements;
• providers of hosting, maintenance, technical support and IT systems and website management services;
• providers of the platform used to manage and send newsletters and electronic communications;
• providers of administrative, organisational or professional support services to the Data Controller, where necessary for the purposes set out above;
• public authorities, entities or bodies to which disclosure is required by law or by an order of the competent authority.

Where required by applicable law, parties processing personal data on behalf of the Data Controller are appointed as Data Processors pursuant to Article 28 GDPR and act on the basis of specific instructions issued by the Data Controller.

A specific and up-to-date list of such parties is available at the Data Controller’s offices and may be consulted upon request by the Data Subject.

8. Transfers of data outside the EEA

Generally, your personal data are not transferred outside the European Economic Area.

However, the use of the Brevo and Shopify platforms and the services provided by their respective sub-processors may require data to be transferred to countries outside the European Economic Area. In such cases, transfers will be carried out in accordance with Articles 44 et seq. GDPR, on the basis of an adequacy decision adopted by the European Commission or by implementing other safeguards provided for under applicable law, including the Standard Contractual Clauses.

9. Personal data retention period

Your data will be retained for a limited period, which varies according to the processing activity and its specific purposes, as illustrated below:

At the end of these periods, your data will be permanently erased or otherwise irreversibly anonymised by Pizeta Pharma S.p.A.

10. Data Subject rights

In relation to the personal data covered by this Privacy Notice, you may exercise the following rights, as provided for and safeguarded by Regulation (EU) 2016/679 (GDPR):

• Right of access and right to rectification (Articles 15 and 16 GDPR): you have the right to access your personal data and to request that they be corrected, amended or supplemented. If you wish, we will provide you with a copy of the personal data we hold about you.
• Right to erasure (Article 17 GDPR): in the circumstances provided for by applicable law, you may request the erasure of your personal data. Once your request has been received and assessed, we will cease processing and erase your personal data where the request is well founded.
• Right to restriction of processing (Article 18 GDPR): you have the right to request restriction of the processing of your personal data where the processing is unlawful or where you contest the accuracy of the personal data.
• Right to data portability (Article 20 GDPR): you have the right to receive from the Data Controller the personal data concerning you in a structured, commonly used and machine-readable format and to transmit those data to another Data Controller without hindrance from the Data Controller to which they were provided, subject to the conditions laid down in that Article.
• Right to object (Article 21 GDPR): you have the right to object at any time to the processing of your personal data based on our legitimate interests, stating the grounds for your request. Before granting the request, Pizeta Pharma will assess the grounds you have provided.
• Right to lodge a complaint (Article 77 GDPR): you have the right to lodge a complaint with the competent data protection supervisory authority if you consider that your rights in relation to the processing of your personal data have been or are being infringed.

You may exercise your rights at any time in relation to the processing of your personal data by Pizeta Pharma. Requests should be sent to Pizeta Pharma by email at info@pizetapharma.com or via the Italian certified email address (PEC) at greempharmsrl@legalmail.it.

Further information about Data Subject rights may be requested from the Data Controller using the contact details set out above. The full text of the Articles referred to above is available at the following link: https://eur-lex.europa.eu/eli/reg/2016/679/oj/eng

11. Security measures

Pizeta Pharma implements appropriate preventive security measures to safeguard the confidentiality, integrity, completeness and availability of the Data Subject’s personal data. Technical, logistical and organisational measures are in place to prevent damage, loss, including accidental loss, alteration, misuse and unauthorised use of the personal data processed.

12. Changes to this Privacy Notice

This Privacy Notice may be amended or supplemented over time where necessary as a result of new legislation on personal data protection or changes to our services or organisation.

We therefore encourage you to review this Privacy Notice periodically. Where possible, we will endeavour to inform you promptly of any changes and their implications.

The updated version of this Privacy Notice will in any event be published in the dedicated section of the Company’s website, together with the date on which it was last updated.

13. Last updated

30 July 2026