PRIVACY POLICY

This Privacy Policy of Morgan Srl, with registered office at Via Canestrello, 2/B 36050 Monteviale (VI), Italy (Data Controller), aims to provide all clarifications regarding the policy adopted concerning the processing of users’ personal data in relation to the services provided by Morgan Srl through the website www.immunoxidil.com.

Morgan Srl takes the protection of privacy, namely the confidentiality of users’ personal data, very seriously. The principles outlined below form the basis of the processing of users’ personal data by Morgan Srl.

Data will only be collected where necessary and in compliance with applicable laws. Morgan Srl will always provide clear information regarding the use made of your personal data and will always be transparent with users regarding which data are collected, how they are used, with whom they are shared and which office to contact for any request.

Morgan Srl adopts all necessary measures to safeguard users’ data against improper use and to process them securely, in compliance with all applicable laws and regulations concerning privacy protection, cooperating with the authorities responsible for personal data protection and acting, in any case, in accordance with generally recognised principles relating to personal data protection.

At any time, you may exercise the rights referred to in Articles 15 et seq. of EU Regulation 679/2016, including the right to obtain access to your personal data from the controller and the rectification or erasure of such data or restriction of processing concerning you, or to object, on legitimate grounds, to their processing, as well as the right to data portability, by calling +39 0444 927636 or by sending an email to immunoxidil@morganpharma.it. Should you consider that your rights have been violated, you may contact the competent supervisory authority pursuant to Article 77 of EU Regulation 679/2016.

www.immunoxidil.com ONLINE

PROCESSING OF DATA AND USER CONSENT

Morgan Srl will only collect, use or disclose users’ personal data in full compliance with the law. In most cases, Morgan Srl will ask users to explicitly express their consent; in some cases, consent may be inferred from users’ actions and behaviour. Morgan Srl may ask users to provide additional consent if it needs to use their personal data for purposes not stated in this Privacy Policy. Providing such consent is not mandatory; however, without it, participation in specific activities may be precluded.

PLACE OF PROCESSING OF PERSONAL DATA

Processing related to the Website services takes place at the aforementioned registered office of Morgan Srl and is carried out only by personnel authorised to process the data, or by persons in charge of occasional maintenance operations.

Data deriving from the Website may be communicated to the technological and operational partners used by the Data Controller for the provision of services requested by users. Personal data provided by users submitting requests for information (sending information material, replies to questions, etc.) or other communications (for example orders) are also made available to third parties appointed as Data Processors and used by them solely for the purpose of performing the requested service or activity and only where this is necessary for that purpose (provision of requested services through technological and operational partners).

PROCESSED DATA

For the purposes of this Privacy Policy, “personal data” means information or pieces of information that could allow your identification. This generally includes information such as, for example, name, address, username, email address and telephone number, or other information such as IP address, purchasing habits, preferences or information relating to your lifestyle, hobbies and interests.

Browsing data

The computer systems and software procedures used for the operation of the Website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. These are pieces of information which, by their very nature, could, through processing and association with data held by third parties, allow identification of the computers connecting to the site. This category includes IP addresses or domain names of the computers used by users connecting to the Website, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server response (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment. These data may be made available to the Judicial Authority for the ascertainment of liability in the event of unlawful acts committed through the site or cybercrimes against the site.

Data voluntarily provided by users

The optional, explicit and voluntary sending of personal data to access specific services or submit requests for information through the dedicated channels of the Website entails the subsequent acquisition of the sender’s personal data included in the requests, necessary in order to respond. Users may choose not to provide their data; however, in such case, Morgan Srl may not be able to fully or partially satisfy users’ requests (for example registration on www.immunoxidil.com).

Data relating to unregistered users

Information generated by users visiting www.immunoxidil.com without being registered yet (or, although registered, without having an active session), used to allow optimal browsing of the website, for statistical analysis and for content personalisation — including advertising content — may be used by Morgan Srl at different times to supplement information provided by users during registration. For further information on the technologies that allow us to provide the services described above, please read our Cookie Policy set out below in this document.

Data relating to registered users

Morgan Srl uses technologies that, through the querying of an ID (in alphanumeric form), allow tracking of the browsing activities of registered users accessing the site from various browsers or devices (e.g. computers, tablets, smartphones), in order to present users with products similar to those viewed or purchased, regardless of the browser or device used from time to time.

When registered users provide consent for the processing of their data for direct marketing purposes, Morgan Srl may process data relating to transactions and views performed on www.immunoxidil.com in order to inform users by email that products added to the cart but not yet purchased are still available (allowing them to complete the purchase quickly and securely) or to propose the same or similar products by email (re-marketing). When registered users provide consent for profiling purposes, Morgan Srl may process data relating to their purchasing choices (namely purchased items and amounts spent) in order to adapt commercial offers as closely as possible to their profile and needs.

Payment-related data

With regard to payment data, Morgan Srl only receives feedback information from digital payment companies and credit card payment processors regarding the payment status (successful/declined). All details relating to prepaid cards (such as PayPal) or credit cards are stored by the entities managing the relevant service, which are not authorised to use personal data received through www.immunoxidil.com for any other purpose.

PURPOSES OF PROCESSING OF PERSONAL DATA

Morgan Srl may use users’ personal data to examine the use of the Website, products and services, analyse the effectiveness of advertising, promotions and competitions, personalise the website experience and examine (in anonymous and aggregated form) statistics relating to activities on the website, simplify website use and better adapt it to users’ interests and choices, speed up future activities and experiences on the website, and contact users regarding products and services that may be of interest, where consent has been provided.

Morgan Srl may use users’ personal data to suggest products or services that may be of interest and offer opportunities to participate in competitions or promotions. Users may refuse to receive communications from Morgan Srl at any time. Every direct marketing communication sent by Morgan Srl will provide the necessary information and means to opt out. Users’ data may also be used to provide products or services requested by users.