SEARCH AND POSSIBLE RESERVATION OF MEDICINES
1. Data controller and contacts
The data controller is Farmacia Corradini D’Elia dei dottori Alberto e Claudio sas, based at corso Gramsci 18, 33051 Aquileia (Udine), represented by its owner/legal representative Alberto Corradini D’Elia. For personal data enquiries: corradinifarmacia@gmail.com. As stated in the pharmacy’s calendar privacy notice, no representative of the controller or data protection officer has been appointed.
2. Purposes and legal basis of processing
The data are used to check whether the requested medicine can be obtained, manage any reservation in the requester’s name and communicate receipt and outcome by email or WhatsApp, according to the expressed preference. They are not used for advertising or marketing.
For this optional channel, processing is based on the consent given at submission (Article 6(1)(a) of EU Regulation 2016/679). As the medicine being sought may reveal health information, explicit consent is also requested to process that information solely for the stated purposes (Article 9(2)(a)).
3. Data processed
The data processed include full name, contact details provided, reply preference, medicine name, pharmaceutical form, strength, pack size, quantity, request date, outcome and operational information about message delivery. The privacy notice version and consent date are recorded. Do not enter diagnoses, symptoms, medical reports, prescriptions or other clinical information.
4. Data access and communication channels
Pharmacy staff authorised to use the calendar area can access requests. Data needed to run the service and communicate may be processed by hosting providers and providers of the chosen channel. Email uses the pharmacy’s email service; if you choose WhatsApp, your number and the message are used through that service. These services are also subject to their own terms and privacy notices, including any international transfers. Information about providers and applicable safeguards can be requested from the controller.
Data are not made public. Messages do not include the medicine’s name; details can be viewed through a protected personal link that must not be shared. No automated decision-making or profiling takes place: a staff member performs the check and any confirmation.
5. Retention and processing methods
Request data, recorded consent, the outcome and notifications are kept in the operational archive for 10 days from submission of the request. After expiry, the personal link can no longer be used. Deletion takes place automatically at the first scheduled maintenance run or the next access to the application’s APIs, without needing to open the search section.
Any product confirmed by the pharmacy remains reserved in the requester’s name for 5 days from the reservation request, corresponding to submission of this form. The reservation period does not extend data retention. Receipt of the request alone confirms neither availability nor a reservation.
Deletion from the application does not delete emails or messages already received, exported copies or external backups. These copies are managed separately by the controller and the respective services; for information or deletion requests, use the contact details above. Processing uses access controls and measures to protect links; no payments or automatic supplier orders are requested.
6. Your rights
You may request access, rectification, erasure, restriction, portability and objection from the controller in the cases provided for by the Regulation. Consent can be withdrawn at any time by writing to the stated contact, without affecting processing already lawfully performed. You may lodge a complaint with the Italian data protection authority.
7. Provision of data and consent
Using this form is optional. Your full name, the details needed for the search and contact details for the chosen channel are necessary to handle and reply to the request. Without these data and consent, the request cannot be submitted through this form. You can visit the pharmacy in person.
Privacy notice version: RICERCA-2026-09-27-v3. Adapted from the pharmacy’s “Booking pharmacy services” privacy notice. EU Regulation 2016/679.