Skip to Content

Cookie Policy

PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA THROUGH COOKIES

This notice governs the processing of personal data through the use of cookies by J-care srl  (hereinafter the “Controller”), in accordance with applicable data protection rules, including, in particular, EU Regulation 2016/679 (hereinafter “GDPR”), through the INFERMIERA JAY APP (hereinafter “APP”). 

 

1. Identity and contact details of the data controller 

The data controller is J-care srl VAT No.: IT11830790967, Certified email (PEC): j-care@legalmail.it


As the Controller is established in Italy, no representative has been appointed. 

 

2. Contact details of the data protection officer 

The Controller has not appointed a data protection officer.

 

3. Methods of processing 

3.1 Cookies 

Cookies allow information about browsing activity to be collected. They may be stored permanently on the user’s computer and have a variable duration (persistent cookies), or they may disappear when the browser is closed or have a limited duration (session cookies). 

Cookies may be installed by the APP the user is visiting, or by other websites that provide various services to that APP (third-party cookies). 

 

3.2 Technical cookies 

  • Navigation, functional and session cookies: navigation cookies allow the APP to function correctly. The use of session cookies (which are not stored permanently on the data subject’s device and are automatically deleted when the browser is closed) is strictly limited to transmitting individual session identifiers. These cookies are used to enable secure and effective use of the APP

Name

Duration

infermierajay.auth

200 days

For example, the Controller uses: 

 

  • Statistical cookies: the APP uses statistical cookies developed directly by the Controller, as a first party, or supplied by third parties. In the latter case, appropriate tools have been adopted to reduce their ability to identify users, including by masking significant portions of the IP addresses processed. The use of these third-party statistical cookies has also been made subject to contractual restrictions requiring the third party to use them exclusively to provide the service, store them separately and not “enrich” or “combine” them with other information in its possession. The APP uses Google Analytics and Hotjar cookies.

  • Browsing data and environmental variables: the IT systems and procedures used to operate the APP automatically acquire certain personal data relating to the user’s browsing activity, including environmental variables, during normal operation. This category of data includes, for example:

  • the IP addresses of the computers used by users accessing the service;

  • the number of visits;

  • the pages used;

  • the date and time of access;

  • the URL displayed in the browser before viewing our page;

  • the type of web browser;

  • the operating system used.

3.3 Non-technical cookies 

Third-party Google Analytics cookies (https://policies.google.com/privacy) and Hotjar (https://www.hotjar.com/legal/policies/privacy) 

 

4. Deleting and disabling cookies

To delete cookies, follow the instructions for your browser. Below are some guides for the most commonly used browsers:

Google Chrome: https://support.google.com/chrome/answer/95647

 

5. Purposes of processing and legal basis for processing 

For personal data processed through technical cookies to enable correct use of the APP, providing personal data is a contractual obligation, since without such processing a fully functioning web APP could not be provided in accordance with the terms and conditions of use. Providing data is optional for non-technical cookies. In the latter case, failure to provide the data will only prevent the provision of a personalised service. In this case, the legal basis is the data subject’s consent, expressed in accordance with applicable law. 

For data provided voluntarily by email, processing personal data is not a contractual obligation but is based on the Controller’s legitimate interest in responding to data subjects; without such processing, it would not be possible to respond to their requests.

Processing data provided voluntarily by email enables responses to data subjects’ requests. 

The legal basis for processing is the Controller’s legitimate interest in responding to data subjects. 

 

7. How consent is expressed

Consent to the processing of personal data through non-technical cookies may be expressed by clicking a specific checkbox displayed in a banner. 

 

8. Sources of personal data and categories of data

Only data provided by the user in accordance with this notice and collected through the APP will be processed. Data from publicly accessible sources will not be processed.  The data subject’s personal data will be processed. Special categories of data under Article 9 of the GDPR will not be processed.

 

9. Recipients and any categories of recipients of personal data

 Recipients of the user’s personal data may include:

  • Companies providing information society services, including, in particular, hosting service providers; 

  • [Nothing to add]

 

10. Data transfers 

The Controller intends to transfer personal data to a third country or an international organisation. 

These parties may include, for example:

  • Companies providing information society services, including, in particular, hosting service providers; 

  • Communication society service providers;

  • [Nothing to add]

Where these parties are established in a third country or an international organisation, personal data are transferred to them on the basis of an adequacy decision by the European Commission, which has determined that the third country, territory, one or more specified sectors within that third country, or international organisation ensures an adequate level of protection of your rights. In the absence of such decisions, or where the Controller otherwise considers it appropriate, the Controller reserves the right to enter into specific separate agreements requiring these parties to adopt appropriate security measures, including organisational measures, to provide suitable safeguards for your rights. Google Inc., in particular, has contractually undertaken to provide appropriate protection for the data subject’s rights. Data may thus be transferred to European Union countries, including but not limited to Italy, France and Germany. 

To obtain a copy of these data or details of where they have been made available, simply send a request to: privacy@infermieraprofessionale.com

 

11. Personal data retention period 

Personal data processed and retained to enable correct use of the APP are processed and retained for no longer than 12 months from the date of each collection.

In any event, the Controller reserves the right to ask the data subject to renew consent to processing and/or to verify consent already given.

 

12. Optional nature of consent and consequences of withholding consent

For personal data processed to enable correct use of the APP, providing personal data is a contractual obligation in relation to technical cookies, since without such processing a fully functioning APP could not be provided, whereas it is considered optional in relation to technical cookies. In the latter case, failure to provide the data will only prevent the provision of a personalised service.

 

Data subject rights

13. Right to object

As a data subject, the user has the right to object at any time, on grounds relating to their particular situation, to the processing of their personal data under Article 6(1)(e) or (f) of the GDPR, including profiling based on those provisions. The Controller will no longer process the personal data unless it demonstrates compelling legitimate grounds for processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.

Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of their personal data for such purposes, including profiling to the extent that it is related to such direct marketing.

If the data subject objects to processing for direct marketing purposes, the personal data will no longer be processed for those purposes. The right to object to processing for these purposes may also be exercised in part, for example by objecting only to promotional communications sent by automated and/or digital means, or to paper communications and/or telephone calls.

Where personal data are processed for scientific or historical research or statistical purposes under Article 89(1) of the GDPR, the data subject has the right to object, on grounds relating to their particular situation, to the processing of their personal data, unless processing is necessary for the performance of a task carried out for reasons of public interest.

 

14. Other rights

The Controller also wishes to inform the user of the following rights:

  • Right of access: the user has the right to obtain confirmation from the Controller as to whether or not personal data concerning them are being processed and, where that is the case, access to the personal data and specific information, in accordance with Article 15 of the GDPR;

  • Right to rectification: the user has the right to obtain rectification of inaccurate personal data concerning them from the Controller without undue delay. Taking account of the purposes of processing, the user has the right to have incomplete personal data completed, including by providing a supplementary statement, in accordance with Article 16 of the GDPR;

  • Right to erasure: the user has the right to obtain the erasure of personal data concerning them from the Controller without undue delay, and the Controller is obliged to erase personal data without undue delay where the grounds set out in Article 17 of the GDPR apply;

  • Right to restriction of processing: the user has the right to obtain restriction of processing from the Controller where the conditions set out in Article 18 of the GDPR apply;

  • Right to data portability: the user has the right to receive the personal data concerning them which they have provided to the Controller, in a structured, commonly used and machine-readable format, and to transmit those data to another controller without hindrance from the Controller in the cases and under the conditions set out in Article 20 of the GDPR;

  • Right of a subscriber to object to commercial communications: the subscriber has the right to object at any time, free of charge, to receiving commercial communications.

 

15. Exercising rights

Requests to exercise the rights set out in this notice must be addressed directly to the Controller at Certified email (PEC): j-care@legalmail.it Alternatively, rights may be exercised by sending a communication by registered post with acknowledgement of receipt to Via Aurelio Saffi, n.29, 20123 Milano

 

16. Availability of this notice

The notice is available at https://just-care/privacy-policy, and at the Controller’s premises. If expressly requested by the user, information may also be provided orally, provided that the user’s identity is established, by making a telephone request to the Controller’s contact numbers.

 

Chat with us