3. The information is only given for pharmahealherbs.com and not for other websites that the user may consult through links contained therein.

4. The purpose of this document is to provide information on the methods, times and nature of the information that the data controller must provide to users when connecting to the web pages of pharmahealherbs.com, regardless of the purposes of the connection itself, according to Italian and European legislation.

5. The informative note may be subject to changes due to the introduction of new regulations in this regard, the user is therefore invited to periodically check this page.

6. If the user is under fourteen years of age, pursuant to Art.8, c.1 of Regulation (EU) 2016/679, and Art. 2 – Quinquies of Legislative Decree 196/2003, as amended by Legislative Decree 181/18, he/she must legitimise his/her consent by means of his/her parents’ or legal guardian’s authorisation.

2 – Data controller

1. The data controller is the natural or legal person, public authority, service or other body which, individually or jointly with others, determines the purposes and means of the processing of personal data. It also deals with security profiles.

3 – Place of data processing

1. The data processing generated by the use of pharmahealherbs.com takes place at via po 21 00198 Roma.

2. If necessary, the data connected with the newsletter service may be processed by the data controller or persons appointed by it for this purpose at the relevant premises.

4 – Legal basis of processing

1. The processing of personal data by pharmahealherbs.com is based on the consent – pursuant to art. 6, par. 1, lett. a) of the EU Regulation 2016/679 – expressed by the user by browsing this website and consulting it, thus accepting this policy.

2. Consent is optional and may be revoked at any time by means of a request sent by email to info@pharmahealherbs.com, specifying that, in this case, in the absence of consent, certain services may not be provided and navigation on the website may be compromised.

5 – Cookies

1. This section describes how this Site and third parties use cookies and similar technologies. The use of cookies takes place in compliance with the relevant European (Directive 2009/136/EC amended Directive 2002/58/EC “E Privacy”) and national regulations (Provvedimento Garante per la protezione dei dati personali of 8 May 2014 and subsequent clarifications as well as Linee Guida cookies e altri strumenti di tracciamento of 10 June 2021 n.231).

6 – Type of data processing

1. The processing of personal data is necessary for the pursuit of the legitimate interest of the data controller for purposes of providing information about the activity of pharmahealherbs.com pursuant to Article 6(1)(f) of EU Regulation 2016/679, in compliance with the provisions of the same Regulation.

2. This site makes use of Log Files in which information collected automatically during user visits is stored. The information collected may include the following

– internet protocol (IP) address

– browser type and parameters of the device used to connect to the site;

– name of the internet service provider (ISP);

– date and time of visit;

– the visitor’s web page of origin (referral) and exit;

– possibly the number of clicks.

2. The above information is processed automatically and collected in an aggregate form only for the purpose of verifying the correct operation of the site, and for security reasons. This information will be processed according to the legitimate interests of the owner.

3. For security purposes (anti-spam filters, firewalls, virus detection), automatically recorded data may possibly also include personal data such as the IP address, which could be used, in accordance with the relevant laws in force, in order to block attempts to damage the site itself or to cause damage to other users, or in any case harmful or criminal activities. Such data are never used for user identification or profiling, but only for the purpose of protecting the site and its users, such information will be processed according to the legitimate interests of the owner.

7 – Type of data purchased

1. pharmahealherbs.com collects user data directly from the site or from third parties. The data are necessary for the navigation of the site.

2. The data collected by pharmahealherbs.com are:
first name, last name,billing address, shipping address,,email,phone

8 – User-provided Data

1. If the website allows for comments, or in case of specific services requested by the user, including the possibility to submit a Curriculum Vitae for potential employment, the website automatically detects and records some user identification data, including email addresses. Such data is voluntarily provided by the user at the time of requesting the service.

2. By submitting a comment or other information, the user expressly agrees to the privacy policy. The received data will be used exclusively for the provision of the requested service and for the time necessary to provide the service.

3. Information that users of the website choose to make public through the services and tools made available to them is provided by the user knowingly and voluntarily, exempting this website from any liability regarding potential violations of laws. It is the user’s responsibility to verify that they have the necessary permissions to enter personal data of third parties or content protected by national and international regulations.

4. The optional, explicit, and voluntary sending of emails to the addresses indicated on this site involves the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data entered in the message.

5. Specific summary information will be progressively reported or displayed on the pages of the site prepared for particular services on request.

9 – Purpose of Data Processing

1. The data collected by the website during its operation is used for the purposes mentioned above and for the following purposes:

newsletter

10 – Data Retention

1. In accordance with Article 5.1(c) of the Regulation, the information systems and computer programs used by pharmahealherbs.com are configured to minimize the use of personal and identifying data; such data will be processed only to the extent necessary to achieve the purposes indicated in this Policy.

2. The data will be stored for the period strictly necessary to achieve the purposes pursued in each specific case, and in any case, the criterion used to determine the storage period is based on compliance with the terms allowed by applicable laws and the principles of minimization of processing and limitation of storage.

3. Data collected by the site will never be provided to third parties unless it is a legitimate request from the judicial authority and only in the cases provided by law.

4. Data used for security purposes (blocking attempts to damage the site) are stored for the time strictly necessary to achieve the aforementioned purpose.

11 – Payments

1. pharmahealherbs.com uses payment services to process payments by credit card, bank transfer, or other instruments. pharmahealherbs.com does not collect or acquire the data used for payment.

2. Payment data is collected and acquired directly by the payment service provider, such as the credit card company, Paypal, Stripe, or similar entities. These services may send messages to the user, such as email or SMS payment notifications.

3. The data acquired and their use by third-party services are governed by their respective Privacy Policies to which reference should be made.

PayPal, Service Provider: PayPal, Inc. Service Purpose: online payments Personal Data Collected: types of data as specified in the service’s privacy policy Place of Processing: as specified in the service’s privacy policy Privacy Policy (https://www.paypal.com/it/webapps/mpp/ua/privacy-full)

Stripe, Service Provider: Stripe, Inc. Service Purpose: online payments Personal Data Collected: types of data as specified in the service’s privacy policy Place of Processing: as specified in the service’s privacy policy Privacy Policy (https://stripe.com/it/privacy)

12 – Newsletter

1. With the prior consent of the user, and through voluntary registration via email, the user is added to a contact list to which periodic update emails, including promotional and marketing materials from this site, will be sent.

2. The user receives an email (to the provided email address) containing a link to click to confirm that the user is indeed the owner of the email address.

3. Personal data that may be collected in the newsletter: name, surname, billing address, shipping address, phone, email.

13 – Contact Forms

1. The user can fill in the contact/information request forms, entering their data and consenting to their use to respond to requests of the nature indicated in the form header.

2. Personal data that may be collected: name, surname, address, phone, email.

14 – User Rights

1. The user’s rights regarding the protection of personal data are guaranteed. In line with the GDPR, regarding the processing of their personal data, the user has the right to request from the Data Controller:

• Access: the user can request confirmation of whether or not data concerning them is being processed, as well as further clarification regarding the information provided in this policy;

• Rectification: they can request the correction or integration of the data they have provided if it is inaccurate or incomplete;

• Erasure: they can request the deletion of their data if it is no longer necessary for our purposes, in case of withdrawal of consent or objection to processing, in case of unlawful processing, or if there is a legal obligation to delete or if it concerns subjects under the age of fourteen;

• Restriction: they can request that their data be processed only for storage purposes, excluding other processing, for the period necessary to rectify their data, in case of unlawful processing to which they object to deletion, if they need to exercise their rights in court, and the data stored by the Controller may be useful, and finally, in case of objection to processing and while a verification of the legitimate reasons of the Controller over theirs is ongoing.

• Objection: they can object at any time to the processing of their data, unless there are legitimate reasons for the Controller to proceed with the processing that prevail over theirs, for example, for the exercise or defense of legal claims.

• Portability: they can request to receive their data, or to have it transmitted to another data controller indicated by them, in a structured, commonly used, and machine-readable format.

• Revocation: they can revoke their consent to the use of cookies (Cookie Policy) at any time, as this constitutes the basis of the processing. However, the revocation of consent does not affect the lawfulness of the processing based on consent before its revocation.

2. At any time, the user can request to exercise the aforementioned rights from orangorilla.com by contacting the email address: info@pharmahealherbs.com.

3. Additionally, the user has the right to lodge a complaint with the Italian Supervisory Authority: “Garante per la Protezione dei Dati Personali” if they believe that their rights have been violated by pharmahealherbs.com or if they are not satisfied with pharmahealherbs.com’s response to their requests.

4. Security of Provided Data

5. This site processes user data in a lawful and correct manner, adopting appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of data. Processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated.

6. In addition to the Data Controller, in some cases, the data may be accessible to categories of persons involved in the organization of the site (administrative, commercial, marketing, legal, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies).

7. Changes to This Document

8. This document, which constitutes the privacy policy of this site, is published at the following address:

---

2. It may be subject to changes or updates. Users are encouraged to periodically consult this page to stay informed about the latest legislative developments.

3. Previous versions of the document will still be available on this page.

4. The document was updated on 06/18/2022 to comply with legal provisions, in particular with Regulation (EU) 2016/679.