Terms and conditions of sale

Reservations can be made directly on Ambimed's website www.ambimed-group.com

Ambimed reserves the right to decide at any time to change, add and rectify the services offered to patients. Some of the services offered can also be provided upon request and reservation at home.

Prices may be changed, at any time, at Ambimed's discretion. The user will be charged the price list in effect at the time of booking, even if not visible on the website due to maintenance or updating.

Any User may request changes to his/her reservation within 24 business hours prior to the appointment time.

For example, "for an appointment scheduled for Thursday at 12:00 noon, the user must request the change by 12:00 noon on Wednesday."

To request a change in your reservation, you must call 02/87399117 or send an e-mail to prenotazioni@ambimed-group.com.

Our central office hours are Monday through Friday, 9:00 am to 1:00 pm and 2:00 pm to 6:00 pm.

Only after receiving confirmation emails from an Ambimed operator can the change be considered valid.

It will be possible to reschedule the appointment a total of two times. From the third change request, the appointment will be cancelled and 20% will be deducted to cover the handling and collection costs of the service.

The only accepted mode of online payment is by credit or debit card and you will be redirected to the payment management portal. The accepted cards are:

• Visa (credit and debit cards)
• MasterCard (credit and debit cards)
• American Express.

Once the payment is completed, the User will automatically receive a summary email confirming the reservation and an email summarizing the economic transaction (automatic from the electronic payment portal).

All users who pay electronically will be eligible for the 19% tax deduction on the following year's tax return.

In the 48 business hours prior to the appointment, the User may cancel his or her reservation and receive a full refund or reschedule the activity on another date.

All appointments that are canceled with less than 48 business hours notice, except for force majeure or other reasons that result in an objective and demonstrable impediment for the User to receive service, will not be refunded.

If the service cannot be rendered for any reason attributable to the clinic (e.g., sudden unavailability of the physician), a time alternative for the appointment will be proposed and an attempt will be made to reschedule it within the next 72 working hours. If the alternative does not serve the User's needs, Ambimed will make a full refund of the amount.

The Customer declares that he/she has all the technical knowledge necessary to ensure the proper use, administration and management of the Service.

The user agrees to declare up-to-date personal data correct and true, also agrees to guard and keep confidential the access credentials and is personally responsible, directly and indirectly of any improper and illegitimate use of the site part of him.

You are solely responsible for maintaining the security of your account login information such as email and password. The Company is not responsible for the loss of any information related to the user's account and/or from the damage resulting from the failure to comply with the above security obligations.

In addition, the User agrees to notify the Company of suspicious activity on his/her account such as unauthorized use of or access to the account by a third party.

This document concerns the confidentiality policies on personal data processed by AMBIMED S.r.l., P. IVA n. 11500980963, Corso Italia n.6, 20122 Milano (MI), e-mail info@ambimed-group.com as the Data Controller (henceforth the Data Controller or Ambimed).

The owner has also appointed the Data Protection Officer, who can be reached at the e-mail: dpo@ambimed-group.com.

The text describes, in accordance with the EU Regulation No. 2016/679 (the so-called "GDPR"), the methods of management of the processing of personal data of data subjects carried out by the Controller, who can be contacted using the following email addresses: info@ambimed-group.com, dpo@ambimed-group.com.

The Data Controller adopts as required by art 12 GDPR the following information notice as a measure to provide the data subject with the information referred to in art 13 and 14 GDPR and the notices referred to in art. 15 to 22 and 34 GDPR relating to the processing of the data provided, this information notice and to be understood as general, provided to all those who interact with the Data Controller.

Type of data processed. The Data Controller informs the data subject that the Personal Data provided through the entry into contact with the same, browsing data and personal data in the case of: (i) both data not falling under the special categories of personal data as listed in Art. 9 GDPR, (ii) and special data as listed in Art. 9 GDPR, concerning the same (even in the case of a person operating as a sole proprietor, small entrepreneur, professional) or its employees, agents, representatives or collaborators (the "Data"), will be processed in accordance with the provisions set forth in the GDPR, the Privacy Code as amended by Legislative Decree 101/2018 and the relevant national legislation.

The processing, carried out under the conditions of lawfulness provided for in art 6 GDPR, i.e. for the purposes inherent to the relationship established with the Data Controller, therefore, its legal basis as required under art 13 lett. c) GDPR, is justified in the reasons for which the relationship with the Data Controller is established and more precisely in relation to:

- to the navigation on this platform (navigation data)

- to the sending of Personal Data through the use of the platform for the health services booking service

Browsing Data. The computer systems and software procedures used to operate this website acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.(Check our cookie policy).

Personal data of common and particular types. These are the data of a personal nature in this case sent through the platform i.e. any information concerning an identified or identifiable natural person such as personal and contact data (first name, last name, age, gender, e-mail, telephone number, billing address), while with reference to those of a particular nature (health) concern those necessary to book and allow the subsequent health service.

Purpose of processing. The data are requested to fulfill the service requested by the client of the service of a medical nature, more specifically consultation in the field of travel medicine and / or occupational medicine, use and consultation of any diagnostic documentation necessary to provide the service.

Legal basis. The processing is carried out according to the conditions of lawfulness provided for ex art 6 GDPR, for the purposes inherent to the relationship established with the Owner, therefore, its legal basis for as required ex art 13 lett c) GDPR finds justification in the reasons for which the relationship is established with the Owner and in this case art.6 lett. b) and/or c), while the legal basis relating to special data those provided for in art. 9 par. 2 lett. b), f), g), h) and i).

Method of processing. The processing of data will be carried out in paper and/or electronic form by persons specifically authorized to process them, it is also specified that no processing is carried out on the basis of automated decision-making processes. The provision of data is optional, however, failure to provide it may make it impossible to perform the service. Some navigation data (on this point see our cookies policy) are, instead, automatically acquired by the system. The processing on the data given to the Owner will include: management, organization, use, storage, creation of the database, performance of statistics, communication to the partners with whom the initiatives will be developed - subjects who will be appointed as responsible persons according to art. 28 GDPR or co-owners in case personal data will be communicated to them.

Disclosure of data. Your data, including those relating to your medical history, may be communicated, when necessary in relation to the provision of the service or the performance of the requested tasks to contracted physicians, contracted facilities, other Health Authorities and Hospitals, contracted pharmacies, other public and private entities, in the only cases provided for by a rule of law or regulation, in compliance with the regulations in force or upon your specific request or indication. Your data in any case cannot be subject to dissemination.

Transfer of data abroad. Your data may be transferred abroad according to the modalities established by the GDPR and the revised Privacy Code ex D. Lgs. 101/2018, i.e. processing throughout the EU and non-EU territory, countries falling under the cases ex art 45 and 46 GDPR or in any case according to the rules of Title V of the GDPR.

Data Retention. Data will be retained for a maximum of 5 years and in any case for as long as necessary to fulfill the purpose of collection and in any case the requirements of the law, in particular the healthcare facility and the contracted company's occupational physician, if any, may retain this data for longer if the law or regulations so provide.

Business communications. The processing based on legitimate interest is carried out in the manner of the so-called soft-spam, i.e. "light" communications aimed at informing the interested party of our future initiatives, i.e. monthly newsletters, the realization of statistics, the sending of promotional material as well as the use to promote conventions and meetings always with relation to the topics, products or services for which the interested party has come into contact with us, it remains without prejudice to the subsequent possibility of removing one's name from the mailing list or equivalent instrument through which one receives our communications at any time.

Rights of data subjects. The Data Controller also informs that the rights of rectification under Art 16 GDPR, the right to be forgotten under Art 17 GDPR, the right to restriction of processing under Art 18 GDPR as well as the right of access to the personal data provided and to all consequential information as listed under Art 15 GDPR are guaranteed. Data subjects also have the right to:

1. To request from the data controller access to the personal data and the rectification or erasure of the same or the limitation of the processing concerning them;
2. To object to their processing;
3. To the portability of data ex art 20 GDPR;
4. Where the processing is based on Article 6(1)(a) or Article 9(2)(a) to withdraw consent at any time without affecting the lawfulness of the processing based on the consent given before the withdrawal;
5. To lodge a complaint with a supervisory authority;

To exercise the rights listed above or to obtain more information, simply send an e-mail to the following e-mail address: dpo@Ambimed-group.com

indicating in the subject line: "exercise of rights ex GDPR" and including in the body of the email the right you want to exercise, as well as your name, surname and email address where you want to receive a response from Ambimed. The Owner once processed what has been received will send relative feedback in the terms indicated by art 12 GDPR.

Further Uses. The Owner in peculiar situations adopts specific notices accompanied by the relevant consents to be given in order to allow data processing, in addition, the Owner warns you that if it intends to further process personal data for a purpose different from the one for which they were collected, before such further processing it will provide the data subject with information about this different purpose and any further relevant information, collecting, in the case specific consent.

Enforcement. The Data Controller regularly updates this policy and in general its compliance with the Privacy Policy, adjusting it with new regulations issued. If you have any questions or concerns regarding this Privacy Policy you may contact us at any time by writing to: dpo@Ambimed-group.com

Complaints. We will respond to users who send questions and/or formal written complaints to this address dpo@Ambimed-group.com to further investigate the reported problem. We are committed to cooperating with the appropriate authorities, to settle any complaints regarding the processing of personal data that are not resolved directly between the Owner and individual individuals.

Provision of data and consent to processing. With the exception of any legal obligations, the provision of the requested personal data is optional, but necessary for the full achievement of the purposes stated above.