This Privacy Policy will be given to persons who participate in exhibitions/meetings and conferences

when they fill in the form for the collection of personal details


Dear Participant,

This document describes how we process and use the personal data you provide when you fill in the data collection form (hereafter referred to as the “form”) for your participation in the medical-scientific exhibitions, conferences and meetings that Tiss’You S.r.l. organises, hereinafter referred to as “event/s”.

This Privacy Policy is provided within the meaning of EU Regulation no. 679/2016 (“GDPR”) and Law no. 71 of 21 December 2018 of the Republic of San Marino.

As set forth by the Privacy law, we are providing all the required information on the processing of the personal data you voluntarily provide when you fill in the above form, that is necessary for your participation in the above events.

  1. Data Controller

The Data Controller is “TISS’YOU s.r.l.” a company established in San Marino, with registered office in 47895 Domagnano, Republic of San Marino, Strada di Paderna 2, and fully paid up share capital of 26,000.00 Euro, San Marino, Economic Operator Code 27160, represented by its pro tempore legal representative (hereinafter also referred to as “TISS’YOU”, the “Data Controller” or the “Company”). This Privacy Policy is therefore provided by the company TISS’YOU in its capacity of Data Controller.

For more information please contact TISS’YOU on the following e-mail addresses: ordinary e-mail address:  PEC:

  1. Purpose of Processing

Your personal data will be processed lawfully, fairly and in a transparent manner in order to ensure confidentiality and protect your rights, in full compliance with applicable national and European data protection laws. Please be aware that we may process data that you provide in the following categories but only within the limits of the purposes and methods described by this Privacy Policy: “Personal data”, that include your general details (i.e. your name and surname) and contact details (i.e. your e-mail address); such data being referred to herein as “Personal Data”. Any personal data you voluntarily provide and/or communicate will therefore be processed for the following purposes:

Purposes of Processing of your Personal Data Legal basis of Processing
(a) to allow the Company to organise the event and contact you if, for example, the event is postponed for any reason whatsoever (Contractual Purposes)

In filling in the form for participation in the event, you automatically authorize the Data Controller to collect and process your Personal Data for the purposes indicated herein

your personal data are processed to fulfil any requests you may make when you voluntarily fill in the form to participate in an event
(b)   your personal data are processed to allow you to receive by text, MMS, WhatsApp, e-mail or phone from TISS’YOU or third parties to whom your data have been transferred, commercial and/or promotional messages in electronic or hardcopy format on the health care services offered by TISS’YOU or the activities it manages and/or organises

(Marketing purposes)

your consent is required
(c)   your Personal Data may be disclosed to other companies belonging to the HTA Medica S.p.A. group, established under the laws of San Marino and Italy, who may process your Personal Data for marketing purposes only

(“Disclosure to companies of the HTA Group for marketing purposes”)

your consent is required
(d)   please be aware that when processing your data in order to send you advertising material, or for direct sales, market surveys or commercial messages for goods or services similar to those used by you, the Data Controller may use your e-mail addresses within the meaning and limits of article 6, paragraph 1 (f) of the DGPR, even without your consent. You may object to the processing of your personal data for such purposes at any time; to do so please follow the instructions provided in the section “Rights of the Data Subject”

(so-called “soft spamming”)

your consent is not required


  1. Processing Method

Your personal data will be processed with manual, computerised or electronic tools that ensure the security and confidentiality of your data, by personnel who have been trained in compliance with the provisions of the applicable law. Other than if it is necessary to contact you for reasons related to your participation in the event, should you consent to the processing of your data for the purposes indicated by point b) of this Privacy Policy, you may be contacted by e-mail, text message or any similar electronic instrument, by letter or phone through an operator at any of the contact numbers and addresses you provide to TISS’YOU. Your data will be retained on the servers of Aruba, whose Data Centers are in the European Union. The supplier ensures full compliance with the provisions of the privacy law, above all Regulation 2016/679.

  1. Provision of Personal Data and Data Disclosure Policy

We collect only the personal data that you as a participant in the event wish to provide when you fill in the form; please be aware however that for the purposes indicated by paragraph 2, (a) “Contractual Purposes”, providing your personal data is mandatory: should you refuse to provide your personal data or provide data that are incomplete or incorrect, you will not be able to participate in the even nor will the organiser of the event be able to contact you.

For the purposes indicated by paragraph 2, (b) “Marketing purposes”, providing your consent for the processing of your personal data is entirely at your discretion. Should you refuse to provide your personal data or provide data that are incomplete or incorrect TISS’YOU may be unable to send you marketing messages or carry out other marketing activities but there will be no other negative consequences for the purposes indicated by point (a) paragraph 2. The data and information you provide may be associated with other data or information previously obtained by TISS’YOU if you have used other services offered by TISS’YOU.

Your personal data may be transferred to third-party companies, residing in EU or non-EU countries, provided they substantially comply with the provisions of the GDPR, that provide services relevant to the activities carried out by TISS’YOU or with which agreements have been signed in accordance with the applicable law. Please be aware that if you consent to processing, your Personal Data may be disclosed to other companies belonging to the so called  “HTA group”, to which both “HTA Medica S.p.A.”, a company incorporated under the laws of San Marino, with registered office in 47895 Domagnano, Republic of San Marino, Strada di Paderna 2, San Marino Economic Operator Code 23129, and “SXO S.r.l. – Services for Orthopaedics”, a company incorporated under Italian law, with registered office in Rome 00192, Piazza Cola di Rienzo 69, tax code and registration number with the Companies Register of Rome 08437581005 belong; the above companies may however process your Personal Data for marketing purposes only.

For example, your data may, if necessary, also be disclosed to public and/or private entities, natural and/or legal persons (such as legal consultants, commercial and tax advisors, labour consultants, IT companies and other entities) that the Company uses to execute the activities described by the above article 2. Natural or legal persons appointed by the Data Controller as data processors or persons in charge of processing, as well as employees and internal and external collaborators of the Company, may become aware of your personal data, but only for the purpose of performing their duties or tasks. The updated list of data processors and persons in charge of processing may be viewed at the registered office of the Data Controller.

Your data may also be disclosed when this is required by an order of a Court, the Police or Supervisory Authorities, and to any other entity or authority to which, by law, your Personal Data must be disclosed. The data we collect will not be disseminated.

  1. Place of Processing and Retention Period

Your data will be processed at the head offices of the data Controller or at the offices of third-party companies, duly appointed by the Data Controller, to whom your Personal Data have been legitimately disclosed. The data you provide when you fill in the form or communicate to TISS’YOU in any other way will be retained for a period 5 years.

  1. Rights of Data Subjects

Pursuant to the provisions of the GDPR and the applicable national law, data subjects have the following rights:

(i) the right to obtain confirmation of whether or not your personal data are held, even if such data have not yet been recorded, and to obtain an intelligible and clearly legible copy of the same;

(ii) the right to obtain information about: a) where your personal data was obtained; b) the purposes and method of processing and the retention period; c) the logic applied when data is processed with electronic instruments; d) the identification details of the data controller, data processors and representative designated in accordance with the applicable law; e) the subjects or categories of subjects to whom your personal data may be disclosed or who may become aware of such data as designated representatives in the territory of the State, data processors or persons in charge of processing;

(iii) the right to request: a) updating, rectification or, if there is an interest to do so, integration of data; b) deletion, transformation into anonymous form or blocking of any data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data was collected or subsequently processed; c) a statement declaring that the operations indicated by points a) and b) have been communicated, above all, the content thereof, to the data subjects whose personal data was disclosed or disseminated, unless this is impossible or entails the use of means that are manifestly disproportionate with respect to the right that is to be protected;

(iv) the right to object, in whole or in part: a) for legitimate reasons, to the processing of your personal data, even if such data is pertinent to the purpose for which they were collected; b) to the processing of your personal data for the purpose of sending advertising messages or direct sales or market surveys or commercial messages, through automated call systems without an operator or email and/or through traditional marketing methods by phone and/or postal mail. The data subject’s right to object, set forth by point (b) above, for direct marketing purposes through automated methods is also applicable to traditional marketing methods, without prejudice to the data subject’s right to exercise the right to object even in part. The data subject may therefore decide to receive only communications sent with traditional methods or only automated communications or neither one nor the other.

You are also entitled – if it is technically possible – to exercise the rights set forth by the applicable law including, for example, the right (v) to request that only some of your personal details be processed;(vi) and insofar as it is technically possible, you have the right to receive your personal data in a structured, commonly used and machine-readable format or the right to transmit those data  to another controller indicated by you or to you (known as data “portability” of your personal data and data you have voluntarily provided); (vii) the right to withdraw consent at any time, if this constitutes the basis of processing. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. You may exercise the above rights by sending a written request to the Company using the contact details indicated by article 1. The Data Controller should meet the request without undue delay and, in any case, within no more than one month from receiving the request. The above term may be extended by two months if necessary, taking into account the complexity and number of requests received by the Data Controller. Should this be necessary, within one month from receiving your request, the Data Controller will inform you why it is necessary to extend the term within which to fulfill your request. The Data Subject may lodge a complaint with the Data Protection Authority of the Republic of San Marino.

  1. Use of Photographs and Audio Recordings/Videos

During the event, Tiss’You may, with any device (camera, video camera, smartphone, etc.) take full length or partial photographs of you, make recordings, without exclusions or limitations, provided the above comply with principles of dignity and decorum of the person photographed and/or videoed; Tiss’You may also, directly or indirectly, reproduce in any way and in any form, publish, disseminate, project, document, transmit, distribute with any technical device or method and/or in any case use, both in Italy and abroad, images, photographs, and audio recordings/videos of you (referred to herein as the “Images”), through websites, social networks (Facebook, Instagram, etc.) digital channels, YouTube, TV channels via wireless or cable transmission, Internet Protocol Television, mobile terminals, Skype, Voice over IP or any other technological method, in order to document the training event, and for marketing purposes and, more generally, for purposes related to promoting refresher and training courses organised by the Company or other companies belonging to the HTA group. The Company may also, directly or indirectly, transcribe, record, edit, process, adapt and reduce such images and video recordings, with any technical method or device, and retain copies of such images and hardcopy materials and audio recordings/videos, even in electronic form and on any existing technological media or media that may be developed in the future, for the length of time indicated, and for the purposes and in compliance with the limits defined above. Tiss’You may moreover sell the Images to HTA Medica S.p.A. and to SXO S.r.l. Services for Orthopaedics who may use the Images for the purposes indicated here.