Separate roles
The controller, actual organiser, Technology Partner and suppliers must be assessed per processing operation. UESE ITALIA S.p.A. is Technology Partner; its substantive GDPR role must be assessed and a processor agreement signed where Article 28 applies.
Supplier inventory
Hosting, SMTP, payments, optional AI, CRM, analytics, newsletter and support services require a verified register covering purposes, location, categories, subcontractors, security, retention, breach assistance and deletion.
Cross-border transfers
Every transfer outside the EEA must be assessed under GDPR Chapter V, including safeguards and supplementary measures where necessary. Unverified country, contract and guarantee lists must not be published.
Change governance
New AI, analytics, mail or hosting services require pre-production privacy review, contract checks and an accurate update of the public recipient information where appropriate.
Contact the DPO
dr. prof. Giuseppe Izzo
dpo@medconvergence.org
Technology Partner: UESE ITALIA S.p.A. — assistenza e infrastruttura tecnologica nei limiti degli accordi da formalizzare.