Privacy Policy

1. Data Controller

The controller of the personal data collected through this website is:

2. Types of Data Collected

2.1 Data provided voluntarily by the user

The voluntary, explicit submission of data through the contact form on the site results in the collection of the data provided, necessary to respond to the request. The data collected includes:

• First and last name
• Email address
• Phone number (optional)
• Message/request
• Treatment of interest (optional)
• How you heard about the doctor (optional)

2.2 Browsing data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This data includes:

• IP address
• Browser type used
• Operating system
• Pages visited and time spent
• Traffic source

2.3 Cookies and similar technologies

This site uses technical and analytics cookies. For more information, see our Cookie Policy.

3. Purposes of Processing

The personal data collected is processed for the following purposes:

4. Legal Basis for Processing

The processing of personal data is based on the following legal grounds:

• Consent of the data subject (Art. 6.1.a GDPR) for requests sent via the form
• Explicit and specific consent (Art. 6.1.a GDPR) for any newsletter sending (if activated)
• Performance of pre-contractual measures (Art. 6.1.b GDPR) to handle requests for treatment information
• Legitimate interest (Art. 6.1.f GDPR) for aggregated statistical analysis and site security

5. Data Recipients

The personal data collected may be shared with:

• Partner clinics (Image Regenerative Clinic, YouMedical) exclusively for managing bookings
• Technical service providers:
  • Netlify (hosting and form management)
  • Google Analytics (aggregated statistical analysis)
• Competent authorities when required by law

Data will never be shared with third parties for marketing or profiling purposes without explicit consent.

6. Data Transfer

Some of the services used may transfer data outside the European Union. In particular:

• Google Analytics: data may be transferred to the United States. Google adheres to the EU-US Data Privacy Framework.
• Netlify: servers are distributed globally with GDPR compliance guarantees.

7. Retention Period

Personal data will be retained for:

• Form requests: 12 months from receipt, unless retention is required for legal obligations
• Newsletter data (if activated): until consent is withdrawn, or a maximum of 24 months from the last interaction
• Browsing data: according to Google Analytics settings (14 months by default)
• Technical cookies: for the duration of the session or as specified in the Cookie Policy

8. Your Rights

In accordance with the GDPR, you have the right to:

To exercise these rights, you can contact us at: dottoressa.miegge@gmail.com

You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it), the competent supervisory authority given that this website is operated under Italian jurisdiction.

9. Data Security

We adopt appropriate security measures to protect personal data from unauthorised access, alteration, disclosure or destruction. These include:

• SSL/TLS encryption for data transmission
• Access to data limited to authorised personnel only
• Regular system monitoring
• Periodic data backups

10. Minors

This website is not intended for individuals under 16 years of age. We do not knowingly collect personal data from minors under 16 without the consent of a parent or legal guardian. If you become aware that a minor has provided us with personal data without consent, please contact us.

11. Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Changes will be published on this page with an indication of the update date. We invite you to check this page regularly to stay informed about how we protect your data.

13. Newsletter (if activated)

14. Contact

For any questions or requests regarding personal data processing, you can contact us: