Privacy Policy

1. Data Controller

The controller of the personal data collected through this website is:

2. Types of Data Collected

2.1 Data provided voluntarily by the user

The voluntary, explicit submission of data through the contact form on the site results in the collection of the data provided, necessary to respond to the request. The data collected includes:

• First and last name
• Email address
• Phone number (optional)
• Message/request
• Treatment of interest (optional)
• How you heard about the doctor (optional)

The treatment of interest and the text of the message may reveal health information. For this reason the form asks you not to describe medical conditions or current treatments, which are discussed at the consultation. If such information is entered anyway, it is processed by Dr. Miegge, who is bound by medical confidentiality, solely to reply and to arrange the consultation.

After sending, an automatic acknowledgement of receipt is emailed to the address you provided; it does not include the content of your message.

2.2 Browsing data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This data includes:

• IP address
• Browser type used
• Operating system
• Pages visited and time spent
• Traffic source

2.3 Cookies and similar technologies

This site uses one technical cookie to remember your cookie choice and, only if you accept, Google Analytics cookies. Without your consent Google Analytics is not loaded. For more information, see theCookie Policy.

3. Purposes of Processing

The personal data collected is processed for the following purposes:

4. Legal Basis for Processing

The processing of personal data is based on the following legal grounds:

• Steps taken at your request prior to entering into a contract (Art. 6.1.b GDPR) to reply to requests sent through the form and arrange the consultation (purposes a and b)
• Purposes of medical diagnosis and care (Art. 9.2.h and 9.3 GDPR), by a doctor bound by professional secrecy, for any health information contained in the request
• Consent (Art. 6.1.a GDPR and Art. 122 of the Italian Privacy Code) for statistics with Google Analytics (purpose c), which you can withdraw at any time through the "Cookie preferences" link at the bottom of every page
• Legitimate interest (Art. 6.1.f GDPR) in the security and proper operation of the site (purpose d)

Name, email and message are needed to receive a reply; the other form fields are optional.

5. Data Recipients

The personal data collected may be shared with:

• Technical service providers, processing data on behalf of the controller:
  • Netlify, Inc. (website hosting, collection of requests sent through the form)
  • Resend (sending the automatic acknowledgement email)
  • Google (the email account through which Dr. Miegge receives notifications and replies)
  • Google Analytics, only if you have accepted cookies (website usage statistics)
• Authorised persons: whoever manages the site technically may access requests only for technical checks, under written instructions and a duty of confidentiality
• Competent authorities when required by law

Data sent through the form is not shared with the clinics where Dr. Miegge practises and is never passed on to third parties for marketing or profiling purposes.

6. Data Transfer

Netlify, Resend and Google are based in the United States, so data may be transferred outside the European Union. Transfers are based on the European Commission's adequacy decision for the EU-US Data Privacy Framework, for providers certified under it, or on the standard contractual clauses approved by the Commission (Arts. 45 and 46 GDPR). You can ask for information on the safeguards in place by writing to the address in the Contact section.

7. Retention Period

Personal data will be retained for:

• Form requests: 12 months from receipt, unless retention is required for legal obligations
• Google Analytics data (only with consent): according to Google Analytics retention settings, at most 14 months
• Cookies: for the durations stated in the Cookie Policy

8. Your Rights

In accordance with the GDPR, you have the right to:

To exercise these rights, you can contact us at:dottoressa.miegge@gmail.com

You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it), the competent supervisory authority given that this website is operated under Italian jurisdiction.

9. Data Security

We adopt appropriate security measures to protect personal data from unauthorised access, alteration, disclosure or destruction. These include:

• SSL/TLS encryption for data transmission
• Access to data limited to authorised personnel only
• Regular system monitoring
• Periodic data backups

10. Minors

This website is not intended for individuals under 16 years of age. We do not knowingly collect personal data from minors under 16 without the consent of a parent or legal guardian. If you become aware that a minor has provided us with personal data without consent, please contact us.

11. Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Changes will be published on this page with an indication of the update date. We invite you to check this page regularly to stay informed about how we protect your data.

12. Contact

For any questions or requests regarding personal data processing, you can contact us: