Privacy Notice pursuant to Art. 13 of Legislative Decree 196/2003 and Art. 13 of EU Regulation 679/2016
We would like to inform you that Legislative Decree No. 196 of June 30, 2003 (“Personal Data Protection Code”) and EU Regulation 679/2016 (GDPR) lay down rules concerning the protection of personal data, safeguarding individuals and other subjects in relation to the processing of their personal information.
Data Controller
The Data Controller is Dr. Pagani, Vascular Surgeon, with registered office at Centro NovaMed – Via G. Mameli 5, Sanremo (IM), Italy. If you have any questions regarding the protection of your personal data, you can contact Dr. Pagani by email at: raffaellopagani@gmail.com.
Types of Data Collected
Dr. Pagani collects various types of personal data, either directly or via third parties. The data collected includes, but is not limited to:
- Contact details: name, surname, email address, phone number
- Health data: information related to your medical condition (e.g., reason for visit, diagnosis, etc.)
- Browsing data: IP addresses, website navigation details, cookies
Some data is provided voluntarily by the user, while other data may be collected automatically during website usage.
Unless otherwise specified, all data requested by the website is mandatory. Failure to provide such data may make it impossible for the site to deliver the requested service. Where certain data is indicated as optional, users are free not to provide it without affecting the availability of the service.
The use of cookies or other tracking technologies is intended to ensure proper service functionality and to achieve additional purposes as described in this document and in the Cookie Policy.
How and Where Personal Data is Processed
Processing Methods
Personal data is processed using IT and/or digital tools, with procedures and organizational measures strictly aligned with the stated purposes. Appropriate security measures are applied to prevent unauthorized access, disclosure, or misuse.
In addition to the Data Controller, certain third parties involved in website management may also have access to the data. These include administrative, commercial, legal staff, IT service providers, and external technical partners, who may be designated as Data Processors.
Location of Processing
Data is processed at the Data Controller’s operational headquarters and at any other location where the parties involved in processing are located.
Personal data may be transferred to countries outside the European Union. For further information about where data is processed, please refer to the relevant sections of this document.
Legal Basis for Processing
Personal data is processed based on the following legal grounds:
User consent: When the user has given explicit consent for one or more specific purposes
Contract performance: When processing is necessary to fulfill a contract with the user or to take steps prior to entering into a contract (e.g., scheduling medical appointments)
Legal obligation: When processing is necessary to comply with a legal obligation to which the Data Controller is subject
Public interest: When processing is necessary for the performance of a task carried out in the public interest, such as managing health and medical services
Legitimate interest: When processing is necessary for the purposes of legitimate interests pursued by the Data Controller or third parties, such as administrative activities or marketing purposes
Retention Period of Personal Data
Personal data is retained for the duration necessary to fulfill the purposes for which it was collected. Specifically:
Data collected for contractual purposes will be retained until the contract has been fully executed
Data processed for the Data Controller’s legitimate interests will be retained as long as those interests persist
Data collected with the user’s consent may be retained until consent is withdrawn.
Once the retention period has expired, data will be deleted. After deletion, it will no longer be possible to exercise rights such as access, deletion, or data portability.
Purpose of Data Processing
The collected data is processed for the following purposes:
Managing medical appointments and consultation requests
Sending health-related updates, appointment reminders, or other communications
Responding to inquiries submitted via the website
Conducting statistical analysis and managing website traffic data
User Rights
Users have the right to access their personal data, request corrections or deletion, restrict processing, or exercise the right to data portability. To exercise these rights, users may contact the Data Controller using the email address provided.
