INFORMATION NOTICE ARTICLE 13 REG. EU 2016/679- GDPR – INFORMATION NOTICE FOR THE PROCESSING OF PERSONAL DATA COLLECTED FROM THE DATA SUBJECT
In compliance with the provisions of Reg. EU 2016/679 (European Regulation for the protection of personal data), we provide you with the necessary information regarding the processing of personal data provided while browsing the website of the data controller. This information notice is not valid for other websites that may be consulted via links present on the websites under the domain of the controller, who is in no way responsible for third-party websites.
This is an information notice provided pursuant to Article 13 of Reg. EU 2016/679 (European Regulation for the protection of personal data).
DATA CONTROLLERS
The data controller, pursuant to Articles 4 and 24 of Reg. EU 2016/679, is:
Dr. Enrico Guadalupi
Centro Odontoiatrico San Marco Via Annibale Vecchi 195 PG
VAT No. 03336190545
Email address of the Data Controller: guadalupi.pg@gmail.com
TYPES OF DATA PROCESSED
Personal data: any information concerning a data subject, with particular reference to an identifier such as name, identification number, location data, an online identifier, or one or more elements specific to their physical, physiological, genetic, mental, economic, cultural, or social identity – see Article 4, c.1, no. 1 GDPR.
Processing of personal data means: “any operation or set of operations, performed with or without the aid of automated processes, applied to personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction.”
A data subject is defined as: “an identified or identifiable natural person.”
Specific Information Notices
Specific information notices may be presented on the website pages in relation to particular services or data processing activities provided.
PURPOSE AND LEGAL BASIS OF PROCESSING
The personal data provided will be processed in compliance with the conditions of lawfulness under Article 6 Reg. EU 2016/679 for the following purposes:
– browsing this website; scheduling appointments, services, visits, and related activities (internal organizational activities and activities functional to the fulfillment of contractual and pre-contractual obligations) – Article 6(f) Reg. EU 2016/679 as the legal basis for processing.
Data processing is based on Article 6(1)(f): (Recital 47), considering the legitimate expectations of the data subject at the time and within the context of the collection of personal data when the data subject can reasonably expect processing to take place for this purpose.
– with prior consent and until its withdrawal, to subscribe to the newsletter of the data controller in order to receive informational material and emails aimed at promoting the activity of the dental center as well as events and initiatives promoted by it – Article 6(a) Reg. EU 2016/679 as the legal basis for processing.
RECIPIENTS OR CATEGORIES OF RECIPIENTS OF THE DATA
The personal data provided will be communicated to recipients who will process the data as processors (Article 28 of Reg. EU 2016/679) or as natural persons acting under the authority of the Controller and the Processor (Article 29 of Reg. EU 2016/679), for the purposes listed in point 3. Specifically, data will be communicated to:
– Entities providing services for the management of the information system and communication networks (websites, email); – Competent authorities for legal obligations and/or orders from public authorities, upon request.
The entities belonging to the above categories act as Data Processors, or operate in total autonomy as distinct Data Controllers. The list of Data Processors is constantly updated and available at the registered office at:
Centro Odontoiatrico San Marco Via Annibale Vecchi 195 PG
TRANSFER OF DATA TO A THIRD COUNTRY AND/OR AN INTERNATIONAL ORGANIZATION AND GUARANTEES
The personal data will not be transferred abroad, either within or outside the European Union.
For certain specific processing activities, personal data may be sent to companies based abroad, within the European community, using web portals equipped with an HTTPS protocol and access via a personal account.
DATA RETENTION PERIOD OR CRITERIA
Processing will be carried out in automated and/or manual form, with methods and tools designed to ensure maximum security and confidentiality, by specifically authorized personnel.
In compliance with Article 5(1)(e) of Reg. EU 2016/679, the personal data collected will be stored in a form that allows identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed. The retention of personal data provided depends on the purpose of processing, and the user may review the relevant information by consulting the Data Retention Policy of the data controller.
NATURE OF DATA PROVISION AND REFUSAL
The provision of data is either optional or necessary depending on the different purposes of processing.
Specifically, the provision of data for browsing and booking services is necessary to pursue your legitimate interest, i.e., your legitimate expectation of receiving a response from the controller and booking a service. Failure to provide data will result in the inability to offer the requested service and fulfill your request. The provision of data for newsletter subscription is optional and must be freely given by you. Failure to provide data will result in the inability to subscribe to the data controller’s newsletter but will not negatively affect the ability to book a service.
DATA SUBJECT RIGHTS
You may exercise your rights as expressed in Articles 15, 16, 17, 18, 19, 20, 21, 22 of Reg. EU 2016/679 by contacting the Data Controller, or the Data Processor, under Article 38(4), at guadalupi.pg@gmail.com.
You have the right, at any time, to request access to your personal data, rectification, erasure, restriction of processing. You also have the right to object at any time to the processing of your data (including automated processing, e.g., profiling), as well as to data portability. Without prejudice to any other administrative and judicial remedy, if you believe that the processing of your data violates the provisions of Reg. EU 2016/679, under Article 15(f) of the aforementioned Regulation, you have the right to lodge a complaint with the Data Protection Authority and, with reference to Article 6(1)(a) and Article 9(2)(a), you have the right to withdraw your consent at any time. In the case of a data portability request, the Data Controller will provide you with your personal data in a structured, commonly used, and machine-readable format, subject to paragraphs 3 and 4 of Article 20 of Reg. EU 2016/679.
Last update date: 26 February 2025