Legal information
Website antoniosavanelli.com – pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018 · Last updated: 03/10/2026
This is an English translation provided for convenience; in case of discrepancy, the Italian version prevails. The parts highlighted in yellow in square brackets must be completed or confirmed. This text is a starting draft and must be checked by a privacy or legal adviser before publication.
The data controller is Savanelli Medical STP S.r.l., a professional partnership company, with registered office at C.so Europa 100, 80016 Marano di Napoli (NA), Italy, VAT no. 10103761218, represented by its legal representative Antonio Savanelli (the “Controller”).
Privacy contacts: email privacy@antoniosavanelli.com – certified email (PEC) savanellimedicalstp@pec.it – phone +39 333 670 8282.
Data Protection Officer (DPO): Savanelli Medical stp srl
The IT systems and software that run the website collect, during normal operation, certain data whose transmission is implicit in the use of Internet communication protocols: for example IP address, browser type and operating system, date and time of the request, pages visited. This data is used to ensure the website works properly and securely and is kept only for as long as strictly necessary, unless needed to investigate offences.
By completing the “Book a consultation” form, writing by email or contacting the practice by WhatsApp or phone, you voluntarily provide: first name, last name, email, phone number, area of interest, the day chosen for the in-person consultation and any free-text message. Bookings are recorded in the website database, hosted on Aruba servers.
The area of interest and any information written in the message may reveal health data (Art. 9 GDPR). For this reason:
we ask you not to enter detailed medical information in the form; it will be collected directly by the doctor during the consultation;
such data is processed only on the basis of your explicit consent, given through the dedicated box in the form. Without this consent the website records only your contact details and the chosen day, and does not keep the area of interest or the message.
For information on cookies, please see the Cookie Policy at antoniosavanelli.com/en/cookie-policy
| Purpose | Legal basis | Retention |
|---|---|---|
| Answering requests for information and arranging the requested consultation | Pre-contractual measures taken at your request (Art. 6.1.b GDPR); for health data, explicit consent (Art. 9.2.a GDPR) | 12 months from the day of the booked consultation, with automatic deletion, if no care relationship follows |
| Managing any subsequent care relationship (consultation, surgery, follow-up) | Diagnosis and treatment (Art. 9.2.h and 9.3 GDPR) – covered by a separate privacy notice provided at the practice | As required by law (e.g. medical and tax records) |
| Administrative, accounting and tax obligations | Legal obligation (Art. 6.1.c GDPR) | 10 years (Art. 2220 of the Italian Civil Code) |
| Website security and abuse prevention | Legitimate interest of the Controller (Art. 6.1.f GDPR) | As long as strictly necessary |
| Establishing, exercising or defending legal claims | Legitimate interest (Art. 6.1.f) and Art. 9.2.f GDPR | For the duration of any dispute and until the limitation period expires |
| Website usage statistics | Consent (Art. 6.1.a GDPR), collected through the cookie banner | See the Cookie Policy |
Providing the data marked as mandatory in the form is necessary to answer your request; without it we cannot contact you. Consent to the processing of health data is optional, but without it any health data entered in the message cannot be taken into account.
Data is processed electronically and, where necessary, on paper, by authorised and trained staff (Art. 29 GDPR and Art. 2-quaterdecies of the Italian Privacy Code), with technical and organisational measures appropriate to ensure its confidentiality, integrity and availability: encrypted connection (HTTPS), password-protected access, regular backups. No automated decision-making or profiling takes place.
Data may be disclosed, strictly as necessary, to:
practice staff and members of the medical team authorised to process it;
Aruba S.p.A., provider of hosting and email services, appointed as data processor under Art. 28 GDPR;
accounting, tax and legal advisers, within the scope of their duties;
healthcare facilities where procedures are carried out, only in the event of a subsequent care relationship and as independent controllers;
public authorities, where required by law.
Data is not published or sold to third parties for marketing purposes.
The “WhatsApp” button opens a conversation on the WhatsApp service, provided by WhatsApp Ireland Ltd (Meta group), which processes data under its own privacy policy (whatsapp.com/legal). The website does not set any WhatsApp cookies until you click. We recommend not sharing detailed medical information via WhatsApp; please keep it for the consultation.
Data collected through the website is stored on servers located in the European Union Aruba – data centres in Italy. Some third-party services that may be used (e.g. Google Maps, WhatsApp) may involve a transfer to the United States; in that case the transfer takes place on the basis of the European Commission’s adequacy decision of 10 July 2023 (EU-U.S. Data Privacy Framework) or standard contractual clauses.
At any time you can exercise the rights set out in Articles 15-22 GDPR by writing to the contacts in section 1:
access to your data and a copy of it;
rectification of inaccurate data or completion of incomplete data;
erasure, in the cases provided for by Art. 17 GDPR;
restriction of processing;
portability of the data you provided;
objection to processing based on legitimate interest;
withdrawal of consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali – www.garanteprivacy.it – Piazza Venezia 11, 00187 Rome) or with the supervisory authority of the EU country where you live or work.
The website is not intended for children under 14 (Art. 2-quinquies of the Italian Privacy Code). Requests concerning patients under 18 must be made by the person with parental responsibility. Please note that Italian Law 86/2012 prohibits breast augmentation for purely aesthetic purposes in minors.
This notice may be updated. The version in force is always published on this page, with the date of the last update.
