Privacy policy
This policy explains how we process the personal data of people who visit www.grazianofele.com and www.dentistaolbia.net and of people who contact us through the form, under Article 13 of Regulation (EU) 2016/679 (“GDPR”). It covers the websites only: patient data collected at the practice is handled under the privacy notice available at the practice.
1. Data controller
- Principal: Doc. Graziano Fele
- Address: Corso Vittorio Veneto 108/J, 07026 Olbia, Italy
- VAT: 01419280902
- Phone: +39 0789 25900
- E-mail: grazianofele@live.it
2. What data we process
Data you send us. When you write to us through the contact form, by email or by phone, we process your name, email address, phone number and the content of your message.
Job applications. If you reply to the “Work with us” section by sending your CV, we use the data it contains only to assess your application.
Health data. In the “What is it about?” field you may describe a problem or a treatment: this is health data (Article 9 GDPR). Please write only what we need in order to reply. We use it solely to answer your request, under professional confidentiality.
Browsing data. The server hosting the site automatically records some technical data: IP address, date and time of the visit, page requested and browser type. It is used only to run the site and protect it from abuse.
The site uses no analytics, profiling or advertising tools.
3. Why we process data, and for how long
| Purpose | Legal basis | Retention |
|---|---|---|
| Replying to your requests and booking appointments | Your request, steps prior to a contract (Art. 6.1.b GDPR); for health data, healthcare purposes by a professional bound by confidentiality (Art. 9.2.h GDPR) | 12 months from the last contact. If the inquiry leads to a visit, the data are incorporated into the clinical records, which are governed by the patient privacy notice. |
| Assessing unsolicited job applications | Steps prior to a contract at your request (Art. 6.1.b GDPR; Art. 111-bis of Italian Legislative Decree 196/2003) | 12 months from receipt |
| Running and securing the site (browsing data) | Legitimate interest in a secure site (Art. 6.1.f GDPR) | For a limited period set by the hosting provider |
| Legal obligations and the defence of legal claims | Legal obligation (Art. 6.1.c GDPR) and legitimate interest (Art. 6.1.f GDPR) | For the period required by law |
Providing your data. Sending us your data is optional, but without a name and a way to reach you we cannot reply.
4. Who receives the data
Your data is read only by the controller and, where needed, by the practice’s staff, who are authorised and bound by confidentiality. We do not sell or publish it.
To run the site we use these providers:
- Aruba S.p.A. (Italy): hosts the site and sends the contact form messages.
- Microsoft (Outlook.com): runs the practice’s mailbox, where messages arrive.
- Adobe (Adobe Fonts): provides the site’s typefaces. To display them, your browser connects to Adobe’s servers, which receive your IP address.
Microsoft and Adobe may also process data in the United States. These transfers rely on the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework, in which both companies participate.
Google Maps. The map on the Contact page loads only if you click “Show map.” Until then, no data is sent to Google. When you load it, or when you open the “Open in Google Maps” link, Google receives your IP address and may set its own cookies, according to the privacy policy di Google.
5. Cookies
The site uses only technical cookies, needed for it to work, which do not require your consent: for example, the cookie that remembers your language (Italian or English). We use no analytics, profiling or advertising cookies. The only third-party cookies are Google’s, and only if you choose to load the map (see above).
You can delete or block cookies in your browser settings.
6. Your rights
At any time you can ask us to:
- access your data and receive a copy;
- correct or update it;
- delete it;
- restrict its processing;
- receive it in a machine-readable format (portability);
- object to processing based on legitimate interest.
To do so, please write to grazianofele@live.it or to the firm’s address. We will respond within one month.
If you believe that the processing violates the GDPR, you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) – located at Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it – or with the supervisory authority in the EU country where you live or work.