PRIVACY NOTICE AND COOKIE POLICY (GDPR)

Pursuant to Article 13 of EU Regulation 2016/679 (GDPR), the purpose of this Privacy Notice is to inform users (hereinafter referred to as ‘Data Subjects’ or ‘Patients’) who visit and use this website about how their personal data, with particular attention to confidentiality and security, in accordance with current European and Italian legislation.

1. Data Controller
The Data Controller is:
First name and surname: Dr Enrico M. Staderini
VAT No. / Tax Code: 00771541000 / STDNCM56M16D653V
Office address: Viale J.F. Kennedy, 141 00043 Ciampino (RM)
Contact details: +39 06 79321112 | stadero@staderini.eu
2. Types of Data Processed
The following data may be collected and processed via this website:
Browsing data: IP addresses, system logs, and domain names of the computers used by users who connect to the site. This data is used solely for the purpose of compiling anonymous statistical information on the use of the site.
Data provided voluntarily by the user: first name, surname, email address, telephone number (for example, via the contact form or when booking appointments).
Special categories of data (Health): Where the user voluntarily describes symptoms, medical conditions or requests renewals of prescriptions in the website’s free-text fields.
Important note for patients: Please do not enter excessive or unnecessary health information in the general contact forms on the website. For complex clinical communications, please use the secure channels indicated by the practice.
3. Purpose of Processing and Legal Basis (in accordance with the GDPR)
Personal data is processed for the following purposes:
Handling requests for contact, information or appointment bookings. Taking steps prior to entering into a contract or performing contractual obligations (Art. 6(1)(b)).
Provision of healthcare services (e.g. online prescription requests, preliminary consultations). Diagnosis and healthcare/social care (Art. 9(2)(h))
Explicit consent is not required if the processing is carried out by a healthcare professional subject to professional confidentiality.
Website maintenance and security (prevention of fraud or cyber attacks). Legitimate interest of the Data Controller (Art. 6, para. 1, point f).
4. Methods of Data Processing and Storage
Data processing is carried out using IT, electronic and paper-based means, in accordance with procedures strictly related to the purposes in question and, in any event, in such a way as to ensure the security and confidentiality of the data.
Retention period: Contact details collected via the website will be retained for the period strictly necessary to respond to the user’s request (maximum [e.g. 12/24 months] in the event that a continuous therapeutic relationship is not established). Data that becomes part of the patient’s medical records will be retained indefinitely, in accordance with any applicable legal obligations.
5. Recipients of Personal Data
Personal data will not be disclosed (i.e. made accessible to unspecified parties). It may be disclosed exclusively to:
The practice’s administrative or nursing staff, who are duly authorised and trained.
Third parties providing website and IT system management services (appointed as External Data Processors pursuant to Article 28 of the GDPR).
Public bodies or judicial authorities to comply with legal obligations.
Data is not transferred outside the European Economic Area (EEA).
6. Rights of the data subject
At any time, the user may exercise the rights provided for in Articles 15 et seq. of the GDPR, including:
Access: To find out what data is being processed and to receive a copy of it.
Rectification: Requesting the correction of inaccurate or incomplete data.
Erasure (Right to be forgotten): Requesting the erasure of data (provided this does not conflict with obligations to retain medical records).
Restriction and Objection: Objecting to the processing or requesting its restriction on legitimate grounds.
Portability: To receive your data in a structured and machine-readable format.
To exercise these rights, you may send a written request to the Data Controller’s contact details provided in point 1.
The Data Subject also has the right to lodge a complaint with the Italian Data Protection Authority (https://garanteprivacy.it/).
7. Cookie Policy (Summary)
This website uses technical cookies that are necessary for the pages to function properly, and anonymised analytics cookies (e.g. Google Analytics with IP masking) for statistical purposes, which do not profile the user.
You can disable cookies at any time by changing your browser settings.
8. Contacts
For further details or information, please contact the practice at: stadero@staderini.eu
9. Update
Last updated: May 26th, 2026.