Privacy Notice
Pursuant to the General Data Protection Regulation (EU Regulation 2016/679 – GDPR)
Dear Data Subject,
In accordance with the applicable legislation, our data processing activities are carried out in compliance with the principles of fairness, lawfulness, transparency, and the protection of your privacy and rights. Pursuant to Article 13 of the GDPR (EU Regulation 2016/679), we hereby provide you with the following information.
Processing Activity Covered by this Notice
Website Contact Management
Categories of Data Subjects
- Patients
- Prospective patients
- Employees and collaborators of Studio Odontoiatrico Dott.ri Giano Ricci e Caterina Ricci Associazione Professionale
Categories of Personal Data Processed
Database: Patients
- Identification data
- Contact details
- Health-related data
Processing Methods
Personal data are processed both electronically and in paper form.
Purpose of Processing
Through the processing activity referred to as “Website Contact Management”, Studio Odontoiatrico Dott.ri Giano Ricci e Caterina Ricci Associazione Professionale collects and manages contact requests submitted through the company website:
https://studioriccifirenze.it/
The Data Controller ensures that personal data are processed exclusively for the stated purposes and only to the extent strictly necessary for achieving those purposes. The Controller also undertakes, within reasonable limits, to update, correct, and keep data accurate, and to delete any data that are excessive or no longer necessary for the declared processing purposes.
Legal Basis for Processing
Processing is based on the consent provided by the data subject when completing the contact request form.
Providing personal data is voluntary. However, failure to provide such data may make it impossible to manage the organizational, administrative, and service-related procedures requested by the data subject.
Article 8 – Children’s Data
No personal data relating to minors are processed within the scope of the Website Contact Management activity.
Article 9 – Special Categories of Personal Data
No health, biometric, or judicial data are processed within the scope of the Website Contact Management activity.
Data Retention Period
The Website Contact Management processing activity has an indefinite duration.
Studio Odontoiatrico Dott.ri Giano Ricci e Caterina Ricci Associazione Professionale declares that this processing activity will remain active for as long as necessary to carry out its core business activities in compliance with applicable laws. The Data Controller ensures that, once the purposes of the processing have been fulfilled and after the maximum legal retention period has expired (10 years), personal data will be deleted.
Profiling and Automated Decision-Making
This processing activity does not involve automated decision-making processes or profiling.
Transfer of Data Outside the European Union
Personal data are not transferred to countries outside the European Union.
Data Controller
Studio Odontoiatrico Dott.ri Giano Ricci e Caterina Ricci Associazione Professionale
Email: giano@studioriccifirenze.it
Rights of Data Subjects
You have the right at any time to obtain confirmation as to whether personal data concerning you are being processed and, where that is the case, to access such data and information regarding their origin, accuracy, and processing.
You also have the right to request the rectification, updating, completion, erasure, anonymization, or restriction of personal data processed in violation of the law, as well as to object, on legitimate grounds, to their processing.
Requests should be addressed to:
Studio Odontoiatrico Dott.ri Giano Ricci e Caterina Ricci Associazione Professionale
Via Gino Capponi, 26
50121 Florence (FI), Italy
Email: giano@studioriccifirenze.it
If the Data Controller does not respond to your request, you have the right to lodge a complaint with the competent Data Protection Authority.
Under the GDPR (EU Regulation 2016/679), data subjects are entitled to the following rights:
- Right of access (Art. 15)
- Right to rectification (Art. 16)
- Right to erasure (“right to be forgotten”) (Art. 17)
- Right to restriction of processing (Art. 18)
- Right to notification regarding rectification, erasure, or restriction of processing (Art. 19)
- Right to data portability (Art. 20)
- Right to object (Art. 21)
- Rights related to automated decision-making, including profiling (Art. 22)
Right to Lodge a Complaint
You may lodge a complaint with the Italian Data Protection Authority at any time by registered mail addressed to:
Italian Data Protection Authority (Garante per la Protezione dei Dati Personali)
Piazza Venezia 11
00186 Rome, Italy
Alternatively, complaints may be submitted via certified email (PEC) to:
