Privacy policy

Data controller

Dr Nicola De Candia, Via Niccolò dall'Arca 19, 70121 Bari, Italy – VAT no. 06985120721 – email nicopa2000@yahoo.it – tel. +39 080 5219334

What data we process and why

The site has no contact forms and no registration. The data processed are the following.

• Browsing data. To run the site and protect it from abuse, the hosting provider’s systems record technical data such as IP address, browser type, requested page, date and time. Legal basis: the controller’s legitimate interest in the security and operation of the site (Art. 6(1)(f) GDPR).
• Visit statistics. Vercel Web Analytics measures, in aggregate, how often pages are viewed, without cookies and without identifying visitors. Legal basis: legitimate interest in understanding how the site is used (Art. 6(1)(f) GDPR).
• Marketing cookies. Only if you accept them in the banner, the site loads Google Ads, which measures visits and bookings that come from ads. Legal basis: consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code), which you can withdraw at any time. Details are in the Cookie policy.
• Map. The map on the Contact page is loaded from Google only if you click “Show the map”; from then on Google processes data (such as your IP address) under its own privacy policy.
• Data you give us. If you call the practice or send an email, the data you provide, including any health data, are used to reply and to manage the appointment and the visit. Legal basis: steps requested by the data subject and healthcare provision (Art. 6(1)(b) and Art. 9(2)(h) GDPR).
• Online bookings. Bookings through MioDottore take place on the MioDottore website, which processes data as an independent controller under its own privacy policy.

Who receives the data

Data are processed by the controller and, for technical services, by providers acting on its behalf or as independent controllers:

• Vercel Inc. (United States): website hosting and visit statistics.
• Google Ireland Limited and Google LLC: Google Ads (only with your consent) and the map (only if you load it).

Transfers outside the European Union

Some providers are based in the United States. Transfers rely on the safeguards provided by the GDPR, such as the adequacy decision for the EU-U.S. Data Privacy Framework or the Standard Contractual Clauses approved by the European Commission.

How long we keep data

• Browsing data: only as long as needed for the security and operation of the site, according to the hosting provider’s policies.
• Your cookie choice: 6 months, after which the banner is shown again.
• Marketing cookies: for the duration stated in the Cookie policy.
• Data shared by phone or email: as long as needed to handle the request and, for health data, as required by law.

Your rights

You can ask at any time for access to your data, rectification, erasure, restriction of processing and portability, and object to processing (Articles 15–22 GDPR), by writing to nicopa2000@yahoo.it. You can withdraw consent to marketing cookies through the “Cookie preferences” link at the bottom of every page; this does not affect the lawfulness of earlier processing.

If you believe the processing breaches the GDPR, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

• Garante per la protezione dei dati personali

Providing data

Browsing the site does not require you to provide personal data. Consent to marketing cookies is optional: if you reject it, the site still works fully.