Privacy policy

Browsing this website does not require the request of personal data, except in cases where the user voluntarily decides to provide them through the appointment request form present on the platform. The data collected through this form are exclusively those necessary to manage the appointment request (e.g., name, contact details, preferred tentative date/time) and do not include information relating to health status or the reason for the visit.

As an alternative to the contact form on this website, the user can book an appointment through external healthcare booking platforms (such as, by way of example: MioDottore, TopDoctors, miraDry). These platforms are managed by independent third parties, who act as autonomous data controllers for the data collected through their own services: the user is invited to consult their respective privacy policies before using them. This document governs exclusively the processing of data carried out through the website https://clinicasu.com/.

For information on the use of cookies and tracking tools by this website, please refer to the Cookie Policy.

PERSONAL DATA PROCESSING (PRIVACY POLICY)

With reference to the provisions of EU Regulation 2016/679 (GDPR) and Legislative Decree 196/2003, as amended by Legislative Decree 101/2018, containing provisions for the protection of confidentiality in the processing of personal data, we hereby wish to inform you that:

- The personal data provided by you through the appointment request form, or otherwise acquired within the scope of our activity, may be subject to processing with or without the aid of electronic means, in compliance with the above-mentioned regulations, for the following purposes and on the following legal bases (Art. 6 GDPR):

1) management of the appointment request and related communications — legal basis: performance of pre-contractual measures requested by the data subject (Art. 6.1.b GDPR);

2) fulfillment of accounting, tax, and legal obligations connected to the provision of the service — legal basis: legal obligation (Art. 6.1.c GDPR);

3) protection of the Data Controller's rights in judicial or extrajudicial proceedings — legal basis: legitimate interest of the Data Controller (Art. 6.1.f GDPR), exercised in compliance with the rights and freedoms of the data subject.

The appointment request form on the website does not require the indication of data relating to health status or the reason for the visit; should the user spontaneously provide such information in the free field of the form, it will be processed, in addition to the above, on the basis of the explicit consent of the data subject (Art. 9.2.a GDPR), which can be revoked at any time with non-retroactive effect.

- The provision of data necessary to manage the appointment request is optional, but failure to provide it makes it impossible to follow up on the request itself.

- The Data Controller is YUCEL AYSE ECE, with registered office in Piazza Indipendenza 19, Firenze (FI), who can be contacted at the email address info@clinicasu.com.

- A Data Protection Officer (DPO) has not been appointed, as the conditions pursuant to Art. 37 GDPR do not apply, given that this involves the processing of identification and contact data collected through the website in the absence, by default of the form design, of special categories of data on a large scale. The Data Controller reserves the right to reassess this choice in the event of a change in the methods or volumes of processing.

- The data collected through the appointment request form are stored for the time necessary to process the request and to manage any relationship with the user, and in any case no longer than 24 months from the last contact, except for data with fiscal/accounting relevance, for which the retention terms provided by tax regulations apply (currently 10 years).

- The processing of the data provided may be carried out, in addition to the Data Controller, also by entities acting in their capacity as data processors pursuant to Art. 28 GDPR (e.g., hosting service provider/website management provider, tax consultant), as well as by entities recognized as having the right to access personal data by virtue of statutory, secondary, and/or EU regulations. The updated list of data processors is available upon request by writing to info@clinicasu.com.

- Data are not transferred outside the European Economic Area within the scope of the processing governed by this privacy policy. For non-EU transfers connected to tracking tools (e.g., Google Analytics), please refer to the Cookie Policy.

- At any time you may request access, rectification, restriction, or erasure of the aforementioned data, as well as revoke any consent given, by sending a written request to the Data Controller YUCEL AYSE ECE at the email address info@clinicasu.com.

Rights of the Data Subject (Artt. 15-22 and 77 of the GDPR)

In relation to the processing of personal data, the data subject has the right:

a) to obtain confirmation of the existence of data processing concerning them and to access it free of charge (right of access, Art. 15 GDPR);

b) to be informed about the purposes, legal bases, and methods of processing;

c) to obtain, without undue delay:

1) confirmation as to whether or not personal data concerning them exist and the communication of such data and their source in an intelligible form;

2) the erasure of data processed in violation of the law or no longer necessary in relation to the purposes for which they were collected (right to erasure, Art. 17 GDPR);

3) the updating, rectification or, where interested therein, integration of data (Art. 16 GDPR);

4) the restriction of processing in the cases provided for by Art. 18 GDPR;

5) the portability of the data provided to the Data Controller, in a structured, commonly used, and machine-readable format, where technically feasible (Art. 20 GDPR);

d) to object, in whole or in part, on legitimate grounds, to the processing of personal data concerning them, even if pertinent to the purpose of the collection (Art. 21 GDPR);

e) to object to the processing of personal data carried out for the purposes of commercial information, sending advertising materials, direct selling, or market research;

f) to withdraw any consent given at any time, without affecting the lawfulness of processing based on consent before its withdrawal (Art. 7.3 GDPR);

g) to lodge a complaint with the Data Protection Authority (Art. 77 GDPR), based in Piazza Venezia 11, 00187 Rome, website www.garanteprivacy.it, if they believe that the processing concerning them violates current legislation.

The rights described above relating to personal data concerning deceased persons may be exercised by anyone who has an interest therein. In exercising these rights, the data subject may grant, in writing, a delegation or power of attorney to natural persons or associations.

To exercise the rights listed above, you can write to info@clinicasu.com.

LEGAL RULES AND TERMS OF USE FOR CONTENTS

The user is NOT authorized to use the documentation or contents available on this website, unless explicit written authorization is obtained from the Data Controller. In such case, the rules to follow are:

1) Obtain prior authorization from YUCEL AYSE ECE.

2) The copyright notice must be present on all copies and must be accompanied by this full authorization.

3) The use of such documentation is intended solely for informational, non-commercial, or personal use. The aforementioned documentation cannot be copied, distributed on the internet, or transmitted through any online communication channel (websites, blogs, content portals) unless prior authorization is granted.

4) No modifications are made to any part of the documentation.

5) There is an obligation to insert an active link to https://clinicasu.com/.

Use for any other purpose is expressly prohibited by the applicable law and can lead to severe civil and criminal penalties. Violators will be prosecuted to the maximum extent permitted by law.

https://clinicasu.com/ and YUCEL AYSE ECE do not hold themselves responsible in any way for the contents published, for their accuracy, with particular reference to citations of information or contents of third-party websites, nor least of all for the consequences of their use by third parties.