top of page

WEBSITE PERSONAL DATA PROCESSING NOTICE

​

Policologna – Medical Clinic
Last updated: October 9, 2026

This notice describes how we process the personal data of people who visit the website www.policologna.it, request information or use the link to book online. It is provided under Regulation (EU) 2016/679 (“GDPR”) and applicable Italian law.

Healthcare services and related data are also governed by the specific notices provided to patients as part of their care.

1. Data Controller

The data controller for requests sent through the website is:

Policologna di David Maccagnan
Via Guglielmo Marconi 4
37044 Cologna Veneta (VR), Italy
VAT No. 05088450233
Tax ID MCCDVD69B01C890S
Email: info@policologna.it
Certified email (PEC): policologna@legalmail.it

2. Data Protection Officer (DPO/RPD)

The Data Protection Officer appointed by Policologna is:

Gloria Perazzolo
Email: gloripera05@gmail.com
Certified email (PEC): policologna@legalmail.it

You can contact the DPO about matters concerning the processing of personal data.

3. What data do we process?

Depending on the service used, we may process:

  • identification and contact details, such as first name, last name, phone number and email address;

  • the content of requests sent through our contact channels;

  • data needed to manage a booking, provided through the online portal;

  • technical browsing data, such as IP address, request time, browser and pages visited.

The website does not allow users to send test results or upload medical records and does not use newsletters, marketing or online payments. To protect your privacy, do not send health data or clinical documents through WhatsApp or the general contact forms.

4. Purposes and legal bases

We process data to:

  • respond to information requests and manage contacts initiated by users;

  • enable users to book appointments through the online portal;

  • ensure the security, operation and technical maintenance of the website;

  • meet applicable legal obligations.

To respond to a request or manage a booking, the legal basis is taking steps requested by the data subject before entering into the service. Where applicable, browsing data is processed on the basis of the legitimate interest in website security and proper operation.

When health data is processed as part of healthcare, the legal bases under the GDPR and healthcare regulations for diagnosis, care or treatment apply. Processing necessary for healthcare is not based on general privacy consent.

5. Online bookings through MEG

The “Book online” link takes you to the MEG booking portal, which is managed through the Timeo Information Technologies Srl service. Policologna has verified with Timeo its role in operating the portal and the notice shown during booking.

The information provided in the booking process also applies to data requested by the portal. Data is processed to manage the request and appointment and may include health data, depending on the service selected. Timeo processes the data according to its role and the instructions agreed with Policologna.

6. Contacting us through WhatsApp

The website lets you start a conversation with Policologna through WhatsApp. If you choose this channel, WhatsApp receives the data needed to operate the service, and Policologna may receive your phone number and messages. WhatsApp processes data according to its own privacy notice.

Use WhatsApp for organizational requests or general information. Do not send test results, clinical photographs or health details through the chat.

7. Recipients of the data

Data may be processed by Policologna’s authorized staff and shared with providers needed to manage the services, including:

  • Wix, for the website platform and hosting;

  • Timeo Information Technologies Srl, for the MEG booking system;

  • WhatsApp, if you choose to contact Policologna through this channel;

  • consultants and authorities, when required by law.

Providers may act in different roles depending on the service. For details about the MEG portal, the notice shown during booking also applies.

8. Data transfers

Some technology providers may process data outside the European Economic Area. In these cases, the safeguards required by the GDPR and the information provided by each provider apply. For current details, please refer to the privacy notices for Wix, Timeo and WhatsApp and their respective services.

9. Retention

General contact requests are deleted once they have been read and handled, unless they need to be kept longer to meet legal obligations or protect the controller’s rights.

Booking data is retained as needed to manage the appointment, meet applicable obligations and follow the retention periods in the MEG portal notice. Health data processed as part of healthcare is retained according to the healthcare notices and applicable obligations; it is not deleted simply after a request has been read.

Technical data is retained for as long as necessary for website security and operation, according to the relevant providers’ settings.

10. Your rights

Where provided by the GDPR, you can request access to your data, its correction or deletion, restriction of processing, and data portability. You may object to processing based on legitimate interests in the cases provided by law.

To exercise your rights, contact info@policologna.it or policologna@legalmail.it. You can also contact the DPO using the details above.

You also have the right to lodge a complaint with the Italian Data Protection Authority.

11. Cookies and updates

For information about cookies, see the Cookie Policy published on the website. This notice may be updated; the current version is available at www.policologna.it.

bottom of page