Website privacy and cookies

1. Data controller

Francesco Palvarini, Osteopath D.O., VAT no. IT02665340200, email info@francescopalvarini.com, phone +39 340 182 1684.

No data protection officer (DPO) has been appointed, as this is not mandatory for an individual practitioner.

2. Browsing data

To run the website and protect it from abuse, the servers automatically log some technical data: IP address, browser and device type, date and time, pages requested. It is not used to identify visitors.

Legal basis: legitimate interest in the operation and security of the website (Art. 6(1)(f) GDPR). Retention: as set by the hosting provider, normally no longer than 30 days, unless needed to investigate unlawful activity.

3. Contact forms and company requests

When you write to me through the website, I collect the data you enter (name, email, phone if given, city, company and role for company requests, message) to reply and, where relevant, prepare a proposal.

Legal basis: replying to your request and pre-contractual steps (Art. 6(1)(b) GDPR). The required fields are needed to reply. Retention: up to 12 months from the last contact if no professional relationship follows; otherwise the patient privacy notice applies.

Please do not include health information in the form: we collect it confidentially during the session. If you send it anyway, I use it only to reply.

4. Bookings, phone and WhatsApp

If you contact me by phone, email or WhatsApp, I use your data only to reply. WhatsApp is a service of Meta Platforms Ireland Ltd.: please do not send health data through it.

5. Cookies and tracking

The website uses no profiling cookies, advertising pixels or analytics that identify you. That is why there is no consent banner.

Fonts are served by the website itself, with no calls to external services. Maps are not embedded: the "Open in Google Maps" button takes you to Google only if you click it, and Google's privacy notice applies from then on.

Any strictly necessary technical cookies do not require consent. If tools that require consent are introduced in future, the website will first show a banner that lets you refuse as easily as you accept.

You can delete or block cookies in your browser settings at any time.

6. Providers and recipients

Data is processed by me and, on my behalf, by providers appointed as processors (Art. 28 GDPR):

• Vercel Inc. (United States), website hosting;
• Brevo (Sendinblue SAS, France), delivery of form messages by email;
• my accountant, where required by law.

Data is never published or sold.

7. Transfers outside the EU

Vercel Inc. is based in the United States and participates in the EU-US Data Privacy Framework, recognised as adequate by the European Commission (decision of 10 July 2023); the transfer is in any case covered by standard contractual clauses (Art. 46 GDPR).

8. Minors

The website is not aimed at children under 14. Requests for a minor must be made by a parent or legal guardian.

9. Your rights

You can ask at any time for access, rectification, erasure, restriction and portability of your data, and object to processing (Arts. 15-22 GDPR), by writing to info@francescopalvarini.com. I reply within 30 days.

You can also lodge a complaint with the Italian data protection authority (www.garanteprivacy.it) or the authority of your EU country.

10. Updates

This notice may be updated. The current version is always published on this page, with the date of the last change.