Privacy Policy

Read the specific privacy policies and other useful information:

  • Informativa per il fornitore
  • Informativa per candidati
  • Informativa per pazienti
  • Modulo ritiro referti
  • Cookie Policy


This privacy policy was drafted pursuant to art. 13 of Regulation (EU) 2016/679 “on the protection of individuals with regard to the processing of personal data, as well as on the free movement of such data and repealing Directive 95/46 EC (General Data Protection Regulation)” and updates any previous versions released before now.


This privacy policy applies exclusively to the online activities of the website and is valid for visitors/ users of the site. It does not apply to information collected through different channels other than this website. In compliance with the obligations deriving from national and EU legislation on the protection of personal data, this website respects and protects the privacy of visitors and users.



The Data Controller of the data collected through this site is Casa di Cura Privata Polispecialistica Villa Verde S.r.l., in the person of its legal representative pro tempore.



The personal data collected and processed through this website are as follows:


Navigation data

Like all websites, this site also acquires some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of the computers used by users connecting to the site, URI addresses (Uniform Resource Identifier) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user’s computer environment.


Data provided by the user

This is data voluntarily entered by the user: personal data, e-mail address or any other data that is voluntarily provided by the user (included special categories of personal data under Article 9 GDPR).


Medical reports

This website uploads medical records, that can be viewed by patients by accessing their personal area on the website.


Regarding the cookies used by, please refer to the cookie policy.


Navigation data are acquired by computer systems and through the software procedures of this website, and are needed for its normal functioning. This is information that is not collected to be associated with identified data subjects, but which could, due to its nature,  allow users to be identified through processing and association with data held by third parties. This data is used only for the purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning.
Furthermore, it could be used to ascertain responsibility in case of hypothetical computer crimes against the site.


This data is collected on the basis of the consent expressed by the user through the persistent navigation on the site (by conduct).


The data provided by the user will be used for the following purposes:

  • to reply to e-mails sent by the data subject to the email addresses indicated on this site;
  • to book visits through the personal area of this website;
  • to allow patients to access their reports.


This data is collected on the basis of the explicit consent given by the data subject, which consists in  sending an e-mail and registering to the website to have access to the personal area.


For the sake of completeness, please note that, in accordance with Article 7 of Regulation 2016/679, the data subject has the right to withdraw his/her consent at any time.




Apart from what is specified for navigation data, the user is free to provide personal data if required in special sections of the site. Failure to provide this data, however, may make it impossible to fulfil the user’s request.




The processing will be carried out with manual, computerized and telematic tools and will be strictly related to the purposes for which the data was collected, in compliance with the purpose limitation principle, as well as all the other principles set out in Article 5 of Regulation 2016/679. In particular, in compliance with the principles of integrity and confidentiality, pursuant to which specific security measures are adopted to prevent the loss of data, its illicit or incorrect use and unauthorized access.




The processing related to the web services of this website, takes place at the premises of the Casa di Cura Privata Polispecialistica Villa Verde S.r.l.




User data is retained by the data controller for the period strictly necessary and in compliance with applicable regulations. In any case, as described above, the user will be able to withdraw his/her consent to the processing of data at any time.




In addition to the data controllers, other categories of employees involved in the organization of the site may have access to the data (administrative and marketing staff, legal collaborators, system administrators), as well as third parties, external service providers, acting in name and on behalf of the Guido Franzini ONLUS Foundation, that are duly appointed as Data Processors and will process the data in accordance with the purposes for which the data was originally collected.



Data subjects have a series of rights under Regulation (EU) 2016/679. These are:

  • the right to access their personal data (once confirmed that their data is subject to processing by the data controller);
  • the right to obtain the rectification and integration of their data;
  • the right to obtain the cancellation of their data;
  • the right to obtain the limitation of the processing of personal data under certain conditions;
  • the right to receive the personal data provided to the data controller in a structured and commonly used format, and to send them to another data controller;
  • the right to object to the processing of their personal data if there are reasons related to their personal situation;
  • the right not to be subject to an automated decision-making process;
  • the right to receive a communication in the event that their data is subject to a serious violation;
  • the right to withdraw consent to processing at any time;
  • the right to lodge a complaint with a supervisory authority.


Requests can be addressed without formalities to the data controller or data processor, also through a designated person; the data controller will give appropriate feedback to this requests without delay.

The data controller undertakes to make the exercise of rights of data subjects as easy as possible.



Villa Verde has appointed a Data Protection Officer in accordance with Article 37 of the Regulation, to be contacted at:


This privacy policy was last updated on 25 May 2018.