1. Data controller

The data controller is Dr. Daniele Zoncu, Centro Anemos, Via Campanelli 21, 09170 Oristano (OR), Italy — phone +39 328 4895528.

2. Data processed

The centre processes: identification and contact details; health data (special category under Art. 9 GDPR) collected in the clinical file; medical documentation provided by the data subject; photographic images acquired for assessment purposes, only with specific consent.

3. Purposes and legal bases

• Provision of healthcare and rehabilitation services — Art. 9.2(h) GDPR (preventive medicine, diagnosis, care and treatment);
• Administrative, tax and legal obligations — Art. 6.1(c) GDPR;
• Responding to enquiries sent via the contact form — Art. 6.1(b) GDPR (pre-contractual measures);
• Photographic documentation — Art. 9.2(a) GDPR (explicit consent, always revocable).

4. Processing methods and security

Data are processed using paper and electronic means. The digital clinical archive is hosted on servers located within the European Economic Area, protected by two-level authentication (personal credentials and a dedicated clinical PIN), automatic locking on inactivity and an access log. Access is granted solely to the appointed professional.

5. Disclosure

Data are not disseminated. With the data subject's consent, they may be shared with other healthcare professionals involved in the care pathway, and with parties to whom disclosure is required by law.

6. Retention

Medical documentation is retained for the period required by applicable legislation. Messages received via the contact form are kept for as long as needed to respond, and in any case no longer than 24 months.

7. Rights of the data subject

Data subjects may exercise the rights under Articles 15-22 GDPR (access, rectification, erasure, restriction, objection, portability) at any time by writing to the contacts in point 1. They also have the right to lodge a complaint with the Italian Data Protection Authority.

8. Cookies

This website uses technical cookies only, necessary for its operation and to remember the selected language and session. No profiling cookies or third-party tracking tools are used. Embedding the map may result in cookies being set by the service provider when it is displayed.