Privacy & Cookie Policy

1. Data controller

The controller of personal data collected through this website is Marco Dirito, physiotherapist.

Website: mdfisio.com
Telephone: +39 339 722 1028

For privacy-related requests or to exercise your rights, you can use the contact details provided on this page.

2. Personal data that may be processed

Browsing and technical data

During normal browsing, the systems and services required to operate the website may process technical data such as IP address, date and time of the request, browser and device type, requested page, technical logs and information required for security and proper service delivery.

Data provided voluntarily

If you contact Marco Dirito by telephone, WhatsApp or other available channels, the data you provide voluntarily may be processed, such as your name, telephone number, the content of your request and any further information needed to respond.

External-content preferences

The website stores your choice regarding external content in your browser so that your preference can be respected on subsequent visits.

3. Purposes of processing and legal bases

• website operation, security and maintenance, based on the controller’s legitimate interest in providing a secure and properly functioning service;
• responding to requests for information, consultation or appointments, in order to act on your request and, where relevant, take pre-contractual steps or perform the professional relationship;
• complying with legal, administrative, tax, accounting or professional obligations, where applicable;
• loading external content such as Google Maps, only after the choice made through the website’s preference system.

4. Health data

In connection with physiotherapy services, you may provide information concerning your health, symptoms, diagnoses, treatments or other clinical information.

Where such data are necessary for assessment or the provision of healthcare services, they are processed only to the extent necessary for healthcare purposes and in accordance with professional obligations, professional secrecy and the rules applicable to health data.

Any processing of health data for purposes that are different from and not strictly necessary to healthcare will take place only where an appropriate legal basis exists and, where required, with specific consent.

5. Recipients, external services and transfers

Personal data may be processed, within the scope of their respective roles, by technical providers and parties required for the website and professional activity, including hosting providers, technical-support providers, administrative or tax advisers and parties to whom disclosure is required by law.

The website also contains links or content provided by third parties such as WhatsApp and Google Maps. When you choose to use or enable these services, processing may also take place under the respective providers’ own terms and privacy notices.

Some providers may operate outside the European Economic Area. Where applicable, international transfers of personal data must take place in accordance with the GDPR and the safeguards required by law.

6. Data retention

Personal data are retained for the period necessary for the purposes for which they were collected and, afterwards, for any additional periods required by applicable legal or professional obligations.

• technical and security data are retained for the periods technically necessary and according to infrastructure-provider settings;
• contact-request data are retained for the time needed to manage the request and any subsequent professional relationship;
• health documentation processed in the context of professional services is retained in accordance with the obligations applicable to clinical and professional records;
• the external-content preference remains stored in the browser until it is changed, deleted by the user or a technical change requires the choice to be requested again.

7. Your rights

Where provided for by the GDPR, you may request access, rectification, erasure, restriction of processing, data portability where applicable, objection to processing based on legitimate interests, and withdrawal of consent without affecting the lawfulness of processing carried out before withdrawal.

You may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or seek judicial protection before the competent courts.

8. Cookies and similar technologies

Cookies are small files or pieces of information that a website or service may store on a user’s device. Similar technologies, such as browser local storage (localStorage), may be used to remember settings and preferences.

In the current version of the website, the consent system uses browser local storage to remember whether the user has allowed external content to be loaded.

9. Google Maps

Maps for the practice locations are provided by Google Maps and are blocked by default. A placeholder is shown before activation.

If you select “Allow and show map”, you authorise the external content to load. Your browser may then connect to Google systems, which may receive technical data and use cookies or other identifiers in accordance with their own notices.

Refusing consent does not prevent you from viewing essential location information such as the address and name of each practice.

10. How to manage or change your preferences

On the first visit, where no preference has already been saved, the banner allows you to accept, reject or manage optional content.

You can change your choice at any time using “Cookie settings” in the footer.

You can also delete cookies, local storage and other site data directly from your browser settings. If you do so, you may need to set your preferences again.

11. Updates to this notice

This Privacy & Cookie Policy may be updated to reflect changes in law, technology or the services used by the website. The current version is the one published on this page together with the date of the most recent update.