Notice pursuant to Art. 13 GDPR (EU Regulation 2016/679)
Privacy Policy
Last updated: May 2026
1. Data Controller
The Controller responsible for the personal data collected through this website is:
Margherita Dal Piaz
Neuro-Psychomotor Therapist for Developmental Age (TNPEE)
Viale Aventino, 36 – 00153 Roma RM
Phone: 340 450 1374
To exercise your rights or for any request relating to the processing of personal data, please contact the Controller at the details provided above.
2. Data collected and collection methods
Navigation data. Computer systems and software procedures used to operate the website automatically acquire certain personal data whose transmission is implicit in the use of Internet communication protocols (e.g. IP address, browser type, operating system, pages visited, access times). This data is used solely to obtain anonymous statistical information about website usage and to verify correct operation; it is deleted immediately after processing. It is not disclosed to third parties or used to identify users.
Voluntarily provided data. Sending communications to the Controller (by phone, WhatsApp or through the website contact form) involves the acquisition of the sender’s contact details: name, email, optional phone number, subject of the enquiry and message content. This data is processed solely to respond to the request or manage the professional relationship.
Health data. This website does not directly collect health-related data. Users are explicitly asked not to enter detailed clinical information in the contact form: such information is collected later during in-person consultations. Health data shared during consultations is processed in accordance with Art. 9 GDPR and applicable professional ethics rules.
3. Purposes and legal bases for processing
| Purpose | Legal basis |
|---|---|
| Provision of professional services and appointment management | Performance of a contract or pre-contractual measures at the data subject’s request (Art. 6(1)(b) GDPR) |
| Technical operation of the website | Legitimate interest of the Controller (Art. 6(1)(f) GDPR) |
| Compliance with legal obligations (e.g. keeping professional records) | Legal obligation (Art. 6(1)(c) GDPR) |
4. Retention period
Navigation data is retained for the time strictly necessary for the operation of the website and in any case no longer than 30 days, unless retention is required for the investigation of criminal offences.
Data relating to the professional relationship (clinical file, billing) is retained for the periods required by applicable health and tax regulations (generally 10 years from the end of the professional relationship, or longer periods required by specific rules for health data).
5. Data sharing and disclosure
Personal data is not disclosed to third parties, except as required by law or strictly necessary for the provision of the service (e.g. deputies, technical consultants bound by confidentiality obligations).
For the delivery of emails generated by the website contact form, the Controller uses Resend, Inc. (USA) as an external data processor pursuant to Art. 28 GDPR. Resend processes only the data entered in the form (name, email, optional phone number, subject and message) for the sole purpose of delivering the email to the Controller. The transfer of data to the United States is governed by the Standard Contractual Clauses (SCCs) adopted by the European Commission. Resend’s privacy policy is available at resend.com/legal/privacy-policy.
Save as set out above, data is not transferred outside the European Economic Area. Data is not subject to automated decision-making or profiling.
6. Your rights
Under Arts. 15–22 GDPR, you have the right to:
- access your personal data (Art. 15);
- obtain rectification if inaccurate or incomplete (Art. 16);
- obtain erasure (“right to be forgotten”) where applicable (Art. 17);
- request restriction of processing (Art. 18);
- receive your data in a structured, machine-readable format (portability, Art. 20);
- object to processing on legitimate grounds (Art. 21);
- withdraw consent at any time, without affecting the lawfulness of prior processing.
Requests should be addressed to the Controller at the details given in section 1. The Controller will respond within 30 days, extendable by a further 60 days in cases of particular complexity.
7. Right to lodge a complaint
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with the competent supervisory authority if you believe that the processing of your personal data infringes the GDPR. As the Controller is established in Italy, the lead supervisory authority is:
Garante per la protezione dei dati personali (Italian Data Protection Authority)
Piazza Venezia, 11 – 00187 Rome, Italy
https://www.garanteprivacy.it
8. Changes to this Privacy Policy
The Controller reserves the right to amend this Privacy Policy at any time by publishing an updated version on this page. We encourage you to check this page periodically, referring to the last updated date shown at the top.