1. Data controller
AlleviO3 S.R.L., Via Sebino 1, 37019 Peschiera del Garda (VR), Italy · VAT No. 05202650239 · telephone +39 045 554 4558 · e-mail contact@allevio3.it.
AlleviO3 S.R.L. is the controller for the activities described. No Data Protection Officer (DPO) is publicly listed; use the details above for privacy requests.
2. Types of data processed
The site processes identification and contact data, request details, language preferences and technical browsing data such as IP address, date/time, requested URL, browser/device and security logs. Required fields are identified in each form.
3. Data provided and administrative forms
Contact and appointment requests: name, surname, e-mail, telephone, reason, service, preferred date/time and optional message. Specialty requests: contact details and specialty/service. Blood Collection Point: contact details, collection type and, for home collection, address and access instructions. A request does not confirm an appointment; reception contacts the user.
4. Purposes and legal bases
- replying to and managing administrative or appointment requests: Article 6(1)(b), steps requested by the data subject;
- legal obligations: Article 6(1)(c);
- security, abuse prevention and technical continuity: Article 6(1)(f), proportionate legitimate interest;
- newsletter: Article 6(1)(a), specific and withdrawable consent.
No automated decision-making or profiling is carried out through the site.
5. Health data
Public forms are administrative and do not request diagnoses, reports, images or clinical documents. Do not enter unnecessary health data in free-text fields.
Health data processed in the care relationship follows Article 9(2)(h) and applicable health law, under professionals bound by secrecy, with a separate clinical notice.
7. Recipients and processors
Authorised staff and, where needed, involved professionals may access data. Hosting, e-mail, maintenance and IT-support providers may process it under processor arrangements where required. Mailchimp processes newsletter data under the applicable agreements. Data are disclosed to authorities only where required by law and are not published.
8. Transfers outside the EEA
Mailchimp may involve processing in the United States or other countries. Chapter V safeguards are verified as applicable, including adequacy decisions for eligible recipients and/or Standard Contractual Clauses. Information on safeguards can be requested from the controller.
9. Retention
Administrative requests are kept for the time needed to handle them and thereafter only for legal obligations or claims. Logs follow periods proportionate to technical and security needs. Newsletter data are kept until unsubscribe or withdrawal, subject to minimum records needed to evidence consent and honour suppression requests. Exact operational periods must be defined and reviewed by the controller internally.
10. Security and privacy by design
Risk-appropriate technical and organisational measures, access controls, field minimisation and anti-abuse safeguards are used. Internet transmission cannot be guaranteed risk-free; clinical documents should use channels designated by the Centre.
12. Rights and complaint
Subject to Articles 15–22, individuals may request access, a copy, correction, erasure, restriction, portability where applicable and objection. Consent may be withdrawn without affecting earlier lawful processing. Write to contact@allevio3.it. A complaint may be lodged with the Italian Data Protection Authority.
13. Changes
This notice is updated when processing, services or applicable law changes. The current version and update date are published here.