This statement outlines how Dr. Vranjes Firenze S.p.A. processes personal data collected from users of the website https://drvranjes.com/eu/privacy-policy. Dr. Vranjes Firenze S.p.A., located at Via S. Pertini, 5 – Località Antella 50012 Bagno a Ripoli (Florence), Italy, with VAT no. 06511260488 and email [email protected], (referred to as “Holder”), is committed to protecting your privacy and handling your data in accordance with the current data protection regulations, including the EU Regulation 2016/679 (GDPR). At Doctor Vranjes Firenze, we understand the importance of your personal information and are dedicated to ensuring its security and responsible use.
1. Data Controller Identity and Contact Details
Dr. Vranjes Firenze S.p.A. acts as the Data Controller. As the Holder is based within Italy, there is no appointed representative required. For any privacy-related concerns or inquiries regarding Doctor Vranjes Firenze’s data handling practices, please use the contact details provided.
2. Data Protection Officer Contact Details
The Data Protection Officer (DPO) appointed by the Holder is Simone Bonavita. You can reach the Data Protection Officer at the Holder’s head office address or by email at [email protected]. For any questions about how Doctor Vranjes Firenze manages your personal data, our DPO is available to assist you.
3. Data Handling Methods
Data collection and processing by Doctor Vranjes Firenze are primarily carried out through our website and are detailed below.
3.1 Cookie and Environmental Data
Our website utilizes cookies to enhance user experience and for analytical purposes. These are broadly categorized into technical and non-technical cookies.
TECHNICAL COOKIES
These cookies are essential for the website’s functionality and user navigation.
- Navigation, Functional and Session Cookies: These cookies ensure the website operates correctly. Session cookies, which are not permanently stored and are deleted upon browser closure, are used to transmit session identification codes, crucial for secure and efficient site navigation. These can be further categorized into:
- Operationally Necessary Cookies: Used for session management and essential application operations, such as traffic distribution.
- Preference, Optimization, and Statistical Cookies: These cookies store browsing preferences and optimize user experience, including language settings and site statistics management. These statistical cookies can be first-party (directly from Doctor Vranjes Firenze) or third-party (from services like Google Analytics). For third-party cookies, measures like IP address masking are implemented to minimize identifiability. Agreements with third parties ensure these cookies are used solely for service provision, stored separately, and not combined with other data they possess.
Regarding Google Analytics cookies, usage information is transmitted to Google Inc., located at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and stored on their servers.
For detailed information, please review Google’s privacy policy: http://www.google.com/intl/it/privacy/privacy-policy.html and the Google Analytics privacy overview: http://www.google.com/intl/en/analytics/privacyoverview.html.
- Browsing Data and Environmental Variables: During standard operation, our systems automatically collect certain personal data related to browsing activity and environmental variables, such as:
- IP addresses of user computers.
- Number of website accesses.
- Pages viewed.
- Access date and time.
- Referring URL (previous page visited).
- Browser type.
- Operating system.
NON-TECHNICAL COOKIES
These cookies are not strictly necessary for website operation and are used for profiling and marketing purposes.
-
Profiling Cookies: Doctor Vranjes Firenze utilizes third-party profiling cookies, specifically:
- Interaction with Social Networks and External Platforms: These services enable interaction with social networks directly from our website pages. Interactions and data collected are governed by the user’s privacy settings on each social network. Even if users do not actively use these services, they may still collect traffic data on pages where they are installed.
AddThis (Addthis Inc.): A service by Clearspring Technologies Inc. providing a widget for social network interaction and content sharing. Depending on configuration, it may display third-party widgets (e.g., social network handlers). These third parties may also receive interaction data and information about the pages where the service is installed.
Personal Data collected: Cookies and Data used.
Data processing location: USA – Privacy Policy.
- Re-marketing and Behavioral Targeting: These services allow Doctor Vranjes Firenze and its partners to deliver targeted advertisements based on past website usage. This involves tracking data and cookie usage, which is shared with re-marketing and behavioral targeting partners. Users can opt-out through service-specific options and the Network Advertising Initiative opt-out page: https://www.networkadvertising.org/choices/.
Facebook Re-marketing (Facebook, Inc.): A Re-marketing and Behavioral Targeting service linking website activity to the Facebook advertising network.
Personal Data collected: Cookies and Data used.
Data processing location: USA – Privacy Policy – Opt Out.
AdWords Re-marketing (Google, Inc.): A Re-marketing and Behavioral Targeting service connecting website activity to the Google AdWords advertising network and Doubleclick Cookie.
Personal Data collected: Cookies and Data used.
Data processing location: USA – Privacy Policy – Opt Out.
- Statistics: These services enable the Data Holder to monitor and analyze traffic data and track user behavior on the website.
Google Analytics with anonymized IP (Google Inc.): A web analysis service provided by Google Inc. (“Google”). Google uses collected Personal Data to analyze website usage, create reports, and share them with other Google services. Google may use Personal Data to personalize ads on its network. This integration anonymizes IP addresses within EU member states or EEA countries. Only in exceptional cases is the full IP address sent to Google servers in the USA for abbreviation.
Personal Data collected: Cookies and Data used.
Data processing location: USA – Privacy Policy – Opt Out.
Monitoring of Facebook Ads conversions (Facebook, Inc.): A statistics service provided by Facebook, Inc., linking data from Facebook ad network to actions within this Application.
Personal Data collected: Cookies and Data used.
Data processing location: USA – Privacy Policy.
Delete or Deactivate Cookies
Users have full control over cookie management. As cookies are text files, they can be viewed and managed using standard word processors. Furthermore, browser settings can be adjusted to prevent cookie handling. Below are links to instructions for deleting/deactivating cookies in popular browsers:
- Firefox: http://support.mozilla.com/it/kb/Eliminare%20i%20cookie
- Edge: https://support.microsoft.com/it-it/help/4027947/windows-delete-cookies
- Chrome: http://support.google.com/chrome/bin/answer.py?hl=it&answer=95647
3.2 Data Provided Voluntarily
Data provided voluntarily by users via email to addresses listed on the website may be collected for the purposes outlined in point 4. This includes the sender’s email address and any other personal data contained within the communication, which are necessary to respond to inquiries.
4. Handling Purposes and Legal Basis
Doctor Vranjes Firenze processes personal data for the following purposes:
- Direct Marketing Communications: To send newsletters, advertising, marketing communications, including sales or promotional material via email or SMS, and to conduct market research and analysis. The legal basis for this processing is user consent, given in accordance with this statement.
- Profiling Activity: To analyze habits and preferences for profiling purposes. The legal basis for this processing is also user consent, provided in compliance with this statement.
5. Means for Expressing Consent
Consent for handling personal data via non-technical cookies can be provided by clicking a specific box within the cookie banner displayed upon website visit. This allows users to actively manage their cookie preferences and grant or withhold consent as desired.
6. Source of Personal Data
The personal data processed by Doctor Vranjes Firenze is collected directly from users through the website, in accordance with this privacy policy. We only handle data that you actively provide or that is collected through website interactions as described.
7. Recipients and Categories of Data Recipients
Personal data may be disclosed to the following categories of recipients:
- Communication and Profiling Firms: Companies that assist Doctor Vranjes Firenze with commercial communication and profiling activities, who are appointed as data processors.
- IT Service Providers: Companies offering IT services, particularly hosting providers, essential for website operation and data storage.
8. Data Categories Processed
The personal data processed includes general personal data categories as detailed in section 3, such as browsing data, cookie information, contact details provided via email, and preferences inferred from website interactions.
9. Data Transfer
Doctor Vranjes Firenze may transfer personal data to third countries or international organizations. These entities may include:
- Communication firms supporting Doctor Vranjes Firenze’s communication efforts.
- IT service providers, including hosting services.
- Communication service suppliers.
Data transfers to these entities located in third countries or international organizations are conducted only when an adequacy decision from the European Commission is in place, ensuring a suitable level of data protection. Where necessary, Doctor Vranjes Firenze reserves the right to establish specific agreements with these entities, mandating adequate safety measures, including organizational safeguards, to protect user rights. Notably, Google Inc. is contractually obligated to ensure appropriate protection of personal data. Data may be transferred to countries including the UK and the United States of America. To request a copy of the data or information about its availability, please contact [email protected].
10. Personal Data Storage Period
- Personal data processed for marketing purposes is stored until consent is revoked or deletion is requested by the user.
- Data processed for profiling purposes is stored for no longer than 12 months from the date of collection.
Doctor Vranjes Firenze reserves the right to periodically request users to renew their consent for data processing and/or to verify previously granted consent, ensuring ongoing compliance and user awareness.
11. Option to Provide Consent and Consequences of Denial
- Marketing Purposes: Providing personal data for marketing purposes is optional and not a contractual requirement. However, failure to provide consent will prevent the user from receiving marketing communications from Doctor Vranjes Firenze.
- Profiling Purposes: Similarly, providing personal data for profiling is optional. Denial of consent will result in the user not being profiled for preference analysis.
12. Rights of the Data Subject
12.1 Right to Object
- Technical Cookies: Processing of personal data via technical cookies is necessary for website functionality and is based on the Holder’s legitimate interest. Consent is required for these cookies to ensure proper website operation.
- Non-Technical Cookies: Consent for non-technical cookies is optional. Refusal to consent will only result in a less personalized website experience.
- Voluntary Email Data: Consent for processing data provided voluntarily via email is optional, but failure to provide data will prevent Doctor Vranjes Firenze from responding to the user’s inquiries.
- Contractual and Pre-contractual Purposes: Providing personal data for contractual and pre-contractual purposes is a contractual obligation and a requirement for entering into agreements with Doctor Vranjes Firenze. Users have the option to provide this data, but failure to do so will prevent contract finalization or pre-contractual negotiations.
12.2 Other Rights
Users are also informed of the following rights under GDPR:
- Right of Access: Users have the right to obtain confirmation regarding the processing of their personal data and access to this data and related information, as per Article 15 GDPR.
- Right to Rectification: Users have the right to correct inaccurate personal data without undue delay, and to complete incomplete data, considering the processing purposes, as per Article 16 GDPR.
- Right to Erasure (Right to be Forgotten) and Right to Withdraw Consent: Users have the right to have their personal data erased without undue delay, and the Holder is obliged to erase data under conditions specified in Article 17 GDPR, including the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
- Right to Restriction of Processing: Users have the right to obtain restriction of data processing under circumstances defined in Article 18 GDPR.
- Right to Data Portability: Users have the right to receive their personal data in a structured, commonly used, and machine-readable format and to transmit this data to another controller without hindrance from the Holder, under conditions specified in Article 20 GDPR.
13. Exercising User Rights
To exercise any of the rights outlined in this statement, including deletion requests and consent withdrawal, please contact the Data Holder at [email protected]. Alternatively, users can send a registered letter by return receipt to Via S. Pertini, 5 – Località Antella 50012 Bagno a Ripoli (Florence), Italy. Doctor Vranjes Firenze is committed to facilitating the exercise of your data protection rights.
14. Statement Accessibility
This privacy statement is accessible at https://drvranjes.com/eu/privacy-policy and directly from the Data Holder. Upon explicit request, the information can also be communicated verbally over the phone, provided the user’s identity is verified. Doctor Vranjes Firenze ensures this statement is readily available and understandable to all users.
