EN
Information on the processing of personal data
(Articles 13–14 of EU Regulation 2016/679)
This notice describes how the website is managed with regard to the processing of the personal data of users who visit it and of clients who use MedBridge's services.
1. Data Controller
The Data Controller is MedBridge di Alessandro Mazzocchi, with registered office at Via Costa delle Ghiaie 46, Torrice (FR), Italy, tax code/VAT MZZLSN98S20A123Z, represented by its owner of the same name. Contact email: info@medbridge.it
2. Types of Data Processed
- Common data: identification and contact details (first name, surname, email, telephone number) provided when requesting information.
- Special category data (health): information on health status, medical history and diagnostic reports needed for the preliminary analysis of the case and for coordination with healthcare facilities abroad.
- For browsing data and cookies, please refer to the website's specific Cookie Policy.
3. Purposes and Legal Basis of Processing
Processing is carried out to perform the mandate of organisational and logistical coordination. The legal basis is the performance of the contract and, for health data, the explicit and informed consent given by the data subject (Art. 9(2)(a) GDPR).
4. Transfer of Data Abroad
To provide the service, personal and health data may be transferred to the Partner Clinics located in Albania (a non-EU country). MedBridge ensures that such transfers are made to facilities bound by confidentiality and data protection agreements in line with European standards, guaranteeing an adequate level of protection.
5. Processing Methods and Retention
Processing is carried out using electronic and paper tools. Data are kept for the time needed to perform the mandate and, thereafter, for the periods required by law (ordinarily 10 years for contractual and tax obligations).
6. Rights of the Data Subject
Users have the right to request access to their data, rectification, erasure (right to be forgotten), restriction of processing or to object to it, as well as the right to data portability. Such requests may be sent by certified email (PEC) to alessandro.mazzocchi@pecaruba.it or by registered letter with return receipt.
7. Quote request form and website tools
The "Request a quote" form collects name, telephone, optional email, the treatment of interest, an optional message and, if the user chooses to upload it, the panoramic X-ray. Health data are only sent with the explicit consent given by ticking the relevant box. The request is sent to MedBridge by email through the email service of Aruba S.p.A. and is not stored on the website.
The website is hosted by Aruba S.p.A. on servers in Italy. If the user chooses to write to us on WhatsApp, the message is also processed by WhatsApp (Meta Platforms Ireland Ltd.) according to its privacy policy.
Only with consent given through the banner does the website use statistics cookies (Google Analytics) and marketing and profiling cookies (Google Ads, Meta Pixel) to measure visits and the effectiveness of advertising campaigns and to show relevant ads. The legal basis is consent (Art. 6(1)(a) GDPR), which can be withdrawn at any time via the "Cookie preferences" link. The content of forms, health data and the panoramic X-ray are never shared with these providers. Without consent, Google Analytics runs in advanced consent mode: it uses no cookies and sends Google only anonymous signals, without identifiers, used for aggregate statistics. Details are in the Cookie Policy.
Data subjects may also lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).