Registro Osteopati d’Italia (n. 4193)

P.IVA 10516550968

Pag. 1 di 11

Pursuant to the combined provisions of European Regulation 2016/679 (General Data Protection Regulation, hereinafter "GDPR")

and Legislative Decree 196/2003 as amended (Legislative Decree 101/2018)

Data controller (the person or entity that decides how and why to process data).

The data controller (hereinafter "Data Controller") is OSTEOPATA D ott.ssa Clara Cerlesi, via Privata Golfo Aranci 12, 20128

Milano, P.IVA - claracerlesi.osteopata@gmaill.com

1.Introduction

the professional Studio of OSTEOPATA D ott.ssa Clara Cerlesi, via Privata Golfo Aranci 12, 20128 Milano, P.IVA -

claracerlesi.osteopata@gmaill.com hereinafter referred to as "data controller"), has always considered of primary importance the

protection of the personal data of its clients and users, to whom it ensures the processing of personal data in full compliance with

the protections and rights recognized by the EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016

on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter

also referred to only as "Regulation") and in general by the entire legislation on the protection of personal data.

In Art. 4 point 1) of the Regulations we find the definition of "personal data" as "any information relating to an identified or

identifiable natural person; an identifiable person is considered to be any natural person who can be identified, directly or indirectly,

by reference in particular to an identifier such as a name, an identification number, location data, an online identifier, or to one or

more characteristic elements of his or her physical, physiological, genetic, mental, economic, cultural or social identity" (hereinafter

referred to as "Personal Data"). And therefore, the data controller, in pursuit of its business purposes, may become aware of or

request Personal Data from you, such as your first and last name, your e-mail address, your telephone and postal contact information,

your Tax Identification Number or VAT number, your date of birth, and other identifying information about you.

The Regulations provide for the issuance, prior to the processing of Personal Data - by which term is to be understood, according to

the relevant definition in Art. 4 under 2) of the Regulation, "any operation or set of operations, performed with or without the help

of automated processes and applied to personal data or sets of personal data, such as collection, recording, organization, structuring,

storage, adaptation or alteration, retrieval, consultation, use, communication by transmission dissemination or any other form of

making available, comparison or interconnection, restriction, deletion or destruction" (hereinafter the "Processing") - adequate

information to the person to whom such Personal Data belong about the purposes of the Processing, the manner in which the

Processing will be conducted as well as in relation to as much other information as is required by law.

In this regard, the contents of this notice are intended to provide, in a simple and intuitive manner, as much information as possible

to supplement the information contained in the specific privacy notices rendered pursuant to Article 13 of the Regulations at the

time of the provision and collection of your Personal Data.

This Information Notice, therefore, has been prepared, on the basis of the principle of transparency, precisely to provide all the

elements required by Articles 13 and 14 of the Regulations, and, in deference to a principle of absolute ease of consultation, is divided

into individual sections (hereinafter "Sections" and individually "Section"), each of which deals with a specific topic so as to make it

quicker, easier and more intuitive for you to read (hereafter, the contents of this Internet page will be referred to jointly and briefly

as "Information Notice").

The purpose of this privacy policy (hereinafter "Privacy Policy") is to describe how the website of the data controller, hereinafter

referred to as "Data Controller", is managed - as far as the processing of personal data of users/visitors under the Regulations

(hereinafter only "Users") is concerned:

https://claracerlesi-osteopata.it/

2.THE PURPOSE , OBJECT AND LEGAL BASIS OF PROCESSING

The Data Controller, may require you to provide your Personal Data for the Processing purposes below:

2.1.With regard to the processing purposes of the data controller's website

Pursuant to Article 6 EU Regulation No.679/2016 (and subsequent legislative adaptation provisions Legislative Decree 101/2018)

(GDPR) for the following Service Purposes:

Registro Osteopati d’Italia (n. 4193)

P.IVA 10516550968

Pag. 2 di 11

PURPOSE OF

PROCESSING

LEGAL BASIS AND LAWFULNESS OF

PROCESSING AND NATURE OF

CONFERMENT

TYPE OF DATA PROCESSED

NAVIGATION

1) To enable the

enjoyment and use of this

website, as well as to

carry out maintenance

and technical support

necessary for its proper

functioning;

The legal basis underlying the

processing referred to in (a) of this

point is provided for in Art. 6 par.1(f)

GDPR, which states that "processing is

necessary for the purposes of pursuing

the legitimate interests of the data

controller or a third party".

The Processing of your Personal Data

will be legally based on the contractual

relationship that will be created

between you and the Data Controller as

a result of your interaction with the

specific website of the Professional

Practice;

-navigation data: this category of data

includes IP addresses or domain names

of the computers and terminals used by

users, addresses in URI/URL (Uniform

Resource Identifier/Locator) notation,

the time of the request, the method

used in submitting the request to the

server, the size of the file obtained in

response, the numerical code indicating

the status of the response given by the

server (successful, error, etc.) and other

parameters relating to the user's

operating system and computer

environment. These data, necessary for

the use of web services, are also

processed for the purpose of:

-obtain statistical information on the use

of services (most visited pages, number

of visitors by time slot or daily,

geographical areas of origin, etc.);

-check the proper functioning of the

services offered.

Derived data

Information that our servers

automatically collect when you access

the Site, such as your IP address,

browser type, operating system, access

times, and the pages you viewed directly

before and after accessing the Site.

Facebook Permissions

The Site can, by default, access basic

Facebook account information, including

name, email, gender, birthday, current

city, and profile picture URL, as well as

other public information.

Data from social networks

User information from social networking

sites, Facebook, Google+, Linkedin, X,

Instagram, Meta, including name, social

network user name, location, gender,

date of birth, email address, profile

photo, and public contact information, if

the user links their account to such social

networks.

Third-party data

RESPONSE BY THE

OWNER TO USER

REQUESTS

2) allow the Owner to

respond to requests you

make through this

website

The legal basis underlying the

processing referred to in (a) of this

point is provided for in Art. 6 par.1(f)

GDPR, which states that "processing is

necessary for the pursuit of the

legitimate interests of the data

controller or a third party".

The Processing of your Personal Data

will be legally based on the contractual

relationship that will be created

between you and the Data Controller as

a result of your interaction with the

-data communicated by the user: such

as, for example, personal data provided

by you through the "contact" form or

data provided in the "Contact" section.

-cookies and other tracking systems: for

details of the cookies used by this site,

see the section on cookies in the

following data protection notice.

Registro Osteopati d’Italia (n. 4193)

P.IVA 10516550968

Pag. 3 di 11

specific website of the Professional

Practice;

2.2.With regard to the processing purposes of the 'activity of the data controller.

With respect to customers

Purpose

Legal basis and nature of contribution

Type of data

contract

- Deliver the therapies

required by patients

Osteopathic

therapeutic services

(TMO)

- Execution of pre-contractual measures

taken at the request of the data subject

and/or execution of a contract to which

the data subject is a party (Art. 6(1)(b)

GDPR).

- Specific consent pursuant to Art. 6(a)

and Art. 7 of the GDPR.

In the absence of consent, it will not be

possible to provide the service

Identification and contact information:

First name, last name, e-mail address,

phone number, Social Security number

-particular data ex art. 9 GDPR, data

revealing health status

Legal obligations

- Recording invoices,

receiving payments;

- Fulfilling pre-

contractual,

contractual and tax

obligations arising from

the customer

relationship;

- Fulfill obligations

under the law, a

regulation, EU

legislation or an order

of the Authority

-Legal obligation to which the owner is

bound (Art. 6(1)(c) GDPR).

The provision of data is mandatory, and

in case of refusal to provide personal

data, it will not be possible for the Holder

to provide the service

Identification and contact information:

First name, last name, place and date of

birth, e-mail address, phone number

Litigation defense

- Exercise the rights of

the Owner, such as any

right of defense in

court.

-Legitimate interest of the data controller

(Art. 6(1)(f) GDPR): right of defense fairly

balanced with the same right of data

subjects

Identification and contact information:

First name, last name, place and date of

birth, e-mail address, telephone number,

and data necessary for defense in court

marketing

Activities of sending

newsletters,

commercial

communications and

marketing: the

performance by the

Data Controller of its

own promotional

and/or marketing

activities towards you.

This category includes

all activities performed

to promote products,

services, sold and/or

provided by the Data

Controller; subject to

your specific consent.

Legal basis and lawfulness of processing:

legitimate interest under Article 6 letter

f) of the Regulation - The Processing of

your Personal Data will be conducted by

the Data Controller and will be legally

based on its legitimate interest in

promoting its products and services;

Legal basis and lawfulness of processing:

consent of the data subject ex art. 6

letter a) of the Regulation - The

Processing of your Personal Data will be

conducted by the Data Controller and will

be legally based on your free, express

and unequivocal consent.

 Identification and contact

information:

First name, last name, e-mail address,

telephone number, Tax code, City,

Country of residence, other data that may

be provided by the customer due to his

requests

With respect to suppliers

Purpose

Legal basis and nature of

contribution

Type of data

contract

-perform the proper execution of

contracts and supply services and, in

particular;

-for contractual/pre-contractual

relationship management with the

company, financial and business

relationship management;

-for the management of personal data

of the legal representative of the

supplier

- Execution of pre-contractual

measures taken at the request of the

data subject and/or execution of a

contract to which the data subject is

a party (Art. 6(1)(b) GDPR).

The provision of data is mandatory,

and in case of refusal to provide

personal data, it will not be possible

for the Holder to provide the service.

Identification and contact

information:

First name, last name, e-mail

address, phone number, Social

Security number, City

Registro Osteopati d’Italia (n. 4193)

P.IVA 10516550968

Pag. 4 di 11

-legal person and the execution of pre-

contractual activities

-to conduct the preliminary assessment

of services proposed by potential

providers;

-for entry into master records in

company computer databases;

Legal obligations

- Recording invoices, receiving

payments;

- Fulfilling pre-contractual, contractual

and tax obligations arising from the

customer relationship;

- Fulfilling obligations under the law, a

regulation, EU legislation or an order of

the Authority

-Legal obligation to which the owner

is bound (Art. 6(1)(c) GDPR).

The provision of data is mandatory,

and in case of refusal to provide

personal data, it will not be possible

for the Holder to provide the service.

Identification and contact

information:

First name, last name, place and date

of birth, e-mail address, phone

number

Litigation defense

- Exercise the rights of the Owner, such

as any right of defense in court.

-Legitimate interest of the data

controller (Art. 6(1)(f) GDPR): right of

defense fairly balanced with the

same right of data subjects

Identification and contact

information:

First name, last name, place and date

of birth, e-mail address, telephone

number, and data necessary for

defense in court

3. PROCESSING METHODS AND HOW DATA ARE COLLECTED

The processing of your personal data is carried out by means of the following operations: collection, recording, organization, storage,

consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion

and destruction of data.

The processing will be carried out either by manual and/or computerized and telematic means with logics of organization and

processing strictly related to the purposes themselves and in any case in such a way as to guarantee the security, integrity and

confidentiality of the data themselves in compliance with the organizational, physical and logical measures provided for in Articles

24 and 25 and 32 of the GDPR.

The personal data subject to processing are collected directly by the Data Controller or by third parties expressly authorized by the

Data Controller, or communicated by the Data Controller to such third parties for the pursuit of the purposes set forth in this policy.

The Data Controller carries out periodic checks so that no personal data are processed, collected, stored or retained that are not

necessary in relation to the processing and related purposes as set out in this policy.

4. ACCESS TO DATA BY PROCESSING EMPLOYEES

Your data may be made accessible for the exclusive purposes set forth in this notice:

-to employees and collaborators of the Controller, the auxiliaries and third persons employed companies and companies in supply

and outsourcing relationship with the Controller in their capacity as authorized persons for processing and/or internal processors

and/or system administrators;

-to third-party companies or other entities performing outsourced activities on behalf of the Controller, in their capacity as external

data controllers.

5. COMMUNICATION OF PERSONAL DATA

Personal Data may be disclosed to specific entities considered to be recipients of such Personal Data, which should be understood to

mean natural or legal persons, public authority, service or other body receiving communication of Personal Data, whether or not

they are third parties.

With this in mind, in order to properly carry out all Processing activities necessary to pursue the purposes set forth in this Notice, the

following Recipients may be in a position to process your Personal Data:

Third parties who perform part of the Processing activities and/or activities related and instrumental to the same on behalf of the

Data Controller . Such individuals have been appointed as data controllers, i.e., natural or legal persons, the public authority, service

or other body that processes Personal Data on behalf of the Data Controller; individuals, employees and/or collaborators of the Data

Controller, who have been entrusted with specific and/or more Processing activities on your Personal Data. Such individuals have

been given specific instructions regarding the security and proper use of Personal Data and are defined as the "persons authorized

to process Personal Data under the direct authority of the Data Controller or Data Processor."

Where it is required by law or to prevent or suppress the commission of a crime, your Personal Data may be disclosed to public bodies

or judicial authorities without, however, being defined as Recipients. In fact, the regulation states that public authorities that receive

Registro Osteopati d’Italia (n. 4193)

P.IVA 10516550968

Pag. 5 di 11

disclosure of Personal Data as part of a specific investigation conducted in accordance with Union or Member State law are not

considered Recipients.

Without the need for express consent, the Data Controller may communicate your data for the above purposes to Supervisory Bodies,

Judicial Authorities, insurance companies for the provision of insurance services, as well as to those subjects to whom the

communication is compulsory by law for the fulfillment of the said purposes.

Specifically,data recipients may be:

-information and computer support companies;

-Companies, or professional firms offering professional and/or consulting services with respect to accounting, legal, tax,

administrative, financial, and debt collection matters;

-Providers of IT infrastructure and solutions;

-Web service providers;

-Banks and payment service providers, acting as Processors, to whom your personal data may be disclosed for the purpose of

processing your payments;

-consultants, to the extent necessary for the performance of their professional duties.

The communication concerns the categories of personal data whose transmission to the above-mentioned third parties is necessary

for the performance of the activities and for the purposes referred to in this notice.

An up-to-date list of Data Processors and Authorized Persons is kept at the Data Controller's office and is available upon request to

be made by e-mail at

Some of these parties may process data in their capacity as autonomous data controllers.

Your data will not be disseminated.

Data communications may also relate to:

Law or exercise of rights

If the release of information is deemed necessary to respond to legal process, to investigate or remedy potential violations of our

policies, or to protect the rights, property and safety of others, we may share information as permitted or required by any applicable

law, rule or regulation. This includes sharing information with other entities for fraud protection and credit risk reduction.

Third-party service providers

The site shares information with third parties who perform services for the site or on our behalf, including data analysis, emailing,

hosting services, customer service, and marketing support.

6 COOKIES AND WEB BEACONS

We may use cookies, web beacons, tracking pixels and other tracking technologies on the Site to help personalize the Site and

improve your experience. When you access the Site, personal information is not collected through the use of tracking technologies.

Most browsers are set to accept cookies by default. You can remove or reject cookies, but be aware that such action may affect the

availability and functionality of the Site. Users cannot reject web beacons. However, they can be made ineffective by rejecting all

cookies or by changing your web browser settings to notify you each time a cookie is offered, allowing you to accept or reject cookies

on an individual basis. We may use cookies, web beacons, tracking pixels and other tracking technologies on the Site to help

personalize the Site to improve your experience.

Below are the cookies used by this site:

Registro Osteopati d’Italia (n. 4193)

P.IVA 10516550968

Pag. 6 di 11

Requests in EU 40

URL Country ISP https://claracerlesi-osteopata.it/ Italy Register.IT S.p.A https://claracerlesi-osteopata.it/wp-includes/css/dist/block-

library/style.min.css?ver=6.4.3 Italy Register.IT S.p.A

https://fonts.googleapis.com/css?family=Open+Sans%3A300%2C400%2C600%2C700%2C800%7Citalic%7CCourgette&subset=latin%2C

latin-ext Netherlands Google LLC https://claracerlesi-osteopata.it/wp-content/themes/appointment/css/bootstrap.css?ver=6.4.3 Italy

Register.IT S.p.A https://claracerlesi-osteopata.it/wp-content/themes/appointment-blue/style.css?ver=6.4.3 Italy Register.IT S.p.A

https://claracerlesi-osteopata.it/wp-content/themes/appointment/css/theme-menu.css?ver=6.4.3 Italy Register.IT S.p.A

https://claracerlesi-osteopata.it/wp-content/themes/appointment/css/element.css?ver=6.4.3 Italy Register.IT S.p.A

https://claracerlesi-osteopata.it/wp-content/themes/appointment/css/font-awesome/css/font-awesome.min.css?ver=6.4.3 Italy

Register.IT S.p.A https://claracerlesi-osteopata.it/wp-content/themes/appointment/style.css?ver=6.4.3 Italy Register.IT S.p.A

https://claracerlesi-osteopata.it/wp-content/themes/appointment/css/media-responsive.css?ver=6.4.3 Italy Register.IT S.p.A

https://claracerlesi-osteopata.it/wp-content/themes/appointment-blue/css/default.css?ver=6.4.3 Italy Register.IT S.p.A

https://claracerlesi-osteopata.it/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 Italy Register.IT S.p.A https://claracerlesi-

osteopata.it/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 Italy Register.IT S.p.A https://claracerlesi-osteopata.it/wp-

content/themes/appointment/js/bootstrap.min.js?ver=6.4.3 Italy Register.IT S.p.A https://claracerlesi-osteopata.it/wp-

content/themes/appointment/js/menu/menu.js?ver=6.4.3 Italy Register.IT S.p.A https://claracerlesi-osteopata.it/wp-

content/themes/appointment/js/page-scroll.js?ver=6.4.3 Italy Register.IT S.p.A https://claracerlesi-osteopata.it/wp-

content/themes/appointment/js/carousel.js?ver=6.4.3 Italy Register.IT S.p.A https://claracerlesi-osteopata.it/wp-

content/plugins/page-links-to/dist/new-tab.js?ver=3.3.5 Italy Register.IT S.p.A https://claracerlesi-osteopata.it/wp-

content/uploads/2019/05/Clara-

Cerlesfamily=Open%20Sans:wght@400;500;600;700;800;900&family=Open%20Sans:wght@400;500;600;700;800;900&family=Open%

20Sans:wght@400;500;600;700;800;900&family=Open%20Sans:wght@400;500;600;700;800;900&family=Open%20Sans:wght@400;5

00;600;700;800;900&family=Open%20Sans:wght@400;500;600;700;800;900&family=Open%20Sans:wght@400;500;600;700;800;900

&family=Open%20Sans:wght@400;500;600;700;800;900&family=Open%20Sans:wght@400;500;600;700;800;900&family=Open%20S

ans:wght@400;500;600;700;800;900&family=Open%20Sans:wght@400;500;600;700;800;900&family=Open%20Sans:wght@400;500;

600;700;800;900&family=Open%20Sans:wght@400;500;600;700;800;900&family=Open%20Sans:wght@400;500;600;700;800;900&fa

mily=Open%20Sans:wght@400;500;600;700;800;900&family=Open%20Sans:wght@400;500;600;700;800;900&family=Open%20Sans:

wght@400;500;600;700;800;900&family=Open%20Sans:wght@400;500;600;700;800;900&family=Open%20Sans:wght@400;500;600;

700;800;900&family=Open%20Sans:wght@400;500;600;700;800;900&family=Open%20Sans:wght@400;500;600;700;800;900&displa

y=swap Netherlands Google LLC https://claracerlesi-osteopata.en/wp-content/uploads/2019/05/background-clara-10-10-

1024x307.jpg Italy Register.IT S.p.A https://claracerlesi-osteopata.it/wp-content/uploads/2019/05/fondo-trattamenti-slide-4-

1024x307.jpg Italy Register.IT S.p.A https://claracerlesi-osteopata.it/wp-content/uploads/2019/05/maternita-1024x307.jpg Italy

Register.IT S.p.A https://claracerlesi-osteopata.it/wp-content/uploads/2019/05/testimonial-donna.png Italy Register.IT S.p.A

https://claracerlesi-osteopata.en/wp-content/uploads/2019/05/testimonial-man.png Italy Register.IT S.p.A https://claracerlesi-

osteopata.it/wp-includes/js/comment-reply.min.js?ver=6.4.3 Italy Register.IT S.p.A https://claracerlesi-osteopata.it/wp-

content/uploads/2019/05/IMG_8952.jpg Italy Register.IT S.p.A https://platform.docplanner.com/js/widget.js Netherlands

Amazon.com, Inc. https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 Czechia

Google LLC https://claracerlesi-osteopata.it/wp-content/themes/appointment/css/font-awesome/fonts/fontawesome-

webfont.woff2?v=4.7.0 Italy Register.IT S.p.A https://claracerlesi-osteopata.it/wp-includes/js/wp-emoji-release.min.js?ver=6.4.3 Italy

https://platform.docplanner.com/widgets/app-f1da370c.js Netherlands Amazon.com, Inc. https://s3-eu-west-

1.amazonaws.com/miodottore.it/doctor/2382f3/2382f30eb70dfcd2c8d4cd98b6f8917b_140_square.jpg Ireland Amazon.com, Inc.

https

URL Country ISP

Requests out of EU

URL Country ISP blob:https://claracerlesi-osteopata.it/c162fa36-7728-44f6-8cda-1003c98622b0 No data No data

https://widgets.miodottore.it/doctor/widget/big/clara-

cerlesi?customUtm=null&id=ucvhgh5n96&header=null&content=null&fullwidth=null&referer=https%3A%2F%2Fclaracerlesi-

osteopata.en%2F&hide_branding=true&widget_position=bottom&opinion=false&saasonly=false United States Amazon Technologies

Inc. https://js.sentry-cdn.com/251e792f6a3c4ce98dd544a265880295.min.js Canada Fastly, Inc. data:image/svg+xml,%3csvg

width='112' height='20' viewBox='0 0 112 20' xmlns='http://www.w3.org/2000/svg'%3e%3cg fill='%23dcdfe3'%3e%3cpath d='M112

7.782c0 .49-2.309 2.475-5.187 4.704l-.01-.026v.031l.01-.006c1.178 4.046 1.958 7.514 1.436 7.514-.496 0-3.188-1.745-6.241-3.918l-

.01.006-.021-.01c-3.045 2.174-5.731 3.922-6.229 3.922-.52 0 .258-3.459 1.434-7.5l.008.007v-.026l-.006.019c-2.875-2.226-5.184-

4.213-5.184-4.718 0-.505 3.148-.814 6.943-.915l.01-.014h.011c1.278-3.755 2.544-6.853 3.035-6.853.491 0 1.757 3.096 3.038

Registro Osteopati d’Italia (n. 4193)

P.IVA 10516550968

Pag. 7 di 11

6.852h.01l.01.02c3.795.109 6.941.414 6.941.91zM89 7.782c0 .49-2.309 2.475-5.187 4.704l-.01-.026v.031l.01-.006c1.178 4.046 1.958

7.514 1.436 7.514-.496 0-3.188-1.745-6.241-3.918l-.01.006-.021-.01c-3.045 2.174-5.731 3.922-6.229 3.922-.52 0 .258-3.459 1.434-

7.5l.008.007v-.026l-.006.019c-2.875-2.226-5.184-4.213-5.184-4.718 0-.505 3.148-.814 6.943-.915l.01-.014h.011c1.278-3.755 2.544-

6.853 3.035-6.853.491 0 1.757 3.096 3.038 6.852h.01l.01.02c3.795.109 6.941.414 6.941.91zM66 7.782c0 .49-2.309 2.475-5.187

4.704l-.01-.026v.031l.01-.006c1.178 4.046 1.958 7.514 1.436 7.514-.496 0-3.188-1.745-6.241-3.918l-.01.006-.021-.01c-3.045 2.174-

5.731 3.922-6.229 3.922-.52 0 .258-3.459 1.434-7.5l.008.007v-.026l-.006.019c-2.875-2.226-5.184-4.213-5.184-4.718 0-.505 3.148-.814

6.943-.915l.01-.014h.011c1.278-3.755 2.544-6.853 3.035-6.853.491 0 1.757 3.096 3.038 6.852h.01l.01.02c3,795,109 6,941,414

6,941,91zM43 7,782c0 .49-2,309 2,475-5,187 4,704l-.01-.026v.031l.01-.006c1.178 4.046 1.958 7.514 1.436 7.514-.496 0-3.188-1.745-

6.241-3.918l-.01.006-.021-.01c-3.045 2.174-5.731 3.922-6.229 3.922-.52 0 .258-3.459 1.434-7.5l.008.007v-.026l-.006.019c-2.875-

2.226-5.184-4.213-5.184-4.718 0-.505 3.148-.814 6.943-.915l.01-.014h.011c1.278-3.755 2.544-6.853 3.035-6.853.491 0 1.757 3.096

3.038 6.852h.01l.01.02c3.795.109 6.941.414 6.941.91zM20 7.782c0 .49-2.309 2.475-5.187 4.704l-.01-.026v.031l.01-.006c1.178 4.046

1.958 7.514 1.436 7.514-.496 0-3.188-1.745-6.241-3.918l-.01.006-.021-.01c-3.045 2.174-5.731 3.922-6.229 3.922-.52 0 .258-3.459

1.434-7.5l.008.007v-.026l-.006.019c-2.875-2.226-5.184-4.213-5.184-4.718 0-.505 3.148-.814 6.943-.915l.01-.014h.011c1.278-3.755

2.544-6.853 3.035-6.853.491 0 1.757 3.096 3.038 6.852h.01l.01.02c3,795,109 6,941,414 6,941,91z'/%3e%3c/g%3e%3c/svg%3e No

data No data:image/svg+xml,%3csvg width='112' height='20' viewBox='0 0 112 20' xmlns='http://www.w3.org/2000/svg'%3e%3cg

fill='%2300c3a5'%3e%3cpath d='M112 7.782c0 .49-2.309 2.475-5.187 4.704l-.01-.026v.031l.01-.006c1.178 4.046 1.958 7.514 1.436

7.514-.496 0-3.188-1.745-6.241-3.918l-.01.006-.021-.01c-3.045 2.174-5.731 3.922-6.229 3.922-.52 0 .258-3.459 1.434-7.5l.008.007v-

.026l-.006.019c-2.875-2.226-5.184-4.213-5.184-4.718 0-.505 3.148-.814 6.943-.915l.01-.014h.011c1.278-3.755 2.544-6.853 3.035-

6.853.491 0 1.757 3.096 3.038 6.852h.01l.01.02c3.795.109 6.941.414 6.941.91zM89 7.782c0 .49-2.309 2.475-5.187 4.704l-.01-

.026v.031l.01-.006c1.178 4.046 1.958 7.514 1.436 7.514-.496 0-3.188-1.745-6.241-3.918l-.01.006-.021-.01c-3.045 2.174-5.731 3.922-

6.229 3.922-.52 0 .258-3.459 1.434-7.5l.008.007v-.026l-.006.019c-2.875-2.226-5.184-4.213-5.184-4.718 0-.505 3.148-.814 6.943-

.915l.01-.014h.011c1.278-3.755 2.544-6.853 3.035-6.853.491 0 1.757 3.096 3.038 6.852h.01l.01.02c3.795.109 6.941.414

6.941.91zM66 7.782c0 .49-2.309 2.475-5.187 4.704l-.01-.026v.031l.01-.006c1.178 4.046 1.958 7.514 1.436 7.514-.496 0-3.188-1.745-

6.241-3.918l-.01.006-.021-.01c-3.045 2.174-5.731 3.922-6.229 3.922-.52 0 .258-3.459 1.434-7.5l.008.007v-.026l-.006.019c-2.875-

2.226-5.184-4.213-5.184-4.718 0-.505 3.148-.814 6.943-.915l.01-.014h.011c1.278-3.755 2.544-6.853 3.035-6.853.491 0 1.757 3.096

3.038 6.852h.01l.01.02c3.795.109 6.941.414 6.941.91zM43 7.782c0 .49-2.309 2.475-5.187 4.704l-.01-.026v.031l.01-.006c1.178 4.046

1.958 7.514 1.436 7.514-.496 0-3.188-1.745-6.241-3.918l-.01.006-.021-.01c-3.045 2.174-5.731 3.922-6.229 3.922-.52 0 .258-3.459

1.434-7.5l.008.007v-.026l-.006.019c-2.875-2.226-5.184-4.213-5.184-4.718 0-.505 3.148-.814 6.943-.915l.01-.014h.011c1.278-3.755

2.544-6.853 3.035-6.853.491 0 1.757 3.096 3.038 6.852h.01l.01.02c3.795.109 6.941.414 6.941.91zM20 7.782c0 .49-2.309 2.475-5.187

4.704l-.01-.026v.031l.01-.006c1.178 4.046 1.958 7.514 1.436 7.514-.496 0-3.188-1.745-6.241-3.918l-.01.006-.021-.01c-3.045 2.174-

5.731 3.922-6.229 3.922-.52 0 .258-3.459 1.434-7.5l.008.007v-.026l-.006.019c-2.875-2.226-5.184-4.213-5.184-4.718 0-.505 3.148-.814

6.943-.915l.01-.014h.011c1,278-3,755 2,544-6,853 3,035-6,853,491 0 1,757 3,096 3,038 6,852h.01l.01.02c3,795,109 6,941,414

6,941,91z'/%3e%3c/g%3e%3c/svg%3e No data No data

URL Country ISP

7.THIRD-PARTY WEBSITES

The site does not contain links to third-party websites and applications of interest.

8. PERIOD OF RETENTION OF PERSONAL DATA (SO-CALLED DATA RETENTION)

Personal data are stored mainly with both paper and digital procedures in Italy, within the European Union and precisely also outside

the Holder's Head Office and in full compliance with the provisions and fulfillments necessary for the purposes of security and proper

location of the data storage units. Digital storage modes are limited only to the sending of documentation and are carried out in full

compliance with the provisions and fulfillments necessary for the purposes of security and proper location of data storage units( pc

and secure back up tools) as well as for the purposes of security of paper archives.

The Owner will process personal data for as long as necessary to fulfill the above purposes and in any case for no longer than the

termination of the relationship carried out for the Service Purposes.

Retention time related to data processing carried out by this website:

Personal data will be processed and stored for as long as necessary for the purposes for which it was collected.

Therefore:

Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User will be

retained until the full performance of that contract.

Registro Osteopati d’Italia (n. 4193)

P.IVA 10516550968

Pag. 8 di 11

Personal Data collected for purposes of legitimate interest of the Data Controller will be retained for as long as necessary to fulfill

those purposes. Users can find specific information about the legitimate interests pursued by the Controller in the relevant sections

of this document or by contacting the Controller.

The Controller may be authorized to retain Personal Data for a longer period if the User has given consent to such processing,

provided that such consent is not withdrawn. In addition, the Controller may be obliged to retain Personal Data for a longer period

if this is required for the fulfillment of a legal obligation or by order of an authority.

Once the retention period has expired, the Personal Data will be deleted. Therefore, the right of access, the right to erasure, the right

to rectification, and the right to data portability cannot be exercised after the retention period has expired.

The Data Controller will process the personal data for as long as necessary to fulfill the above purposes and in any case for no longer

than 10 years after the termination of the relationship for the Billing and Accounting Service Purposes; For the purposes related to

direct and indirect marketing, please note that the retention period does not exceed 24 months from the date of re-collection.

With reference to health data, the storage time is limited to the time necessary to achieve the treatment and the same will be

subsequently archived as per the Ministry of Health Circular No. 6 dated 19/12/1986.

For the purposes of the website, retention times vary depending on the cookies.

9.COOKIE BANNER TEXT

"We and selected third parties" use cookies or similar technologies for technical purposes and, with your consent, for other purposes

as specified in the Cookie Policy. Use the "Accept" button to consent. Use the "Decline" button to continue without accepting."

10.EXTRA EU/SEAS TRANSFER

In the management of the relationship with customers, there is no transfer of data to third countries nor to international

organizations.

Should it become necessary to make transfers of personal data outside the territory of the European Union to countries not

considered adequate by the European Commission, the Controller will ensure that appropriate or adequate safeguards are in place

to protect personal data and that the transfer of such data complies with applicable data protection laws.

Any transfer of data subjects' data to countries located outside the European Union will, in any case, take place in compliance with

the appropriate and adequate safeguards for the purposes of the transfer itself, in accordance with the applicable legislation and in

particular Articles 45 and 46 of the Regulations.

Accordingly, where required by applicable data protection laws, the Owner will ensure that service providers sign Standard

Contractual Clauses approved by the European Commission.

11.RIGHTS OF THE DATA SUBJECT

In your capacity as a user you are entitled to the following rights:

-Right to access your data, obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet

registered, and their communication in intelligible form; -obtain indication of: (a) the origin of the personal data; (b) the purposes

and methods of processing; (c) the logic applied in the case of processing carried out with the aid of electronic instruments; (d) the

identification details of the data controller, data processors and the data controller's representative and the persons authorized to

process the data; and (e) the subjects or categories of subjects to whom the personal data may be communicated or who may become

aware of the data in their capacity as designated representative in the territory of the State, data processors or persons authorized

to process the data; (Art. 15 GDPR).

-Right to update, rectify or, when interested, supplement data; (Art. 16 GDPR).

-Right to erasure, transformation into anonymous form or blocking of data processed in violation of the law, including data whose

retention is not necessary in relation to the purposes for which the data were collected or subsequently processed ; (art. 17 GDPR).

-Right to request the restriction of use of data for the sole reasons of public interest and for the establishment or defense of a right,

in cases where the data subject disputes the accuracy of the data and processing, in the case of exercising the right to object to

processing under Article 21 GDPR, and in the other cases provided for in Article 18 GDPR; (Article 18 GDPR).

-Right to receive the personal data provided to the data controller in a structural format or on a commonly used, intelligible and

accessible computer medium for any operating system (USB or duly encrypted ZIP file), and to move without constraints, the

complexes of information and data concerning you from the present controller or another controller chosen by you in accordance

with your purposes and in full compliance with the principles of transparency, lawfulness and proportionality of processing. This

right to data portability is without prejudice to other rights; (Art. 20 GDPR).

-Right to object, in whole or in part:

a) for legitimate reasons to the processing of personal data concerning you, even if relevant to the purpose of collection; b) to the

processing of personal data concerning you for any other purpose not relevant to the processing; (Art. 21 GDPR).

-Right to file a complaint with the supervisory authority.

-Right to withdraw consent: consent to data processing can be withdrawn at any time by the data subject

Registro Osteopati d’Italia (n. 4193)

P.IVA 10516550968

Pag. 9 di 11

12. OBJECTION TO PROCESSING AND WITHDRAWAL OF CONSENT

As provided for in the Regulations, if you have given your consent to the Processing of your Personal Data for one or more of the

purposes for which you have been requested, you may, at any time, withdraw it in whole and/or in part without affecting the

lawfulness of the Processing based on the consent given before the withdrawal.

The ways to revoke consent are very simple and intuitive, you just need to contact the Data Controller using the contact channels

reported to you within this Policy.

placed at the bottom of them to stop receiving any further communication or, if not present, using the additional contact channels

made available by the Data Controller.

13. WAYS OF EXERCISING RIGHTS

You may exercise your rights at any time by sending a request by email to the address in introductory paragraph No. 1 of this data

protection notice or by writing to the Data Controller by paper mail.

You may also exercise your rights by contacting the Privacy Guarantor, with Headquarters in Piazza Venezia n. 11 - 00187 Rome,

Telephone switchboard: (+39) 06.696771,Fax: (+39) 06.69677.3785. For general information you can send an e-mail to:

protocollo@gpdp.it, protocollo@pec.gpdp.it

14. AMENDMENTS TO THIS POLICY

The Data Controller reserves the right to make changes to this Privacy Policy at any time by giving notice to users on this site.

Therefore, please consult this page often, taking as reference the date of last modification indicated at the end of the document. In

case of non-acceptance of the changes made to this Privacy Policy you may request the Data Controller to delete the personal data

concerning you.

15. MATERIALS

All content on the Internet Sites (not uploaded by users) is part of the data controller's archive including images. Part of the

photographic materials are taken from online archives. The user when registering and entering content, whether photographic or

tesSuale, for the purpose of publication on the Internet Sites, declares that he/she owns the rights (including for commercial

purposes) to the uploaded images. The user therefore assumes full responsibility for the provenance and legality of the images

uploaded to the Internet Sites.

16. PROCEDURE FOR REVOCATION OF CONSENTS ON DATA PROCESSING BY THE ENTITY:

Dear User, You may request to revoke one or more of the privacy consents listed below by sending an email to the mailing address

in paragraph 1 of this Data Protection Notice and stating one or more of the options you wish to revoke.

- Revocation of Email Communications

- Revocation of third-party marketing communications by email

Once the request is received, it will generally be processed within 48 hours.

HOW TO DISABLE COOKIES OF ANY BROWSERS USED BY THE USER FOR BROWSING BY BROWSER CONFIGURATION?

Chrome

1. Running the Chrome Browser

2. Click on the menu on the browser toolbar next to the url entry window for lanavigation

3. Select Settings

4. Click Show Advanced Settings

5. In the "Privacy" section, click "Content Settings" button.

6. In the "Cookies" section, you can change the following cookie-related settings: - Allow local data to be saved locally - Change

local data only until the browser is closed -Prevent sites from setting cookies - Block third-party cookies and site data - Manage

exceptions for certain websites - Delete any or all cookies

For more information visit the dedicated page.

Mozilla Firefox

1. Run the Mozilla Firefox Browser

2. Click on the menu on the browser toolbar next to the url entry window for browsing

3. Select Options

4. Select the Privacy panel

5. Click Show Advanced Settings

6. In the "Privacy" section, click "Content Settings" button.

Registro Osteopati d’Italia (n. 4193)

P.IVA 10516550968

Pag. 10 di 11

7. In the "Tracking "section you can change the following settings related to cookies: - Require sites not to do any tracking - Notify

sites of your willingness to be tracked - Notify no preference regarding tracking of personal data

8. From the "History "section you can: - By enabling "Use custom settings" select to accept third-party cookies (always, from the

most visited sites or never) and to keep them for a specified period (until they expire, when Firefox closes or to ask every time) -

Remove individual stored cookies.

For more information visit the dedicated page.

Internet Explorer/Edge

1. Run the Internet Explorer/Edge Browser.

2. Click on the Tools button and choose Internet Options

3.Click on the Privacy tab and in the Settings section change the slider to

the desired action for cookies

- Block all cookies

Allow all cookies

- Selection of sites from which to obtain cookies: move the slider to an intermediate position so as not to block or allow

all cookies,then press on Sites, in the Website Address box enter a website and then press on Block or Allow

For more information visit the dedicated page.

Safari 6

1. Running the Safari Browser

2. Click on Safari,select Preferences and press on Privacy

3. In the Block Cookies section, specify how Safari should accept cookies from Internet sites.

4. To view which sites have stored cookies click on Details

For more information visit the dedicated page.

Safari iOS(mobile devices)

1. Running the Safari iOS Browser

2. Tap on Settings and then Safari

3. Tap on Block Cookies and choose from the options, "Never," "Third Party and Advertisers," or "Always"

4. To clear all cookies stored by Safari, tap on Settings, then on Safari, and finally on Clear Cookies and Data

For more information visit the dedicated page.

Opera

1. Running the Opera Browser

2. Click on Preferences then Advanced and finally Cookie

3. Select one of the following options: -Accept all cookies - Accept cookies only from the site you are visiting: third-party cookies

and that are sent from a domain other than the one you are visiting will be rejected - Never accept cookies: all cookies will never be

saved

For more information visit the dedicated page.

17. DEFINITIONS AND LEGAL REFERENCES

Personal Data (or Data)

Personal data is any information that, directly or indirectly, including in connection with any other information, including a personal

identification number, makes a natural person identified or identifiable.

Usage Data

This is the information collected automatically through this Application (including by third party applications integrated into this

Application), including: the IP addresses or domain names of the computers used by the User who connects with this Application,

the addresses in URI (Uniform Resource Identifier) notation, the time of the request, the method used in forwarding the request to

the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server

(successful, error, etc..) the country of origin, the characteristics of the browser and operating system used by the visitor, the various

temporal connotations of the visit (e.g. the length of time spent on each page) and the details of the itinerary followed within the

Application, with particular reference to the sequence of pages consulted, the parameters relating to the User's operating system

and computer environment.

User

The individual using this Application who, except where otherwise specified, coincides with the Data Subject.

Interested

The natural person to whom the Personal Data refers.

Registro Osteopati d’Italia (n. 4193)

P.IVA 10516550968

Pag. 11 di 11

Data Processor (or Manager)

The natural person, legal entity, public administration and any other entity that processes personal data on behalf of the Controller,

as set forth in this privacy policy.

Data Controller (or Owner)

The natural or legal person, public authority, service or other body which, individually or jointly with others, determines the purposes

and means of the processing of personal data and the means adopted, including the security measures relating to the operation and

use of this Application. The Data Controller, unless otherwise specified, is the owner of this Application.

This Application

The hardware or software tool by which Users' Personal Data are collected and processed.

Service

The Service provided by this Application as defined in the relevant terms (if any) on this site/application.

European Union (or EU)

Unless otherwise specified, any reference to the European Union in this document is understood to extend to all current member

states of the European Union and the European Economic Area.

Cookies are Tracking Tools that consist of small portions of data stored within the User's browser.

Tracking Tool

Tracking Tool means any technology - e.g., cookies, unique identifiers, web beacons, embedded scripts, e-tags, and fingerprinting -

that allows tracking Users, for example, by collecting or storing information on the User's device.

Legal references

This privacy policy is prepared based on multiple legislative orders, including Articles 13 and 14 of Regulation (EU) 2016/679.

Unless otherwise specified, this privacy policy covers this Application only.

18. ACCEPTABLE USE POLICY FOR WEBSITE USERS

Prohibited use

You may not use the Services to post content or engage in activities that are illegal under applicable law, harmful to others, or that

could expose us to liability, including but not limited to the following activities, each of which is prohibited by this AUP:

-Phishing or identity theft

-Distribution of computer viruses, worms, Trojan horses (TROJAN) or other malicious codes (MALWARE, RANSOMWARE, etc.).

-Distributing pornography or adult content or offering escort services.

-Promoting or facilitating violence or terrorist activities.

-Infringement of intellectual property or other property rights of others.

Application

Your services may be suspended or terminated with or without notice if you violate this policy. Any violation may result in immediate

suspension or termination of your account.

Reporting violations

To report a violation of this policy, contact us as per Section 13 of this policy

We reserve the right to change this policy at any time, and you will be promptly updated of this. To make sure you are up-to-date on

the latest changes, we recommend that you visit this page often.