Privacy policy

Dear user, in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR"), we inform you that your personal data will be processed lawfully, fairly and transparently, in line with the principles of data minimisation and confidentiality.

Pursuant to Article 13 of the GDPR, we inform you that:

1. CATEGORIES OF DATA: Studio Dentistico Manti will process personal data such as:
   • Browsing data. The IT systems and applications running this website collect, during their normal operation, some data (whose transmission is implicit in the use of Internet communication protocols) that may be associated with identifiable users. These include, for example, IP addresses, access logs, browser and device information, the time of the request and other parameters of the user's IT environment. This data is processed only for as long as strictly necessary to ensure the proper functioning and security of the website and to obtain aggregate statistics on its use.
   • Data provided voluntarily by the user. Sending messages to the email addresses shown on the website and/or filling in contact forms involves the collection of the data entered by the user (e.g. name, surname, email, phone number and any other information provided), which is necessary to handle the request and reply to it.
   • Cookies and tracking tools. The website uses technical cookies and, with the user's consent, analytics, marketing and embedded content cookies and/or similar technologies (e.g. pixels, tags, third-party scripts). Further information is available in our cookie policy.
2. SOURCE OF PERSONAL DATA: data is collected directly from the data subject and/or through browsing the website and using its integrated services.
3. DATA CONTROLLER: the data controller is Studio Dentistico Manti, Via Aristide Leonori, 110, 00147 Rome, Italy, tax code and VAT no. 11580581004, represented by its legal representative Dott. Carlo Manti, who can be contacted at studiodentisticomanti@gmail.com.
4. PURPOSES AND LEGAL BASIS OF PROCESSING: data is processed for the following purposes:
   • Technical operation and security of the website (including anti-abuse measures and technical logs). Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
   • Handling requests sent by the user (email, forms, phone). Legal basis: performance of pre-contractual and/or contractual measures requested by the data subject (Art. 6(1)(b) GDPR).
   • Statistics and improvement of the website through non-technical tools. Legal basis: consent (Art. 6(1)(a) GDPR), where requested through the cookie banner, as described in the cookie policy.
   • Marketing, remarketing and conversion measurement. Legal basis: consent (Art. 6(1)(a) GDPR).
   • Display of embedded content (videos, maps, widgets). Legal basis: consent, where embedding involves non-technical cookies or identifiers, as described in the cookie policy.
5. THIRD-PARTY TOOLS AND SERVICES (EXAMPLES):
   
   Google Tag Manager
   A tag management system used to integrate and manage analytics and marketing tools. Non-technical tags are only activated according to the preferences expressed by the user in the cookie banner.
   
   Google Analytics
   A web traffic analysis service provided by Google. Depending on its configuration, it may use cookies or identifiers. It is activated according to the preferences expressed in the cookie banner.
   Privacy policy
   
   Google Ads (conversion tracking / remarketing)
   Advertising and campaign measurement tools provided by Google. They are activated only with the user's consent given through the cookie banner.
   Privacy policy
   
   AWStats
   A traffic analysis tool that normally processes server logs in aggregate form (depending on its configuration, it may not use cookies).
   Information
   
   Embedded content (YouTube / Vimeo / Google Maps / others)
   Embedding videos, maps or other content may involve the transfer of data and/or the use of cookies or identifiers by the providers. Where required, it is activated according to the preferences expressed in the cookie banner.
   Google privacy policy – Vimeo privacy policy
   
   WhatsApp (contact link)
   The website may include a WhatsApp contact button that allows users, on their own initiative, to start a conversation via a link. Any personal data is then shared directly on the WhatsApp platform and is subject to that provider's policies.
   Privacy policy
6. RECIPIENTS OF THE DATA: data may be processed by staff authorised by the data controller and by external providers (e.g. hosting, maintenance, analytics and marketing services), appointed, where necessary, as data processors under Art. 28 GDPR.
7. TRANSFER OF DATA OUTSIDE THE EU: some providers (e.g. Google, Meta, Microsoft, Vimeo) may transfer data to countries outside the EU (e.g. the United States). Such transfers take place in accordance with Art. 44 et seq. GDPR, on the basis of appropriate safeguards (e.g. Standard Contractual Clauses) and/or other instruments provided for by law.
8. RETENTION PERIOD: data will be kept for as long as strictly necessary to achieve the purposes for which it was collected and/or for the period required by law. Specific retention periods for cookies and tracking tools are given in the cookie policy and/or in the third-party providers' notices.
9. RIGHTS OF THE DATA SUBJECT: you may exercise the rights provided for by Articles 15–22 GDPR (access, rectification, erasure, restriction, objection and data portability) and withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).
10. WHETHER PROVIDING DATA IS MANDATORY: providing technical browsing data is necessary for the website to work; providing data through forms or contacts is optional, but necessary to handle your request. Data collected through non-technical cookies (analytics, marketing, embedded content) is optional and depends on the preferences expressed in the cookie banner.
11. METHODS OF PROCESSING: personal data is processed using electronic and/or paper-based tools, with appropriate technical and organisational measures in accordance with Art. 32 GDPR.

This is an English translation provided for convenience. In case of discrepancy, the Italian version prevails.