Privacy Policy
Last updated: 17 July 2026
This website is an informational showcase: it has no contact form, no registration and no online booking, and it does not collect patient or health data. This policy explains how personal data is processed on this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended. Patient data processed at the practice is governed by a separate information notice given directly to patients.
Data controller
The data controller is D'Amico Giuseppe Lars, a self-employed dental professional, VAT no. IT03167450216, registered office Via Albin Egger Lienz 15, 39100 Bolzano (BZ), Italy.
Clinical activity is carried out at Via Waltraud-Gebert-Deeg 3/G, 39100 Bolzano (BZ), Italy, in premises rented within the Maia Dentis practice. Maia Dentis is the host location only: it is a separate entity and is not the controller of the data processed through this website or of Dr. D’Amico’s own patients.
Contact for privacy matters: info@drlarsdamico.com - +39 348 455 6621.
What data is processed
This website has no contact form, no registration and no online booking. Data is processed only in the following cases:
- Technical data (navigation): IP address, browser type, device, pages requested, date and time. These are collected by the hosting provider in server logs and are necessary to deliver the site and keep it secure.
- Contact data: if you call, send an email or write on WhatsApp, we process the data you choose to share (name, phone, email and any information about your request).
- Analytics data: only with your consent - see the Cookie Policy.
- Consent record: your cookie choice is recorded by Cookiebot (Usercentrics A/S, Denmark), which stores an anonymised key, the date and time, the categories accepted and the version of the cookie declaration, as proof of consent required by Art. 7(1) GDPR.
Please do not send health information through WhatsApp or ordinary email. These channels are not designed for special category data; use them only to arrange an appointment or ask a general question. Any clinical information is collected and processed in the practice, under a separate patient information notice.
Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Delivering the site, security, abuse prevention | Legitimate interest - Art. 6(1)(f) GDPR |
| Replying to your requests and arranging appointments | Pre-contractual measures at your request - Art. 6(1)(b) GDPR |
| Analytics and session recording | Your consent - Art. 6(1)(a) GDPR (freely withdrawable) |
| Keeping proof of your cookie choice | Legal obligation - Art. 7(1) GDPR (demonstrating consent) |
| Legal and tax obligations | Legal obligation - Art. 6(1)(c) GDPR |
Recipients and processors
Data may be accessible to the following providers, appointed as data processors or acting as independent controllers:
- Cloudflare, Inc. - website hosting and delivery (server logs, security).
- Usercentrics A/S (Cookiebot), Denmark - cookie consent management and consent log; data is processed within the EU.
- Google Ireland Ltd / Google LLC - Google Analytics 4 and Google Maps (only with consent).
- Microsoft Ireland Operations Ltd / Microsoft Corporation - Microsoft Clarity (only with consent).
- WhatsApp Ireland Ltd - only if you choose to write via WhatsApp.
- Professionals and providers supporting administrative, accounting and IT activities.
Data is never sold and is not used for automated decision-making or profiling with legal effects.
Transfers outside the EU
Google and Microsoft may process data in the United States. Transfers rely on the EU-US Data Privacy Framework and/or Standard Contractual Clauses approved by the European Commission. These transfers only take place if you consent to analytics or external content.
Retention
- Server logs: normally up to 12 months.
- Emails and messages: for the time needed to handle your request and, where a treatment relationship begins, according to the retention rules for clinical records.
- Analytics: up to 14 months (Google Analytics 4) and up to 12 months (Microsoft Clarity).
- Consent choice stored on your device: 12 months.
- Consent record kept by Cookiebot: 12 months, then consent is requested again.
Your rights
You may at any time request access, rectification, erasure, restriction, portability, or object to processing (Articles 15-22 GDPR), and withdraw consent without affecting the lawfulness of processing carried out beforehand.
To exercise your rights, write to info@drlarsdamico.com.
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).