1. Data controller
Barbara Spacca
Professional address: Meyer Children’s Hospital IRCCS, Viale Gaetano Pieraccini 24, 50139 Florence, Italy.
For requests concerning personal data, the controller can be contacted through the form on the home page. Please state that the message concerns a privacy request and do not include health data.
This is a personal website. Listing the professional address at Meyer Children’s Hospital does not make the Hospital the controller of data collected through this website.
2. Data processed
The contact form may collect your full name, email address, optional telephone number, message and confirmation that you have read this notice. When you browse the website, technical data necessary for its operation and security may also be processed, including IP address, browser type, date and time of the request and server logs.
3. Purposes and legal bases
- responding to organisational information requests and taking pre-contractual steps requested by you under Article 6(1)(b) GDPR; the form cannot be used to book an appointment;
- ensuring security, preventing misuse and maintaining correct operation of the website, on the basis of legitimate interests under Article 6(1)(f) GDPR;
- complying with any applicable legal obligations under Article 6(1)(c) GDPR.
The acknowledgement checkbox is not consent to processing; it only confirms that this notice has been read.
4. Health data and children’s data
The form is not intended to collect medical reports, diagnoses, clinical images or other health data. You must not include this information. If it is submitted accidentally, it will not be used for clinical purposes and will be deleted as soon as possible. Healthcare communications must be sent only through the official channels provided by the relevant healthcare organisation.
The form is intended for adults. If an enquiry concerns a child, provide only the parent’s or legal guardian’s contact details and do not include the child’s health information.
5. Required data and retention
Your name, email address and message are required in order to respond; the telephone number is optional. Information submitted through the form is retained for no longer than 3 months from receipt and is then deleted, unless longer retention is necessary to comply with a legal obligation or to establish, exercise or defend a legal claim.
6. Processing, recipients and transfers
Data are processed electronically using reasonable security measures. They may be processed by technical providers strictly necessary for operation of the website, particularly Netlify, Inc., which provides hosting and form handling and acts as a processor on behalf of the controller.
Use of Netlify may involve processing outside the European Economic Area. Netlify states that it uses safeguards provided by applicable law, including Standard Contractual Clauses and, where applicable, the Data Privacy Framework. For further information, see Netlify’s privacy statement.
Data are not sold, used for marketing or made public. They may be disclosed to public authorities only where required by law.
7. Cookies, analytics and external content
The website does not use analytics tools, newsletters, advertising cookies or profiling systems. Only technical data necessary to provide and secure the service may be generated.
The Media page contains links and some previews supplied by external services, including YouTube. Loading these previews or opening an external link may transmit technical data, such as your IP address, to the relevant provider under its own privacy policy.
8. Your rights
Where provided by the GDPR, you may request access, rectification, erasure, restriction, objection and data portability, and may withdraw any consent without affecting the lawfulness of earlier processing. Requests can be sent to the controller using the form referred to above.
You also have the right to lodge a complaint with the Italian Data Protection Authority or the competent authority in your country.
9. Automated decision-making
Your data are not subject to automated decision-making or profiling.