Privacy notice on the processing of personal data

1. Data Controller

LEDA Clinic S.r.l. – Viale Italia 103, Conegliano (TV), Italy

VAT No.: 05606000262

Email: ledaclinicsrl@gmail.com

Phone: +39 348 390 8645

2. Data processed

We process identification and contact data (first name, last name, tax code, email, phone number), health data (medical history, allergies, relevant conditions), clinical before/after photographs, and payment data for administrative and tax purposes only.

3. Purposes and legal bases

Health data is processed in order to provide the requested treatments, without requiring explicit consent (Art. 9(2)(h) GDPR). Payment data is processed to comply with legal obligations. Appointment reminders are based on the Data Controller's legitimate interest.

The following instead require explicit, separate consent: use of clinical photographs for promotional purposes or on the Practice's social media channels; sending marketing communications and newsletters.

4. Channels for collecting and communicating data

Data is collected in person at the practice, by phone, and through messaging (WhatsApp) or social media, exclusively for bookings and preliminary contact. No health data is transmitted through these channels on the Practice's own initiative.

Data may be shared with: authorized staff of the Practice; external healthcare professionals involved in your care; the accounting firm and practice-management software providers (acting as Data Processors under Art. 28 GDPR); competent authorities where required by law. Data is not transferred outside the EU.

5. Data retention

Clinical and photographic records (internal use): for the entire duration of the care relationship. Tax and administrative data: 10 years, as required by law. Marketing data: until consent is withdrawn.

6. Data subject rights

You may exercise your rights of access, rectification, erasure (within the limits set by healthcare regulations), restriction, portability, and objection to processing at any time, by writing to ledaclinicsrl@gmail.com.

You may also file a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) atwww.garanteprivacy.it. The Practice adopts appropriate technical and organizational measures to protect data from unauthorized access.

7. Cookies and site tools

This website uses technical cookies required for operation. For traffic statistics we usePlausible Analytics, a privacy-first tool that does not use profiling cookies and does not collect personally identifying data. Aggregated data is processed by Plausible Insights OÜ (EU). Google Analytics is not in use.

Full details are in the Cookie Policy.