Studio Finizio
Website privacy
How data is processed when you browse the website or contact Studio Finizio.
Data controller
Dr. Massimo Finizio – dentist
Via Bernini 58, 80129 Naples, Italy
VAT number: IT06754130638
+39 377 090 6661
dottfinizio@etik.com
Certified email (PEC): massimo.finizio.ixbo@na.omeceo.it
Scope of this notice
This notice under Article 13 of Regulation (EU) 2016/679 (GDPR) covers drfinizio.it, access through studiofinizio.es and studiofinizio.net, and its published version at studio-finizio.drfinizio.chatgpt.site. No account is required to browse. Booking at prenota.drfinizio.it is covered by a separate notice; this page does not cover clinical records or treatment provided at the practice.
Browsing data and security
When you access the website, its delivery infrastructure may process your IP address, date and time, requested page address, browser and device information, request source, response status and technical security signals. These support page delivery, fault handling and protection against misuse. The legal basis is the controller’s legitimate interest in website availability and security (Article 6(1)(f) GDPR). This data is necessary for Internet communication and does not require visitors to enter information.
Visit statistics
Cloudflare Web Analytics provides reports on pages viewed, referrals, country, device type, browser and performance. According to Cloudflare, it does not use cookies or fingerprinting to track visitors. The practice uses statistics to improve content and functionality, without linking them to patient records. For any personal data necessary for this purpose, the legal basis is the legitimate interest in improving the website (Article 6(1)(f)).
Email, telephone and certified email
If you contact the practice, we process the contact details you provide, your name if supplied and the contents of your request to respond and act on your instructions. For service enquiries, the legal basis is taking steps at your request before entering into a contract (Article 6(1)(b)); for general enquiries or reports, it is the legitimate interest in handling correspondence (point (f)). Providing information is optional, but we may be unable to respond without contact details or necessary information. Send only essential information for these enquiries; agree on an appropriate channel with the practice before sending medical reports or other health data.
Cookies and external links
Cloudflare security services may set the technical cookie __cf_bm to distinguish automated traffic and protect the website; the provider states it expires after 30 minutes of inactivity. It is separate from Web Analytics. You can manage or delete cookies in your browser; blocking them may affect security checks. Public pages do not embed advertising pixels, maps or newsletter sign-up forms. The music section includes an embedded Suno player. When it loads, your browser connects to Suno, which may process technical data and use cookies under its own privacy notice. Music does not play automatically. Links to Google Maps, professional registers and the booking app open external services with their own privacy notices.
Recipients and processing
The controller and authorised personnel process data for the purposes described. Hosting, security, IT support, email and certified email providers may process data within their service remit, as may authorities where required by law (Article 6(1)(c)). The website is published through OpenAI Sites and uses Cloudflare infrastructure. Providers act as processors when processing on the practice’s behalf and, for any purposes of their own, in the roles described in their documents. The practice does not sell or publish visitors’ data. Website traffic is protected with HTTPS.
Transfers outside the European Economic Area
Technical services may involve processing in the United States or other countries outside the EEA; exclusive hosting in Italy or the EU is not guaranteed. Cloudflare describes reliance on the Data Privacy Framework and standard contractual clauses for relevant transfers; OpenAI addresses transfers in the data processing agreement applicable to the service. Provider documents are linked below. You may ask the controller for further information and a copy of applicable safeguards.
Retention
Correspondence is kept to handle and conclude your enquiry and related follow-up exchanges; any further retention depends on legal obligations or specific needs to protect legal rights. Technical data follows the cycles of the services used, taking account of faults, security incidents and applicable obligations: cookies, logs and messages serve different purposes and do not share a single retention period. The __cf_bm cookie has the lifespan stated above. The website code does not build an archive of individual visitor profiles. Contact the controller for information about retention of a specific enquiry.
Your rights
Where provided for by Articles 15–22 GDPR, you may request access, correction, erasure, restriction and portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. Where processing relies on consent, you may withdraw it without affecting earlier processing. Write to the email or certified email address above; requests are answered within GDPR deadlines. You may also lodge a complaint with the Italian data protection authority, Garante per la protezione dei dati personali (garanteprivacy.it).
Automated decisions and updates
The institutional website does not make decisions producing legal or similarly significant effects on individuals and does not build advertising profiles. This notice is updated when the features or processing described change; the date above identifies the published version.