Privacy policy

1. Data controller

The controller of data collected through this website is Dr. Giuseppe Iannone, psychologist and psychotherapist, registered with the Order of Psychologists of Lombardy, section A, no. 18949.

• VAT number: IT 03610780136
• Email: info@giuseppeiannone.it
• Certified email (PEC): giuseppeiannone@psypec.it

No Data Protection Officer has been appointed: the activity does not fall within those requiring one under art. 37 GDPR.

2. Scope of this notice

This notice covers only data collected through giuseppeiannone.it.

The processing of data within a course of therapy — session records, clinical notes and any information gathered in the studio or in online sessions — is covered by a separate notice, provided and signed at the first session, and is not governed by this document.

3. What data is collected

Data you provide through the contact form

• name
• email address
• phone number (required if you choose to be contacted via WhatsApp or by phone, optional otherwise)
• preferred contact channel
• the content of your message
• your consent to processing

Data collected automatically

• IP address, temporarily, to protect the form from automated submissions
• browsing data collected by the statistics and marketing tools described in the cookie policy, only with your consent

There is no automated decision-making or profiling within the meaning of art. 22 GDPR.

4. Health-related data

The message you write in the form may contain information about your health — symptoms, difficulties, a request for help. This constitutes a special category of data under art. 9 GDPR.

Such information is processed solely on the basis of your explicit consent, given by ticking the box before sending, and only in order to respond to your enquiry.

You do not need to describe your health in order to contact me. A message can simply be a request for an appointment: what you want to explain can be said at the first session, in a context covered by professional secrecy.

5. Purposes and legal bases

Providing the form data is optional, but without it no reply is possible.

6. Who the data is shared with

Data is neither sold nor transferred to third parties. It is processed by the following providers, acting either as processors or as independent controllers:

Site infrastructure

• Vercel Inc. — website hosting. Servers within the European Union. Receives the connection data required to serve the pages.
• Sanity.io — content management system. Does not receive form submissions. The video on the homepage loads directly from Sanity's servers, which therefore receive your IP address; images, by contrast, are served through our own server and involve no direct communication.

Communications

• Yahoo Inc. — the email service through which messages sent via the form are received and stored, including any health-related content. The service involves the transfer and storage of data on servers located, in part, outside the European Union.

Maps

• CARTO and the OpenStreetMap Foundation — display of the location maps. They receive your IP address when a map loads.

Statistics and marketing — only with consent

• Google Ireland Ltd. — Google Analytics, Google Tag Manager, Google Ads
• Microsoft Ireland Operations Ltd. — Microsoft Clarity, Bing Webmaster Tools
• Meta Platforms Ireland Ltd. — Meta Pixel

Details of what each tool collects are in the cookie policy.

7. Transfers outside the European Union

Some of the providers listed above may transfer data to the United States. Such transfers take place on the basis of the Standard Contractual Clauses approved by the European Commission, or of certification under the EU-US Data Privacy Framework where applicable.

8. How long data is kept

Messages sent through the form — until the exchange of correspondence concludes, and in any case no longer than necessary to deal with your enquiry. Where the exchange does not lead to a course of therapy, the message is deleted once the conversation has ended.

IP addresses collected to protect the form — held only in the server's memory, never written to disk or to a database, and cleared when the service restarts.

Statistics and marketing data — for the periods stated in the cookie policy, and revocable at any time by withdrawing consent.

Where an exchange leads to a course of therapy, retention of the related records is governed by the notice provided at the first session and by the professional and legal obligations applying to it.

9. Your rights

Under arts. 15-22 GDPR you may at any time request:

• access to the data concerning you
• rectification, if it is inaccurate
• erasure
• restriction of processing
• to receive it in a readable format, or have it transferred to another controller
• to object to processing based on legitimate interest
• to withdraw consent given, without affecting the lawfulness of processing already carried out

To exercise these rights, write to info@giuseppeiannone.it or to the certified email address given in section 1. A reply follows within one month.

You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

10. Security

The site uses an encrypted connection (HTTPS). Messages sent through the form are transmitted by email and stored in the mailbox identified in section 6.

No transmission over the internet can be guaranteed to be entirely secure. For that reason, the form is not the right channel for detailed clinical information: that belongs in the consultation.

11. Changes

This notice may be updated. The date at the top indicates the most recent revision.

For any question about this notice you can write to me.