Chiara Del Noce · Ophthalmology
Privacy Policy
How personal data are processed during website use and when an enquiry is submitted.
This notice explains how personal data are processed when users visit chiaradelnoce.it or submit an enquiry through the contact form.
Last updated: 13 September 2026.
Data controller
The data controller is Dr Chiara Del Noce, medical doctor and specialist in Ophthalmology, Genoa, Italy.
Email: delnocechiara@gmail.com
Telephone: +39 340 061 8556
The same email address may be used for requests concerning personal-data protection.
Data processed
Browsing data
The systems used to make the website available may process the IP address, date and time of the request, requested page, technical browser and device information, request outcome and logs required for operation and security.
Data submitted through the form
Full name, email address, optional telephone number, preferred contact method, reason for the enquiry, preferred clinic and optional message. The acknowledgement of this notice and the date of the enquiry are also included in the email received.
Abuse prevention
The IP address is used to generate a temporary hashed identifier that prevents repeated submissions for two minutes. The IP address is not included in the email generated by the form.
Health data
The form is not intended to collect health data. Do not send photographs, medical reports, diagnoses or clinical information. If such information is nevertheless volunteered, it will be processed only to the extent strictly necessary by a professional bound by professional secrecy and, where the enquiry is genuinely connected with healthcare, under the conditions of Article 9(2)(h) GDPR; otherwise it will be deleted. The form is not an emergency service.
Purposes and lawful bases
- Website operation, security and abuse prevention: the controller’s legitimate interest in providing a secure and functioning website, under Article 6(1)(f) GDPR.
- Responding to information or appointment enquiries: taking steps at the user’s request prior to entering into a professional relationship and handling the requested communication, under Article 6(1)(b) GDPR.
- Compliance and legal claims: compliance with a legal obligation or the legitimate interest in establishing, exercising or defending legal claims, under Article 6(1)(c) and (f) GDPR where applicable.
Contact-form data are not used for newsletters, marketing or profiling.
Whether data must be provided
Fields marked with an asterisk are required to handle the enquiry. The telephone number and message are optional; a telephone number is required only if telephone contact is selected. If required data are not provided, the enquiry cannot be submitted or handled.
Processing and recipients
The form uses validity checks, data sanitisation, anti-CSRF protection, a honeypot and submission rate limiting. Enquiries are not stored as records in the WordPress database; they are transmitted to the controller by email.
Where necessary, data may be processed by technical providers supporting the website and email service, in particular Hostinger for hosting, CDN, security and server-side email delivery, and Google for the receiving Gmail mailbox. Data may also be disclosed to public authorities or other parties where required by law. Personal data are not sold or made public.
The form does not automatically forward enquiries to Vista Vision S.p.A. or Casa di Cura Villa Montallegro.
International transfers
The use of international providers may involve processing outside the European Economic Area. Where this occurs, transfers are made on the basis of an adequacy decision or other safeguards permitted by applicable data-protection law, including the European Commission’s Standard Contractual Clauses where relevant. Further information about applicable safeguards may be requested from the controller.
Retention
- Enquiries received by email are retained for as long as necessary to respond and in any event for no longer than 12 months after the correspondence is closed, unless legal obligations or the establishment, exercise or defence of legal claims require longer retention.
- The hashed identifier used for rate limiting expires after two minutes.
- Technical and security logs are retained only for the period necessary under the hosting service’s configuration and applicable obligations.
If an enquiry leads to a professional or clinical relationship, data collected thereafter are processed and retained under the separate notice applicable to that relationship.
Individual rights
Where provided by applicable law, individuals may request access, rectification, erasure, restriction and portability of their data, and may object to processing based on legitimate interests. Requests may be sent to delnocechiara@gmail.com.
Individuals may also lodge a complaint with the Italian Data Protection Authority or the supervisory authority in their country of residence or work.
Automated decision-making and updates
No automated decision-making or profiling is carried out. This notice may be updated to reflect legal or technical changes; the date at the top identifies the current version.