It is our policy to collect, process and share your Data provided to us by you in order to carry out the services requested by you and any contact in relation to those services only. Your Data will not be used for any other purposes other than those explicitly stated in this policy or requested by you in your dealings with us.
The identity of the controller.
You are hereby informed that the Data that you provide is collected, used, protected, processed and shared by the clinic directors Andrea Tadello and Roberta Enrico.
Collection of Data
We may collect Data about our clients, prospects and visitors.
Your Data are collected when you browse our website, contact us via email, phone or in person or through our website.
Data we collect fall into the following categories:
- Identification information
- Contact information
- Medical information
- Browsing information
- Transaction history
These Data are gathered directly from you via online booking and from direct communication with us, i.e. client intake form, emails, phone calls, transactions. Browsing history is collected via automated methods.
Information you provide to us
We process Data you provide directly to us, in particular when you complete a client intake form or book online.
For example, we collect Data when you create a booking, participate in a contest or promotion, register for an event or an online course, apply for a job, request customer support or otherwise communicate with us.
The Data may include the following data as well as any other type of information that we specifically request you to provide to us through our client intake forms, such as:
- Date of Birth
- Phone no
- Doctor’s details
- Next of kin Emergency contact details
- Medical history
- Treatment notes
- Relationship data
- Browsing data
- Transaction history
Data We collect automatically when you use our online services
When you access or use our online services, we automatically collect the following information about you via Google Analytics:
- Log Information: We log information about your use of the Services, including the type of browser you use, access times, pages viewed, your IP address and the page you visited before navigating to Our Services.
- Device Information: We collect information about the computer or mobile device you use to access Our Services, including the hardware model, operating system and version, unique device identifiers and mobile network information.
- Location Information: We may with your consent collect information about the location of your device each time you access or use one of Our mobile applications. If you initially consent to Our collection of location information, you may be able to subsequently stop the collection of these Data through your device operating system settings. You may also stop Our collection of location information by following the standard uninstall process to remove Our mobile applications from your device.
Information we collect automatically through Cookies and other tracking technology
A “cookie” is a small text file that is placed onto an Internet user’s web browser or device and which is used to record information related to the navigation or the use of a device or a website.
A “web beacon” is a small object or image that is embedded into a web page, application, or email and is used to track activity. They are also sometimes referred to as pixels and tags (also known as “tracking pixels”). It may be used in Our Services or emails and help deliver cookies, count visits, understand usage and campaign effectiveness and determine whether an email has been opened and acted upon. For more information about cookies, and how to disable them, please see “Your Choices” below.
Some of the cookies are used for the exclusive purpose of enabling or facilitating communication or are strictly necessary for the provision of our online services.
These are essentially of session cookies for authenticating and connecting to our online services, as well as memorizing navigation items during a session.
You have the ability to decline cookies by changing the settings on your browser, but this might prevent you from benefiting from some elements of our online services. You can also consult or destroy cookies if you wish since they are stored on your hard disk.
We may also use these technologies for other purposes than our online service operation such as:
- To improve our online services;
- To remember you, for your convenience, when you use our online services.
Third Party Cookies
When you access or use our online services, one or more cookies from third-party are likely to be placed on your equipment.
We inform you that we have no access and cannot exercise any control over third-party cookies. However, we shall ensure that the partner companies agree to process the information collected on our online services in compliance with the GDPR and undertake to implement appropriate measures for securing and protecting the confidentiality of the Data.
How we use the Data
We may use information about you for the following purposes:
- provide, maintain and improve our services
- provide and deliver the service you request, process transactions and send you related information including confirmations and invoices
- in the case of emergency contact details, to hold and act on that data only where it is warranted to serve the vital interests of one of our clients who has provided your details
- send you technical notices, updates, security alerts and support and administrative messages
- respond to your comments, questions, requests and provide customer service
- monitor and analyse trends, usage and activities in connection with our services
- personalize and improve the services we provide
- to send marketing material if you have given separate consent to do so
- photographs may be taken in order to track the progress of a condition you present with, only with your permission and will be stored on clinic devices only and never shared with third parties
According to the GDPR, each Data processing is performed on one of the following legal basis:
- your consent
- the performance of the service requested by you
How we share your Data
- We share your Data with our online booking system to help us provide our service including bookings, transactions, booking confirmations.
- We share some of your Data with Gmail, in order to provide customer service relating to our business.
- In response to a request for information if we are required by, or believe disclosure is required by, any applicable law, regulation or legal process, including in connection with lawful requests by law enforcement, national security, or other public authorities.
The period of Data retention
If you register on our website, we also store the personal information you provide in your user profile. You can see, edit, your personal information at any time (except changing your username). Website administrators can also see and edit that information.
According to the European GDPR which states that personal data must be kept “no longer than is necessary for the purposes for which the personal data are processed” [Art.5(1)(e)], StudioRA retains all your personal data records:
- for a period of 12 months after your last booked treatment;
- until you tell us to remove it and not beyond 12 months after your last treatment.
If you are a minor, you are forbidden to use our online booking treatment. One of your parents or legal guardian can do it for you. Before the treatment, one of the parents or one of the legal guardian will be asked to fill a form and he/she will be asked to be present during the treatment session to supervise all the interactions between the therapist and the minor.
Upon receiving a request from you in regards to updating Data held by us, we will seek to correct our records at the earliest possible time.
We are committed to taking appropriate measures designed to keep your Data secure. Our technical, administrative and physical procedures are designed to protect Data from loss, theft, misuse and accidental, unlawful or unauthorized access, disclosure, alteration, use and destruction. We follow generally accepted standards to protect the personal information submitted to us, both during transmission and once it is received.
Under the General Data Protection Regulations 2018 (GDPR) individuals have the significantly strengthened rights to:
- obtain details about how their data is processed by an organisation or business;
- obtain copies of personal data that an organisation holds on them;
- have incorrect or incomplete data corrected;
- have their data erased by an organisation, where, for example, the organisation has no legitimate reason for retaining the data;
- obtain their data from an organisation and to have that data transmitted to another organisation (Data Portability);
- object to the processing of their data by an organisation in certain circumstances;
- not to be subject to (with some exceptions) automated decision making, including profiling.
In the event of a Breach
Every precaution will be taken to avoid a breach of your Data, but if such a breach should occur, it will be documented, assessed as to its severity and appropriate action taken. The Data Protection Commissioner will be informed, An Garda Síochána and financial institutions will be contacted for assistance and you will be contacted to help you take steps to mitigate the risks to yourself, if it is deemed a severe enough breach as to put you, your identity, your financial means etc. at risk.