Last updated: June 2026
1. Data Controller
The Data Controller for personal and medical health data is Dr. Marco Paratore, residing in Via Torti 36, Genoa (GE), Italy.
Contact email for privacy-related inquiries: mp@drmarcoparatore.com.
2. Categories of Data Collected
While navigating the website and throughout the provision of clinical services, we collect the following categories of data:
- Standard Personal Data: First name, last name, email address, tax code/fiscal identification, phone number (collected via contact forms, WhatsApp messaging, or during clinical appointment booking).
- Special Categories of Data (Health Data): Information regarding health status, medical and family history, clinical reports, ultrasound findings, and laboratory test results. Such data is collected and processed exclusively with your explicit consent within the doctor-patient relationship.
- Browsing Data: IP addresses and navigation logs, collected in an strictly anonymous form solely to ensure the correct technical functioning of the website.
3. Purposes and Legal Basis for Processing
Your data is processed with the utmost confidentiality, strictly for the following purposes:
- Provision of Medical Services: To carry out diagnostic evaluations, prescribe treatments, and compile your digital medical records and Personal Health File within the Private Patient Portal. Legal basis: explicit consent and medical diagnosis/care necessity (Art. 9 GDPR).
- Organizational Management: To schedule, reschedule, or remind you of clinic appointments. Legal basis: performance of a contract.
- Fiscal and Legal Compliance: For issuing official medical invoices and transmitting data electronically to the Health Card System (Sistema Tessera Sanitaria). Legal basis: legal obligation.
4. Processing Methods and Security (Cloud Ecosystem)
Data processing is carried out using electronic and automated tools with logics strictly related to the stated purposes. The practice adopts advanced technical and organizational security measures. Sensitive medical records and reports are never shared over insecure channels; instead, they are securely stored on encrypted cloud servers (private Google Workspace/Drive infrastructure), accessible solely by Dr. Marco Paratore and yourself via a unique protected link generated during your consultation.
5. Data Retention
Billing data and medical documentation (medical charts, clinical reports) are retained for the time period strictly mandated by current medico-legal and statutory obligations (typically 10 years from the end of the professional relationship). Standard web browsing data is deleted shortly after automated processing.
6. Cookie Policy
This website adopts a "Privacy First" policy. We do not use profiling cookies or invasive advertising tracking tools under any circumstances. Specifically, we use:
- Technical Cookies (Essential): Strictly necessary for the proper operation of the website and to remember your preferences (such as accepting the privacy consent banner).
- Analytics Cookies (Anonymized): Used solely to measure general aggregated site traffic statistics. Your IP address is masked/anonymized at the source, making personal identification impossible.
7. Your Rights (Arts. 15-22 GDPR)
At any time, you hold full rights under European law to:
- Request access to your personal data and obtain a copy thereof.
- Request rectification of inaccurate data or completion of incomplete information.
- Request erasure of your data (right to be forgotten), subject to statutory retention obligations imposed by law for medical and financial records.
- Object to data processing or request restrictions on its processing.
- Request data portability to another specialist physician.
To exercise any of these rights, you may submit a formal request at any time to: mp@drmarcoparatore.com. You also reserve the right to lodge a complaint with the Data Protection Authority (Garante per la Protezione dei Dati Personali) if you believe your rights have been infringed.