Privacy Policy
Last updated:
Introduction
This document explains how the personal data of people who visit this website, and of those who get in touch through the channels listed here, is handled. The site presents Presenza, a service that builds websites and manages social media presence for psychologists and psychotherapists.
This notice is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (the «GDPR») and to Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018. It covers this website and the contacts arising from it only: it does not extend to any other sites reachable through links, which remain governed by their own notices.
The text is written to be readable without technical or legal knowledge. If anything is unclear, you can ask for an explanation using the contact described in the next section.
Data controller
Data collected through this website is processed by Presenza, the service described in these pages.
For any request concerning your personal data — information, clarification, or exercising the rights described below — you can write through the WhatsApp contact available on the site: it is the reference channel for these communications, and requests are handled with the same care given to consultancy enquiries. It helps to state what your request refers to (for example a booking you made, or a conversation that already took place), so that it can be dealt with properly.
No Data Protection Officer has been appointed, as none of the circumstances set out in Article 37 of the GDPR applies.
What data is collected
Contact details you provide voluntarily
When you book the introductory call through the Calendly widget embedded in the site, the following are collected: your name, your email address, the date and time of the appointment, and any information you choose to add in the notes field of the booking. If you write via WhatsApp, your phone number, profile name and the content of the messages you send are processed.
Providing this data is optional, but it is necessary in order to reply: without a contact detail it is simply not possible to get back to you or to arrange an appointment.
Browsing data and cookies
As happens on any website, the computer systems and software procedures that make this site work acquire, during normal operation, some data whose transmission is implicit in the use of internet communication protocols: for example the IP address, the browser and device type, the operating system, the time of the request and the pages visited. This data is not collected in order to be associated with identified users, but by its very nature it could allow identification through processing and matching with data held by third parties.
The use of cookies and tracking tools is described in detail in the Cookie Policy, which forms an integral part of this notice.
Aggregate statistical data
If — and only if — you give your consent through the cookie banner, the site uses Google Analytics 4 to produce aggregate statistics about browsing: number of visits, most-read pages, general traffic sources, device type. This information is used to understand what works on the site and what needs improving, not to identify individual people. Without consent these tools are not activated and no statistical data is collected.
Purposes of processing and legal bases
The data collected is processed for the following purposes, each with its own legal basis:
- Replying to enquiries, arranging and delivering the introductory call and any consultancy service. The legal basis is the performance of pre-contractual measures taken at your request and, if the relationship continues, the performance of the contract (Article 6(1)(b) GDPR).
- Statistical analysis of how the site is used through Google Analytics 4. The legal basis is your consent, given through the cookie banner and withdrawable at any time (Article 6(1)(a) GDPR).
- Marketing activity and measurement of advertising campaigns through the Meta Pixel, where that tool is active on the site. Here too the legal basis is your consent, given through the banner and freely withdrawable (Article 6(1)(a) GDPR).
- Operation and security of the site, including the technical records needed to detect malfunctions or attempted abuse. The legal basis is the legitimate interest in providing a working and secure service (Article 6(1)(f) GDPR).
- Compliance with legal obligations, for example of a tax or accounting nature, where the relationship turns into an actual engagement (Article 6(1)(c) GDPR).
Where consent is required it is always optional: refusing it in no way affects your ability to browse the site or to request information.
Third-party tools and recipients
Some services provided by third parties are used to run the site and manage contacts, and those parties may come to know the data needed to deliver their respective functions. These providers process data either as data processors or as independent controllers, depending on the role they take in each service.
- Calendly — handles the booking of the introductory call. It receives your name, email address, the time slot chosen and any notes you enter. The provider also operates through servers located outside the European Union. Notice: calendly.com/legal/privacy-notice.
- Meta — provides WhatsApp, used as a direct contact channel, and the measurement Pixel where it is active on the site. In the case of WhatsApp, messages travel over the provider's infrastructure under its own terms of service. Notices: whatsapp.com/legal/privacy-policy and facebook.com/privacy/policy.
- Google — provides Google Analytics 4 for aggregate statistics, active only after consent, and the web fonts used to render the typography of these pages. Notice: policies.google.com/privacy.
- Netlify — hosts the site and delivers its pages to visitors, processing the technical connection data needed for that purpose.
Some of these providers are based, or run infrastructure, outside the European Economic Area. In those cases the transfer takes place on the basis of the safeguards set out in Chapter V of the GDPR: European Commission adequacy decisions, where applicable, or standard contractual clauses together with the supplementary measures adopted by the providers themselves. You can ask for further detail on the safeguards applied using the contact described above.
Data is not disseminated, sold or transferred to third parties for purposes other than those described, and it is not subject to automated decision-making or profiling producing legal effects concerning you.
Retention period
Contact details are kept for as long as necessary to handle the enquiry and to complete any professional relationship that follows from it. If an initial contact leads to no engagement, the data is kept for the period reasonably useful to follow up on the conversation and is then deleted. Where the relationship does turn into an actual engagement, the related documentation is kept for the period required by legal obligations, in particular tax and accounting ones.
Data collected for statistical purposes is kept according to the retention period configured in Google Analytics 4, at the end of which it is automatically deleted by the platform. The lifetime of individual cookies is set out in the Cookie Policy.
You may at any time ask for your data to be deleted early, subject to the retention obligations imposed by law.
Your rights
In relation to the data concerning you, Articles 15 to 22 of the GDPR give you the right to:
- access the data and obtain a copy of it, learning which information is processed and for which purposes;
- rectify inaccurate data and complete incomplete data;
- obtain erasure of the data, where no overriding legitimate grounds or retention obligations apply;
- obtain restriction of processing in the cases set out in Article 18;
- object to processing based on legitimate interest, on grounds relating to your particular situation;
- receive the data you provided in a structured, commonly used format and transmit it to another controller (portability);
- withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before the withdrawal.
To exercise these rights it is enough to make a request through the WhatsApp contact available on the site, stating which right you intend to exercise. Requests are dealt with without undue delay and in any case within one month, a deadline that may be extended in the cases set out in Article 12 of the GDPR. Exercising your rights is free of charge.
As regards cookies, consent can be changed or withdrawn at any time through the «Cookie settings» link in the footer of every page.
If you believe that the processing of your data infringes the applicable rules, you also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), following the procedures set out at garanteprivacy.it, or to bring the matter before the courts.
An important note about health data
The contact channels on this site — the call booking form and WhatsApp — exist to arrange a first professional conversation about digital communication. Do not enter clinical information, diagnoses, health data or other special categories of personal data within the meaning of Article 9 of the GDPR into these channels, whether your own or belonging to other people, including your patients.
These tools are neither designed nor intended for processing sensitive data, and they do not offer the safeguards that such processing would require. General information about your professional activity is enough to describe what you need: if a project turns out to require the processing of special categories of data, the related arrangements will be defined separately and with appropriate tools.
Security
Reasonable technical and organisational measures are in place to protect data against unauthorised access, loss or disclosure: the site is served exclusively over an encrypted HTTPS connection, access to the tools in use is protected by personal credentials, and data is made available only to those who genuinely need to process it for the purposes described. No system, however, can be considered absolutely secure, and this notice does not guarantee a level of security higher than what can reasonably be achieved.
Changes to this notice
This notice may be updated to reflect changes in the services used, in the applicable rules, or in the way data is processed. The version published on this page is always the one in force and shows the date of the last update at the top. Where substantial changes affect processing based on consent, you will be asked to express your choice again.