Skip to content
Prof. Fernando ColaoMEDICO CHIRURGO

Privacy notice

Privacy Policy

Notice pursuant to Regulation (EU) 2016/679 (GDPR) and to Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.

This is a courtesy translation. In the event of any discrepancy, the Italian version prevails.

1. Data controller

Prof. Fernando Colao

2. Data collected and purposes of processing

2.1 Browsing data

In the normal course of operation, the IT systems and software procedures of this website acquire certain personal data whose transmission is implicit in the use of Internet communication protocols: IP addresses, browser type, operating system, pages visited and time of access. These data are processed for aggregate statistical purposes and to ensure the correct functioning of the website. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Retention period: 12 months.

2.2 Data provided voluntarily by the user

Through the contact form, by email or by telephone, users may provide personal data (first name, surname, telephone number, email address and, in some cases, information concerning their health). Such data are processed solely in order to:

  • respond to a request for information or for an appointment;
  • manage the professional doctor–patient relationship;
  • comply with legal obligations.

Legal basis: performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR). For health-related data: explicit consent of the data subject (Art. 9(2)(a) GDPR).

3. Disclosure and dissemination of data

Personal data are not transferred, sold or disclosed to third parties for commercial purposes. They may be disclosed solely:

  • to technical suppliers (hosting, email) acting as Data Processors pursuant to Art. 28 GDPR, under adequate contractual safeguards;
  • to the competent authorities, where required by law or by order of the judicial authority.

4. Transfers to third countries

Data are not transferred to non-EU third countries, save for any use of cloud services with servers in countries deemed adequate pursuant to Art. 45 GDPR or subject to appropriate safeguards (standard contractual clauses, Art. 46 GDPR).

5. Data retention

Data are kept for the time strictly necessary for the purposes for which they were collected, and in any case in compliance with applicable legal obligations (for example the rules on medical records, Legislative Decree 196/2003). Contact details provided for general enquiries are erased within 24 months of the last interaction.

6. Rights of the data subject

As a data subject, you have the right to:

  • Access (Art. 15 GDPR): obtain confirmation of the processing and a copy of the data;
  • Rectification (Art. 16): correct inaccurate or incomplete data;
  • Erasure (Art. 17): obtain erasure of the data (“right to be forgotten”);
  • Restriction (Art. 18): restrict the processing in certain cases;
  • Portability (Art. 20): receive the data in a structured, machine-readable format;
  • Objection (Art. 21): object to processing based on legitimate interest.

To exercise these rights, write to: info@fernandocolao.it. The controller will reply within 30 days. If the reply is unsatisfactory, a complaint may be lodged with the Italian Data Protection Authority — Garante per la protezione dei dati personali (www.garanteprivacy.it).

7. Cookies

For detailed information on the cookies used, please see the Cookie Policy.

Last updated: May 2026