Privacy policy

The data controller is me, Dr. Luca Mottaran, physiotherapist. For questions about this policy or to exercise your rights, you can reach me using the details below.

To show you the pages, your browser sends some technical data to the server hosting the site: your IP address, browser type, the page requested, and the date and time. The site cannot work without this exchange.

The site is hosted on GitHub Pages, a service of GitHub, Inc., a company based in the United States. According to GitHub's documentation, the IP address of anyone visiting a site published on GitHub Pages is logged and stored for security purposes. GitHub processes this data under its own privacy statement and decides how long to keep it. I have no access to these logs and do not use them.

The legal basis is the legitimate interest in keeping the site available and protecting it from abuse (Article 6(1)(f) GDPR).

The form in the Contact section does not send data to any server, and the site keeps no copy of it. When you press Send Message, your browser puts together a text with your name, email, phone number (if you give it) and message, then opens WhatsApp with that text already written. You can edit or delete it: it only reaches me if you choose to send it. The other WhatsApp buttons on the site work the same way, simply opening a chat with a message already written.

If you message me on WhatsApp, I receive what you send, your phone number and, depending on your settings, your profile name and photo. I use this data only to reply and to arrange an appointment if you want one. The legal basis is taking steps at your request before a possible treatment agreement (Article 6(1)(b) GDPR).

WhatsApp is a service of WhatsApp Ireland Limited, which processes your account data and data about your use of the app under its own privacy policy. Message content is protected by end to end encryption.

If you email or call me, I process your email address or phone number, your name and what you tell me, to reply and to arrange an appointment if you want one. Here too the legal basis is taking steps at your request before a possible treatment agreement (Article 6(1)(b) GDPR).

My mailbox is a Gmail account, a service provided by Google Ireland Limited, which processes data under its own privacy policy.

When you get in touch you may mention why, for example pain or an injury. This is health data, which the GDPR protects with particular care (Article 9). I use it only to understand your request and arrange the first visit, as a healthcare professional bound by professional secrecy (Article 9(2)(h) and 9(3) GDPR).

A short description is enough to book an appointment: we go through reports, scans and clinical details together during the visit.

The site links to Google Maps for directions, to Instagram and to LinkedIn. None of these services is loaded inside the site's pages: there are no embedded maps, social buttons or third party content. If you click one of these links you leave the site, and the privacy policy of the service you open applies from then on.

The site uses no cookies, neither technical nor profiling ones, and stores nothing in your browser. It uses no analytics, pixels or other tools that recognise you from one visit to the next. Fonts and images are hosted with the site, so your browser does not contact any third party service while you browse.

That is why there is no cookie banner: under the Italian Data Protection Authority's guidelines of 10 June 2021, a banner is only needed when a site uses cookies or tools other than technical ones. If I ever add tools of that kind, I will update this policy and, where the law requires it, ask for your consent before turning them on.

I do not sell, share or publish your data, and I do not use it for advertising or newsletters. It may be processed by the providers of the services described above (GitHub for hosting, WhatsApp and Google for messages), each for its own service, and by public authorities where the law requires it.

I make no decisions based solely on automated processing and do no profiling.

GitHub is based in the United States, and Google and WhatsApp may also process data outside the European Economic Area. GitHub states that it participates in the Data Privacy Framework between the European Union and the United States, which the European Commission found adequate in its decision of 10 July 2023 (Article 45 GDPR). For Google and WhatsApp, the safeguards described in their own privacy policies apply.

No. You can browse the site without providing any data. To contact me I need at least a way to reach you and the reason for your request, otherwise I cannot reply. The phone field in the form is optional.

In the cases and within the limits set by Articles 15 to 22 GDPR, you can ask me at any time to:

To exercise your rights, write to me at the email address above. I will reply within one month, as Article 12 GDPR requires. For the browsing data logged by GitHub, which I cannot access, you can also contact GitHub directly.

If you believe the processing of your data breaches the GDPR, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome) or with the supervisory authority of the EU country where you live or work, or go to court (Articles 77 and 79 GDPR).

I update this page when the site, the services I use or the law change. The date of the latest update is always shown at the top.