Privacy Policy
Information on the processing of personal data pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR) and Legislative Decree 196/2003 (Privacy Code).
Last update: February 21, 2026
1. Data Controller
Biotech Balance di Anna Danchenko
Registered office: Via Fracia 14/A, 23030 Chiuro (SO)
Operating office: Via Manzoni 22, 23037 Tirano (SO)
VAT number: 01017180140
Email: info@biotechbalance.it
Phone: +39 351 756 1880
2. Types of Data Collected
2.1 Data voluntarily provided by the user
Through the contact form, appointment booking, or direct communication (email, phone, WhatsApp), we may collect:
| Category | Examples | Mandatory |
|---|---|---|
| Identification data | Name, surname | Yes |
| Contact data | Email, phone | Yes |
| Health-related data | Symptoms, conditions, medical records (only if provided voluntarily) | No |
2.2 Data collected automatically
The computer systems and software procedures of this website may acquire data in the normal course of their operation, whose transmission is implicit in the use of Internet communication protocols (e.g., IP addresses, browser type, operating system). Such data are processed only in anonymous and aggregated form through cookies, with prior user consent. For more information, consult our Cookie Policy.
3. Purposes and Legal Basis for Processing
| Purpose | Legal basis | Storage |
|---|---|---|
| Responding to information requests and appointment bookings | User consent (Art. 6.1.a GDPR) | 12 months from request |
| Provision of services and treatments | Execution of a contract (Art. 6.1.b GDPR) | 10 years (tax obligations) |
| Compliance with legal obligations (e.g., billing) | Legal obligation (Art. 6.1.c GDPR) | 10 years |
| Anonymous statistical analysis of web traffic | User consent (Art. 6.1.a GDPR) | 26 months (Google Analytics) |
| Processing of health data | Explicit consent (Art. 9.2.a GDPR) | According to health regulations |
4. Data Communication and Transfer
Personal data are not disclosed or sold to third parties. They may be communicated to:
- Providers of hosting and website maintenance services (Netlify, Inc. — data stored in EU/USA with adequate safeguards)
- Google LLC, for analytics services (Google Analytics), with prior consent
- Professionals and consultants for tax and accounting compliance
- Competent authorities, when required by law
Data processed by Google are subject to Google's Data Processing Agreement and the EU-US Data Privacy Framework.
5. Data Subject Rights
Pursuant to Articles 15-22 of the GDPR, the user has the right to:
- Access (Art. 15) — obtain confirmation of the existence of processing and access your data
- Rectification (Art. 16) — obtain correction of inaccurate data
- Erasure (Art. 17) — obtain deletion of data ("right to be forgotten")
- Restriction (Art. 18) — obtain limitation of processing
- Portability (Art. 20) — receive data in a structured, machine-readable format
- Objection (Art. 21) — object to processing of data
- Withdraw consent (Art. 7) — withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal
To exercise your rights, send a request to info@biotechbalance.it. We will respond within 30 days.
6. Right to Lodge a Complaint
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the Data Protection Authority:
Italian Data Protection Authority
Piazza Venezia 11, 00187 Rome
Website: www.garanteprivacy.it
Email: protocollo@gpdp.it
7. Cookies
For detailed information on cookie usage, consult our Cookie Policy.
8. Changes to Privacy Policy
The Data Controller reserves the right to make changes to this Privacy Policy at any time. In case of substantial modifications, adequate notice will be given through the website. We invite you to regularly consult this page to stay updated on the latest information.