Privacy Policy

Data controller

Martina Di Tonno. Contact: +39 348 086 6711.

Data processed

The site collects personal data through forms only in the two cases described below: online booking and the home coverage check. Contact data (name, phone number, message content) are processed only when the user spontaneously contacts the controller by phone or WhatsApp, in order to handle the appointment request. Health data are collected exclusively at the practice, with explicit consent, for the purposes of osteopathic treatment.

Browsing data

The hosting server (Hostinger) may record technical logs (IP address, date and time, page requested) for security purposes. The site embeds a Google Maps map and Google Fonts typefaces: when they load, the browser communicates with Google's servers, which process data according to their own privacy notice.

Cookies

The site does not use profiling cookies or tracking tools. Any third-party technical cookies (Google Maps) are necessary to display the map.

Online bookings

If you book through the site I collect your first name, surname, email, mobile number, the treatment, the location, the type of visit (first visit or follow-up session) and the chosen time, solely to manage the appointment: confirmation, reminders, any cancellation. The legal basis is the request for a service that you make to me (art. 6.1.b GDPR). I do not ask for, and you must not enter, any information about your health.

Requests that are not confirmed, declined or withdrawn are anonymised after 30 days; appointments 90 days after their date. The data are stored on the hosting server (Hostinger) and emails are sent from an authenticated mail service; they are not used for marketing or passed on to third parties.

Home coverage check

If you ask me to check coverage for hypopressive training sessions at home, I collect your name, address and the contact you provide (phone or email), solely to check the area and reply to you. The legal basis is the request you make to me (art. 6.1.b GDPR). The data are stored on the hosting server (Hostinger), reach me by email and are deleted from the site after 90 days; they are not used for marketing or passed on to third parties.

Instagram content

On the “About me” page, some posts from my Instagram profile load only if you tap “Show the post”: from that moment the browser communicates with the servers of Instagram (Meta), which process data according to their own privacy notice. Before the click the site does not contact Instagram.

Patient area

The patient area is optional: you do not need it to book. After verifying your email with a single-use link, you can view and manage the appointments you recognise as yours. To provide it (art. 6.1.b GDPR) I process your email, an account identifier, the link to your bookings and a small amount of technical access data: the device type in short form (for example “iPhone · Safari”) and the date of last use. Since even an appointment with an osteopath can reveal information about health, these data are processed under my professional responsibility and in compliance with professional secrecy (art. 9.2.h GDPR).

The area does not keep anything more: appointments remain visible only for the periods indicated above (30 days for closed requests, 90 days from the date for appointments) and then disappear from the area as well. You can close the account at any time from the area itself; it closes automatically after 12 months with no sign-ins and no appointments. The area uses only a technical session cookie, no profiling cookies.

Rights of the data subject

You may at any time exercise your rights of access, rectification, erasure, restriction, portability and objection (arts. 15-22 GDPR) by contacting the controller at the details given above. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

Last updated: November 2026