24/7 medical service • Home visits in Rome and Rimini · Telemedicine across Italy Call now
Regulation (EU) 2016/679

Privacy policy.

How The Health Guard S.r.l. – Società tra Professionisti collects, uses and protects the personal data of Doc On Call users.

Last updated: 18 October 2026GDPR privacy policy
Identification dataFirst name, surname and email
Health dataRequired for booking
Cookies and browsingGoogle Analytics and Ads
GDPR rightsAccess, rectification and erasure
Privacy policy text

Privacy policy under the GDPR

This policy describes the processing of the personal data of Doc On Call users in accordance with Regulation (EU) 2016/679.

01

Data Controller

This privacy policy is provided by The Health Guard S.r.l. – Società Tra Professionisti, with registered office at Viale Renato Parisano 50, 47921 Rimini, VAT number 04750200406 (hereinafter the “Data Controller”).

For any request concerning the protection of personal data, you may contact the Data Controller at: info@doconcall.it.

02

Types of Data Collected

To arrange a service, you may provide your name, contact details, city, requested service and organisational information. Any health information later shared with healthcare professionals requires the safeguards applicable to that care.

Do not enter diagnoses, treatments, reports or documents in your initial website message. Staff will explain how to send any records that are needed. This service does not handle emergencies: for immediate danger in Italy call 112.

Browsing involves technical requests to the servers hosting pages and images. These may include IP address, browser, time, requested URL and security information. Website search terms may appear in the results-page URL: do not enter identifying information or medical records in the search.

03

Purposes of Processing and Legal Basis

Requests and service arrangements. Information needed to respond to your enquiry and arrange the requested service is processed for steps taken at your request before entering into a contract and for its performance (GDPR Article 6(1)(b)). Statutory requirements rely on Article 6(1)(c).

Healthcare. Where the conditions for diagnosis, care or treatment by professionals bound by professional secrecy are met, health-data processing may rely on GDPR Article 9(2)(h) and 9(3). Relevant information and instructions are provided in the care pathway. Cookie choices are not consent to medical treatment or disclosure of health information.

Optional categories. Consent (GDPR Article 6(1)(a) and, where applicable, Article 122 of the Italian Privacy Code) governs statistics, advertising measurement and embedded reviews. Rejection does not prevent browsing or contacting the service. Website contact-conversion events do not contain form fields; they identify only a WhatsApp or telephone click, not a confirmed booking.

04

Data Retention and Protection

The page forms prepare a message to open in WhatsApp: the page code does not submit these fields to a website database. The message opens in the external service before sending. Subsequent email, messaging and clinical records are handled outside these forms.

Enquiry information is retained as needed to handle and respond to the request and associated obligations or disputes. If care is provided, clinical, administrative and tax records follow the obligations and retention periods applicable to those records. To obtain information relevant to your request, contact info@doconcall.it.

The technical cookie preference expires after six months. Optional storage durations are described below; external services also apply their own policies. Data protection requires appropriate organisational and technical measures, access limited to authorised persons and suitable channels for health records.

05

Data Disclosure and Sharing

  • Netlify: hosts the website and processes technical browsing requests. Netlify privacy notice.
  • Wix: some images load from static.wixstatic.com, which involves a technical request to that provider. Wix privacy notice.
  • Google: the website loads optional tags in GTM-KC5H2CPF only with advertising-measurement permission. Statistics choices are passed through Consent Mode; collection for Analytics property G-21CSL88Z3R is disabled when that category is rejected. Ad personalisation and enhanced conversions remain disabled. Google privacy notice.
  • Elfsight: provides the Google review widget. It is contacted only with Embedded reviews permission and when the section is approached. Its providers may also receive requests for content and images. Elfsight privacy notice.
  • WhatsApp and SumUp: open at your request for contact or payment. Their processing is also described by their notices: WhatsApp and SumUp. Do not put medical records in payment notes.

Providers may process data outside the European Economic Area. Any transfers must meet GDPR Chapter V, through an applicable adequacy decision or appropriate safeguards. Contact the Controller for information on recipients and safeguards relevant to the service you request.

06

Data Subject Rights

Users may exercise the following rights under the GDPR:

  • Right of access to their personal data
  • Right to rectification of inaccurate or incomplete data
  • Right to erasure of personal data, or the right to be forgotten
  • Right to restriction of processing
  • Right to object to the processing of personal data
  • Right to data portability
  • Right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal

Requests may be sent to: info@doconcall.it.

You may lodge a complaint with the Italian Data Protection Authority or the competent supervisory authority. Rights apply subject to the conditions and limits set by the GDPR.

08

Changes to this Policy

This policy may be updated periodically.

If substantial changes are made, users will be appropriately notified.

Last published updateThe date is also shown at the beginning of this policy.

Would you like to exercise a GDPR right?

Send your request to the official address of the Data Controller. Specify the right you wish to exercise and the information needed to identify the request.

GDPR request