Privacy policy under the GDPR
This policy describes the processing of the personal data of Doc On Call users in accordance with Regulation (EU) 2016/679.
Data Controller
This privacy policy is provided by The Health Guard S.r.l. – Società Tra Professionisti, with registered office at Viale Renato Parisano 50, 47921 Rimini, VAT number 04750200406 (hereinafter the “Data Controller”).
For any request concerning the protection of personal data, you may contact the Data Controller at: info@doconcall.it.
Types of Data Collected
To arrange a service, you may provide your name, contact details, city, requested service and organisational information. Any health information later shared with healthcare professionals requires the safeguards applicable to that care.
Do not enter diagnoses, treatments, reports or documents in your initial website message. Staff will explain how to send any records that are needed. This service does not handle emergencies: for immediate danger in Italy call 112.
Browsing involves technical requests to the servers hosting pages and images. These may include IP address, browser, time, requested URL and security information. Website search terms may appear in the results-page URL: do not enter identifying information or medical records in the search.
Purposes of Processing and Legal Basis
Requests and service arrangements. Information needed to respond to your enquiry and arrange the requested service is processed for steps taken at your request before entering into a contract and for its performance (GDPR Article 6(1)(b)). Statutory requirements rely on Article 6(1)(c).
Healthcare. Where the conditions for diagnosis, care or treatment by professionals bound by professional secrecy are met, health-data processing may rely on GDPR Article 9(2)(h) and 9(3). Relevant information and instructions are provided in the care pathway. Cookie choices are not consent to medical treatment or disclosure of health information.
Optional categories. Consent (GDPR Article 6(1)(a) and, where applicable, Article 122 of the Italian Privacy Code) governs statistics, advertising measurement and embedded reviews. Rejection does not prevent browsing or contacting the service. Website contact-conversion events do not contain form fields; they identify only a WhatsApp or telephone click, not a confirmed booking.
Data Retention and Protection
The page forms prepare a message to open in WhatsApp: the page code does not submit these fields to a website database. The message opens in the external service before sending. Subsequent email, messaging and clinical records are handled outside these forms.
Enquiry information is retained as needed to handle and respond to the request and associated obligations or disputes. If care is provided, clinical, administrative and tax records follow the obligations and retention periods applicable to those records. To obtain information relevant to your request, contact info@doconcall.it.
The technical cookie preference expires after six months. Optional storage durations are described below; external services also apply their own policies. Data protection requires appropriate organisational and technical measures, access limited to authorised persons and suitable channels for health records.
Data Disclosure and Sharing
- Netlify: hosts the website and processes technical browsing requests. Netlify privacy notice.
- Wix: some images load from static.wixstatic.com, which involves a technical request to that provider. Wix privacy notice.
- Google: the website loads optional tags in GTM-KC5H2CPF only with advertising-measurement permission. Statistics choices are passed through Consent Mode; collection for Analytics property G-21CSL88Z3R is disabled when that category is rejected. Ad personalisation and enhanced conversions remain disabled. Google privacy notice.
- Elfsight: provides the Google review widget. It is contacted only with Embedded reviews permission and when the section is approached. Its providers may also receive requests for content and images. Elfsight privacy notice.
- WhatsApp and SumUp: open at your request for contact or payment. Their processing is also described by their notices: WhatsApp and SumUp. Do not put medical records in payment notes.
Providers may process data outside the European Economic Area. Any transfers must meet GDPR Chapter V, through an applicable adequacy decision or appropriate safeguards. Contact the Controller for information on recipients and safeguards relevant to the service you request.
Data Subject Rights
Users may exercise the following rights under the GDPR:
- Right of access to their personal data
- Right to rectification of inaccurate or incomplete data
- Right to erasure of personal data, or the right to be forgotten
- Right to restriction of processing
- Right to object to the processing of personal data
- Right to data portability
- Right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal
Requests may be sent to: info@doconcall.it.
You may lodge a complaint with the Italian Data Protection Authority or the competent supervisory authority. Rights apply subject to the conditions and limits set by the GDPR.
Cookies and Tracking Tools
You can accept all optional categories, reject them or choose statistics, advertising measurement and embedded reviews separately. No optional category is preselected. Closing the panel or pressing Escape rejects optional categories. Browsing and scrolling do not constitute consent.
When no valid choice exists, the panel appears after about ten seconds. Google tags and the review widget remain blocked during that time. A valid choice is remembered for six months without repeated prompts on each page. Change it at any time through . The privacy page can be read without an automatic panel.
| Category | Storage and purpose | Duration |
|---|---|---|
| Necessary | doconcall_consent_v1 cookie and localStorage: choices, version and dates, without medical content. The localStorage record has no automatic browser expiry: after six months it is ignored and may remain until replaced or cleared. | 6 months |
| Statistics | Google Analytics: possible _ga and _ga_* storage if collection is enabled and permitted, for site usage. | Standard _ga duration up to 2 years, depending on configuration and browser. |
| Advertising measurement | Google Ads AW-16638557338: possible _gcl_* storage to attribute contact clicks to advertising. | Standard duration up to 90 days, depending on configuration and browser. |
| Embedded reviews | Elfsight widget; the provider documents elfsight_viewed_recently to prevent repeated view counts. | 15 seconds for the documented cookie; other requests depend on content and settings. |
The website loads the Google container only with advertising permission. If rejected, the website code does not load that container or send conversion events. Pre-consent clicks are not queued. Website conversion events do not include form fields, messages or clinical records. The container is not loaded on internal search pages.
Custom tags and non-Google scripts, including Clarity session recording, are excluded from the container by the website code. Withdrawal updates choices and may reload the page to stop external code already running. Accessible first-party cookies in disabled categories are removed; storage on other domains may need removal through browser settings.
The direct Google reviews link remains available without enabling the widget. Opening it leaves this website and is subject to Google's terms. Provider details: Google cookies and Elfsight storage.
Consent to advertising measurement permits Google Ads cookies and the sharing with Google of advertising-related data needed for attribution, including online identifiers and contact-click events. The Consent Mode signals ad_storage and ad_user_data are granted only with this choice; otherwise they remain denied. Ad personalisation (ad_personalization) and enhanced conversions remain disabled. Details: how Google uses your data.
This notice version requests a new choice from visitors who previously accepted advertising measurement. Valid previous rejections remain respected until expiry.
Changes to this Policy
This policy may be updated periodically.
If substantial changes are made, users will be appropriately notified.
Would you like to exercise a GDPR right?
Send your request to the official address of the Data Controller. Specify the right you wish to exercise and the information needed to identify the request.