Patient privacy notice

Who processes your data

The data controller is me, Dott.ssa Sara Fedeli, physiotherapist registered with the Ordine interprovinciale dei Fisioterapisti di Belluno, Treviso, Vicenza e Verona, no. 3045, Italian VAT number (P.IVA) 05024400235.

I see patients by appointment at Via Ospital Vecchio 28B, 37045 Porto di Legnago, Legnago (VR), and I also make home visits.

You can write to me at sara.fedeli00@gmail.com or by certified email (PEC) at sara.fedeli@pec.fnofi.it, or call me on +39 349 727 6065.

What data I collect

Health data is a special category (art. 9 GDPR): I only process it to treat you, under professional secrecy. I collect only what I need:

• personal and contact details: name, surname, date of birth, tax code, your address if I come to your home, phone, email;
• health data: why you come to see me, your medical history, the tests and reports you bring, the assessments and treatments in each session;
• the details needed for invoices.

Why I process it and on what basis

Without this data I can’t treat you, so it isn’t optional; I don’t use it for advertising and I don’t sell it. I use it for three reasons, each with its own legal basis:

• to assess and treat you: this is healthcare, art. 9(2)(h) GDPR, under professional secrecy;
• to manage our relationship, including appointments: art. 6(1)(b) (performance of a contract);
• for tax and legal obligations, such as invoices: art. 6(1)(c).

Who sees your data

Your data stays with me, and I don’t share health data with anyone without your consent unless the law requires it. It can be seen, only as far as needed, by:

• the accountant who keeps my books, for invoices;
• the Italian health expenses system (Sistema Tessera Sanitaria), to which I send your healthcare expenses for your pre-⁠filled tax return, unless you object;
• the providers of the services I use for work, such as email, who process data on my behalf.

How long I keep it

I keep data only as long as necessary:

• clinical records: 10 years after the last session;
• tax documents: as long as the law requires, usually 10 years;
• contact details needed only for appointments: while we keep seeing each other, then I delete them, unless you want to stay in touch.

Your rights

At any time you can ask me to:

• see your data and have a copy;
• correct anything wrong or incomplete;
• delete it, within the limits of the retention obligations;
• restrict its use or object, where the law allows;
• receive it in a readable format, to take it to another professional.

How to exercise them

Just write to me or ask me in person: I’ll reply within a month.

If you think I am handling your data unfairly, you can contact the Italian data protection authority, the Garante per la protezione dei dati personali.