Vai al contenuto principale

Legal

Privacy Policy

This policy describes, in plain language, what personal information the Customize Medical website collects, why it is processed and what choices you have. It covers the public website only.

Data di entrata in vigore
[EFFECTIVE DATE]
Ultima revisione
[LAST REVIEWED DATE]
Versione del documento
Draft 0.1
Stato
Bozza in revisione legale
Contattaci

Bozza preliminare. Questo documento è una bozza preliminare dei contenuti. Deve essere esaminato e approvato da professionisti qualificati in materia legale, di protezione dei dati, regolatoria e commerciale prima della pubblicazione. Il testo tra parentesi quadre indica informazioni ancora da verificare e completare.

Scope of this policy

This policy explains how Customize Medical handles personal information collected through this public website. It applies to the public pages, the contact routes and the professional project request forms published on this domain.

  • Website visitors browsing public content
  • General inquiries sent through the contact page
  • Medical professional consultations
  • Dental professional consultations
  • B2B and institutional inquiries
  • Research collaboration inquiries
  • Professional order requests submitted through Orders Aesthetics and Orders All-on-One

Newsletter subscriptions, marketing communications and website analytics are covered by this policy only if and when those features are actually implemented on the website. They are not described here as active features.

This website is not a clinical repository

The public website is not an approved repository for patient records, clinical files or diagnostic imaging. Do not use the public forms to transmit identifiable health information.

Who is responsible for your information

The organization responsible for the processing described in this policy is [LEGAL ENTITY], registered at [REGISTERED ADDRESS], registration number [REGISTRATION NUMBER].

Privacy questions can be addressed to [PRIVACY CONTACT]. If a data protection officer is appointed, the contact details will be published here: [DATA PROTECTION OFFICER].

Until these details are confirmed, please use the contact page and select the regulatory or general route.

Information that may be collected

The website collects only the information you choose to provide in a form, together with limited technical data required to operate and protect the site.

Information you provide

  • Name
  • Organization or institution
  • Professional role
  • Professional registration information, where the form requests it
  • Work email address
  • Telephone number, where provided
  • Country and city
  • Inquiry category or request route
  • General, non-clinical project information
  • The content of your message

Technical information

  • Standard connection data processed by the hosting infrastructure, such as an IP address and browser information
  • Cookie and storage preferences, as described in the Cookie Policy

Clinical file uploads are not collected through this website. The professional order forms record only a declaration of which files exist. If a secure and approved clinical intake system is implemented in the future, its handling of uploaded files will be described in a separate notice.

Sensitive and clinical information

Please do not submit the following

  • Patient names or other identifiers
  • Medical histories
  • Health records
  • Case identifiers
  • CT scans
  • Dental scans
  • Clinical photographs
  • Diagnostic files
  • Prescriptions
  • Any other identifiable health information

Ordinary public forms are not designed for special categories of personal data. If such information is submitted, it may be deleted without being processed further.

Should a secure clinical intake process be introduced, its privacy terms will separately address legal basis, professional authorization, patient consent, storage location, access control, encryption, audit records, retention, deletion, processors, international transfers and incident response.

Why information is processed

Information submitted through the website may be processed for the following purposes, limited to the functionality that the website actually provides.

  • Responding to inquiries received through the contact routes
  • Assessing professional project requests at a preliminary level
  • Routing a request to the appropriate internal team
  • Communicating about services, capabilities and next steps
  • Managing professional and institutional relationships
  • Operating, maintaining and protecting the website
  • Preventing misuse, fraud and abusive submissions
  • Meeting applicable legal obligations
  • Recording and honouring consent preferences

Sharing and service providers

Personal information may be shared with service providers or professional advisers only where it is necessary to operate the website, respond to a request or comply with the law. Providers are not named in this document until each relationship has been verified and contractually documented.

Approved processor list

  • Hosting and infrastructure: [PROCESSOR]
  • Email and communication: [PROCESSOR]
  • Form and request handling: [PROCESSOR]
  • Analytics, if implemented: [PROCESSOR]
  • International transfers and safeguards: [TRANSFER MECHANISM]

Information is not sold. It is not shared for advertising purposes.

How long information is kept

Retention periods are not stated as fixed values in this draft. Approved periods must be defined before publication and will take into account the following factors.

  • The type of inquiry received
  • The stage of the project or relationship
  • Applicable legal obligations
  • Contractual requirements
  • Security and abuse prevention needs
  • The status of any consent given

Approved periods will be published here: [RETENTION SCHEDULE].

Your rights

Depending on the jurisdiction that applies to your information, you may be able to exercise the following rights.

  • Access to the personal information held about you
  • Correction of inaccurate or incomplete information
  • Deletion of information, within legal limits
  • Restriction of certain processing
  • Objection to processing based on legitimate interests
  • Portability of information you provided
  • Withdrawal of consent, without affecting processing carried out before withdrawal
  • Complaint to the competent supervisory authority

The competent supervisory authority will be identified once the responsible legal entity and jurisdiction are confirmed: [DATA PROTECTION AUTHORITY]. Requests can be submitted to [PRIVACY CONTACT].

Security

Customize Medical applies organizational and technical measures intended to protect information submitted through the website, including access limitation and separation of public website functions from internal project work.

No absolute guarantee

No website, transmission method or storage system can be considered completely secure. Nothing in this document should be read as a guarantee of absolute security, encryption or regulatory compliance for any specific feature. Encryption, certification and compliance claims will only be published where they are formally documented.

Children

The website is directed to healthcare and dental professionals, institutions, industrial partners and adults seeking general information. Professional ordering flows are not designed for or directed to minors, and they must be used only by authorized professionals.

Updates to this policy

This policy may be updated as the website, its features and the applicable legal requirements change. The effective date, review date and document version shown at the top of this page indicate the current status of the document.

Where a change materially affects how personal information is handled, the change will be communicated through the website and, where appropriate, directly to the professional contacts concerned.

Contact

Verified contact details are pending confirmation. Until they are published here, privacy questions can be sent through the contact page using the regulatory or general route.

  • Legal entity: [LEGAL ENTITY]
  • Registered address: [REGISTERED ADDRESS]
  • Privacy contact: [PRIVACY CONTACT]

Please do not include patient identifiable information in any message sent through the website.