Information under EU Regulation 2016/679
Privacy and cookie policy
This page explains what data we use, why, for how long and the choices available to you.
Last updated: 8 September 2026
1. Data controller
The controller of data relating to this website and requests addressed to BeFysio is BEFYSIO STP S.r.l — VAT 14453220965.
Contact: info@befysio.com, +39 351 689 4141. Clinic: Via Ausonio 26, Milan.
2. Data we process
- Technical navigation and security logs, including IP address, date, browser and requested URLs.
- Name, email, optional phone number, topic and message sent through the form or other contact channels.
- Booking details entered in the BeeBeeBoard calendar.
- Health information only when necessary for care or voluntarily provided. Please do not send unnecessary clinical documents through the form.
- Your privacy preferences stored in the browser.
3. Purposes, legal bases and retention
We process enquiries and appointment requests under Article 6(1)(b) GDPR, generally retaining them for up to 24 months; healthcare data under Article 9(2)(h) and applicable professional duties; accounting and legal records under Articles 6(1)(c) and 6(1)(f), normally for 10 years or the relevant limitation period; technical logs for security under Article 6(1)(f), normally no longer than 30 days; and optional external content or future marketing only with consent under Article 6(1)(a). Consent preferences expire after no more than six months.
4. Security and automated decisions
We apply appropriate technical and organisational safeguards. The website does not make solely automated healthcare decisions and does not profile health data.
5. Recipients and suppliers
Authorised staff and selected providers may process data for hosting, CDN and security, transactional email delivery, BeeBeeBoard booking, Google Analytics measurement after consent, technical maintenance and professional advice. Google Maps loads only after functional consent. Data is not made public.
6. International transfers
Where a provider processes data outside the EEA, transfers rely on an adequacy decision, European Commission Standard Contractual Clauses or another safeguard under Articles 44–49 GDPR.
7. Cookies and similar technologies
The necessary local-storage key befysio-consent-v1 records your choice. Google Analytics loads only after analytics consent and measures aggregate page visits and interactions such as telephone, WhatsApp, map, review and booking clicks. BeeBeeBoard and Google Maps remain blocked until you allow functional content and may then use their own technologies. Meta Pixel loads only when configured and after marketing consent. You can change or withdraw your choice at any time through “Cookie settings” in the footer.
8. Your rights
You may request access, correction, erasure, restriction, objection, portability and withdrawal of consent under Articles 15–22 GDPR by emailing info@befysio.com. You may also complain to the Italian Data Protection Authority or your competent authority.
9. Children and external links
The form is not intended for autonomous use by children. A person with parental responsibility should manage requests concerning a minor. External sites apply their own privacy notices.
10. Updates
We may update this notice after legal, organisational or technical changes. The date above identifies the latest version.
