Privacy and Cookie Policy
Information on the processing of personal data pursuant to Regulation EU 2016/679 (GDPR) and UK GDPR.
Data Controller
Dr. Giuseppe Pierpaolo Merola
Psychiatrist and Psychotherapist
What Data We Collect
1. Data you provide voluntarily
When you contact us via the contact form or WhatsApp, we collect:
- First and last name
- Email address
- Phone number (if provided)
- Message content
2. Data collected automatically
During browsing, with your consent, we collect:
- IP address (anonymised)
- Browser and device type
- Pages visited and visit duration
- Referral source (e.g. search engine)
Why and How We Use Your Data
| Purpose | Legal Basis | Retention |
|---|---|---|
| Responding to contact requests | Contractual performance / Legitimate interest | Until request completion + 2 years |
| Booking appointments | Contractual performance | 10 years (healthcare legal obligations) |
| Anonymous statistical analysis | Explicit consent | 26 months |
| Website improvement | Explicit consent | 26 months |
Cookie Policy
Cookies are small text files that websites save on your device to remember your preferences and improve your browsing experience.
Technical Cookies (Always active)
Necessary for the website to function. They do not require consent.
| Name | Purpose | Duration |
|---|---|---|
cookieConsent |
Stores your cookie preference | 1 year |
Analytics Cookies (Require consent)
We use Google Analytics to understand how visitors use the site. These cookies are activated only after your explicit consent.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga |
Distinguishes users | 2 years | |
_ga_* |
Maintains session state | 2 years |
Your Rights
Under EU GDPR and UK GDPR, you have the right to:
Access
Request a copy of your personal data
Rectification
Correct inaccurate or incomplete data
Erasure
Request deletion of your data ("right to be forgotten")
Restriction
Limit the processing of your data
Portability
Receive your data in a readable format
Objection
Object to processing for direct marketing
To exercise your rights, contact me at: dr.merola@gpmerola.it
International Transfers
Some data may be transferred to service providers located outside the European Economic Area (EEA), particularly:
- Google LLC (USA): For analytics services. Google adheres to the EU-US Data Privacy Framework.
- Formspree (USA): For contact form management.
These transfers are based on Standard Contractual Clauses approved by the European Commission.
Supervisory Authorities
If you believe that the processing of your data violates the regulations, you can lodge a complaint with:
Updates
This policy may be updated periodically. We encourage you to review it regularly.
Last updated: January 2026