Psikokoro.com privacy policy

I am hereby informed on the following information concerning the treatment of personal information, according to EU Regulation 2016/679 ("GDPR") and Italian Legislative Decree 101/2018:

1. The GDPR and Italian Legislative Decree 101/2018 provide for and strengthen the protection and processing of personal data according to the principles of correctness, lawfulness, transparency, protection of confidentiality and the data rights of individuals.
2. Doctor Rebecca Farusi is the Data Controller of the following data collected for the purposes of this contract:
   1. personal, contact and payment data: information relating to the name, telephone number, PEO and PEC addresses, as well as information relating to the payment of fees (e.g. credit / debit card numbers) and any other data or information concerning an identified or identifiable natural person;
   2. data relating to the state of health: information relating specifically to physical or mental health (or any other data or information referred to by articles 9 and 10 of the GDPR and by article 2 - septies of Legislative Decree 101/2018) are collected directly as a result of requests for evaluations, examinations, diagnostic tests, rehabilitation interventions and any other type of professional service involved in the execution of the psychologist's duties.
3. The data referred to in items a) and b) above are personal data.
4. The considerations / evaluations / professional interpretations that are converted into data by the psychologist constitute the set of professional data, which are processed according to the GDPR principles and are managed in accordance with the provisions of the Code of Ethics of Italian Psychologists ("CE") ;
5. The processing of all the aforementioned data is performed on the basis of the free, specific and informed consent of the patient / client, and in order to execute those tasks assigned by the patient / client to the psychologist.
6. Personal data will be subjected to both paper and electronic / automated processing methods, which may involve both manual and computerized methods.
7. Adequate security measures will be enforced in order to ensure the protection, security, integrity, and accessibility of personal data, within the constraints of current regulations and professional secrecy.
8. Personal data that are no longer necessary, or for which there is no longer a legal prerequisite for conservation, will be irreversibly anonymised or destroyed in a secure manner.
9. Personal data will be stored only for the time necessary to achieve the purposes for which they were collected, namely:
   1. personal, contact and payment data: these are kept for the time necessary to manage contractual / accounting obligations, and therefore for a period of 10 years;
   2. data relating to the state of health: will be kept for the time necessary for the execution of duties and to pursue the purposes thereof, and in any case for a minimum period of 5 years (article 17 CE) and no more than the retention period for personal and payment data.
10. Personal data may have to be made accessible to health and / or judicial authorities on the basis of specific legal duties. In all other cases, any communication may take place only with explicit consent, and in particular:
    1. personal, contact and payment data: these may also be accessible to any partners, as well as to external suppliers who assist in the provision of services;
    2. data relating to the state of health: will be disclosed in principle only to the interested party, and to third parties only in the presence of written consent (Article 12 of the Italian Civil Code). All necessary means will be taken to prevent unauthorized access by third parties, including those present at the time of disclosure. In the event of legal obligations, these data may be shared with organisations / services / operators of the Italian health service or other public authorities; when collaborating with other individuals equally bound to professional secrecy (e.g. during supervisions, intervisions and / or team meetings), only the information strictly necessary in relation to the type of collaboration will be shared as consented herein (Article 15 of the Italian Civil Code).
11. Unless otherwise agreed, the accounting information relating to health care expenses will be transmitted to the Italian Revenue Agency, via electronic submission under the Health Card System, for the purposes of processing the pre-filled form 730 / UNICO and will also be accessible by those individuals to whom you may be fiscally dependent (spouse, parents, etc.). Objecting to the transmission of these data (perfomed according to the points at the end of this document) does not affect the deduction of these expenses, and only results in the invoice being not automatically inserted in the pre-filled declaration.
12. A list of data processors, if available, and other individuals to whom data have been disclosed, can be viewed upon request.
13. Under certain conditions, and in relation to details connected with the execution of duties, you have the right to exercise the rights conferred by articles 15 to 22 of the GDPR and Legislative Decree 101/2018 (right to access of personal data, right of rectification, right of cancellation, right to limitation of processing, right to portability or right to obtain a copy of personal data in a structured format of common use and readable by automatic device - in principle only data entered into the computer - and the right to have data transmitted to another data controller). In this case it will be the responsibility of the practitioner to verify the legitimacy of any request and to provide feedback within 30 days.

14. For any complaints or reports on the methods of data processing, ideally the Data Controller should be contacted directly. However, it is also possible to forward complaints or reports to the authority responsible for data protection, using the following contact details: Guarantor for the protection of personal data - piazza di Montecitorio n.121 - 00186 ROME - fax: (+39) 06.696773785 - telephone: (+39) 06.696771

    PEO: garante@gpdp.it

    PEC: protocollo@pec.gpdp.it