Privacy Policy

Last updated: November 14, 2026

Privacy notice pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) for visitors browsing this website and using the metabolic assessment form or contact channels, including international telehealth patients.

1. Data Controller

2. Personal Data We Process

• Contact details: full name, email address, and phone number when entered in the metabolic assessment form or shared via email, phone, or WhatsApp.
• Health and biometric data: declared goal, weight, height, age, biological sex, and the estimated basal metabolic rate (BMR) derived from these values, as well as any clinical records or food diaries voluntarily shared during consultations. These constitute special category data under Article 9 GDPR.
• Technical browsing data: IP address, browser type, access timestamp, and requested URLs, logged by hosting infrastructure solely for website operation and security.
• Browser technical preferences (LocalStorage): acknowledgment of the cookie notice banner and your manual light/dark theme selection, stored exclusively on your device and never transmitted to our servers.

3. Purposes and Legal Bases

• Responding to your inquiries (metabolic assessment, appointment scheduling, telehealth information) and sending your BMR report: performance of pre-contractual steps at your request (Art. 6(1)(b) GDPR).
• Processing health-related data entered in the assessment form: your explicit consent, given by checking the dedicated consent box prior to submission (Art. 9(2)(a) GDPR). You may withdraw consent at any time by emailing us, without affecting processing carried out beforehand.
• Legal and regulatory obligations under Italian tax, accounting, and healthcare professional regulations (Art. 6(1)(c) GDPR).
• Website security and abuse prevention: legitimate interest in protecting infrastructure integrity (Art. 6(1)(f) GDPR).

Providing data in the online assessment is optional; however, without these inputs and your explicit consent, the estimate cannot be calculated or emailed. The calculator provides indicative estimates only and does not replace medical advice.

4. Recipients and Third-Party Services

Personal data are never sold or publicly disclosed. They may be processed by trusted providers acting on our behalf or as independent controllers:

• Keliweb, web hosting and email infrastructure provider.
• FormSubmit (formsubmit.co), form-forwarding service that receives the metabolic assessment inputs and delivers them via email to the Data Controller.
• Google Maps: the interactive map loads strictly after you click the activation button; once loaded, Google receives technical data such as your IP address and may set its own cookies. Google Privacy Policy (opens in a new tab).
• Unsplash: the hero photograph is loaded from images.unsplash.com, so your browser transmits standard technical request data (such as IP address) to their CDN. Unsplash Privacy Policy (opens in a new tab).
• WhatsApp: if you choose to message us via WhatsApp, your communication is governed by an external service with its own privacy policy: WhatsApp Privacy Policy (opens in a new tab).
• Authorized healthcare collaborators and public authorities, strictly where required by law.

Certain third-party services may involve international data transfers outside the EEA, which occur in compliance with Chapter V GDPR (such as adequacy decisions or Standard Contractual Clauses). Clinical services are provided from Italy under Italian law and GDPR, regardless of the patient's country of residence.

5. Data Retention

Data are retained only for as long as strictly necessary for the purposes above. Assessment submissions are kept to answer your inquiry and manage any ensuing professional relationship, and are subsequently deleted unless statutory healthcare or fiscal retention periods apply.

6. Basal Metabolic Rate Calculation

The basal metabolic rate is estimated using the Mifflin-St Jeor formula, a simple mathematical calculation executed locally in your browser prior to submission. It does not constitute automated decision-making or profiling producing legal or similarly significant effects.

7. Your Rights

Under Articles 15–22 GDPR, you have the right to request access to, rectification or erasure of your personal data, restriction of processing, data portability, and to object to processing. You may also withdraw your consent at any time.

To exercise your rights, write to info@dottantoninobuttabiologo.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it (opens in a new tab)) or your local supervisory authority.

8. Updates

This Privacy Policy may be updated from time to time; the latest revision date appears at the top of the page. For details on cookies and third-party embeds, please read our Cookie Policy.