Privacy policy
The way your personal data is collected, used and protected.
Dr. Vittorio Capuano attaches particular importance to the protection of the personal data of the people who consult his website and contact him. This policy specifies how this data is collected, used, and protected, in accordance with the General Data Protection Regulation (GDPR).
Preamble
This privacy policy describes how Dr. Vittorio Capuano collects, uses, stores and protects the personal data of users in the context of consulting the site vittoriocapuano.com and the exchanges initiated from this site.
It is in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (the «GDPR»), as well as the amended Law on Information Technology and Liberties.
The treatments related to your medical care, whether in the clinic or in the hospital, are included in the medical record. They are governed by specific rules that are brought to your attention during the consultation.
Person responsible for the processing
The person responsible for processing personal data is:
Dr. Vittorio Capuano
Ophthalmologist surgeon
4 rue Lagorsse, 77300 Fontainebleau
Email : contact@vittoriocapuano.com
Collected data
The site collects only the data necessary for the purposes described below. The categories of data vary depending on your use of the site.
Visitors to the site
- Navigation data: pages visited, date and time of the visit, device type, connection data
- Connection logs, used for site security
- Cookies and trackers, see the dedicated section
Contact form
- Identity: name and first name
- Attachment structure
- Email address
- Content of the message
Request to send the tribune
- Email address
The fields marked with an asterisk in the forms are necessary for processing your request. The other information remains optional.
Health data
The site excludes any collection of health data. It offers general information and links to healthcare professionals. Please include any information regarding your health in the consultation, including in the message sent via the contact form.
Purposes of the processing
Personal data is collected and processed for the following purposes:
- Response to requests Processing of requests for intervention, training, collaboration or coordination submitted using the contact form
- Sending the tribune : transmission of the requested article by e-mail
- Audience measurement : monitoring of site traffic and improvement of its content
- Security and operation Security, availability and proper functioning of the site
Legal bases
In accordance with Article 6 of the GDPR, each processing is based on a specific legal basis:
| Treatment | Legal basis |
|---|---|
| Response to requests received through the contact form | Legitimate interest of the practitioner to respond to professional solicitations |
| Sending the tribune by email | Consent |
| Audience measurement | Consent, or exemption when the tool is configured according to the recommendations of the CNIL |
| Strictly necessary cookies | Legitimate interest |
| Security and connection logs | Legitimate interest and legal obligations |
Shelf life
The data are kept for the duration necessary for the purpose pursued:
| Data category | Duration |
|---|---|
| Requests received via the contact form | 3 years from the last exchange |
| Requests to send the tribune | 3 years from the date of the request |
| Audience measurement trackers | 13 months |
| Associated audience measurement data | 25 months |
| Connection logs | 12 months |
| Choice expressed in the cookie banner | 6 months |
Recipients of the data
The data transmitted by the website are intended for Dr. Vittorio Capuano and the persons assisting him in the processing of requests, within the limits of their duties.
Certain data may also be communicated to the competent authorities, in order to comply with a legal obligation or a judicial requisition.
Subcontractors
The practitioner employs technical subcontractors, notably for hosting, messaging and site maintenance. These providers act on the practitioner’s instructions, within the limits of their respective responsibilities and in accordance with the GDPR. In particular, they are:
- OVH SAS, Host of the website
- Cassian Agency, responsible for the design and maintenance of the site
Appointment booking and third-party services
Making an appointment
Appointments can be booked on the Doctolib platform, accessible via an external link. The data entered at this time is processed as part of this service, in accordance with Doctolib’s privacy policy and the contract concluded with the practitioner. It feeds into the consultation schedule and the follow-up of appointments.
Location map
The plan displayed on the Contact page is an image served with the site, whose display remains local and without tracking. A click leads to Google Maps, whose terms of use and privacy policy apply once on that service.
Social networks
The site links to the practitioner’s accounts through simple links. Accessing these platforms is subject to their respective terms of use and privacy policies.
Data transfer outside the European Union
The site’s data is hosted by OVH SAS, on servers located within the European Union. When a service involves the transfer of data outside the European Union, this transfer is accompanied by the guarantees provided by the GDPR, including the European Commission’s adequacy decision or its standard contractual clauses.
Data security
The site and the associated data are subject to technical and organizational measures adapted to the risk, including:
- Encrypted connection in HTTPS
- Access reserved for authorized persons
- Regular updating of the site's components
In the event of a data breach that may pose a risk to your rights and freedoms, the practitioner shall inform the CNIL within 72 hours, and inform you directly when this risk is high.
Your rights
In accordance with the GDPR and the Data Protection Act, you have the following rights:
- Right of access : obtain confirmation that your data are being processed and receive a copy of it
- Right of rectification : have inaccurate or incomplete data corrected
- Right to erasure request the deletion of your data under the conditions provided by the GDPR
- Right to restriction of processing : request the temporary suspension of the treatment
- Right of opposition You object to the processing of your data, in particular for processing based on legitimate interest
- Right to portability to receive the data you have provided in a structured format and to transmit it to another controller
- Right to withdraw your consent at any time, for treatments based on it, the treatment carried out before the withdrawal remains lawful
- Post-mortem directives : define guidelines regarding the fate of your data after your death
How to exercise your rights
Please send your request by email to contact@vittoriocapuano.com or by mail to the office: 4 rue Lagorsse, 77300 Fontainebleau. A proof of identity may be requested in case of reasonable doubt regarding the identity of the applicant.
A response will be provided within one month of receiving your request. This period may be extended by two months for a complex request, in which case you will be informed.
Requests for access to the medical file follow a separate procedure, provided for by the Public Health Code, and are addressed directly to the relevant clinic or healthcare facility.
In the event of persistent disagreement, you can file a complaint with the National Commission for Computing and Liberties (CNIL):
3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
Website: www.cnil.fr
Cookies and trackers
The site deposits two categories of trackers:
- Strictly necessary trackers : indispensable to the functioning and security of the site, they are deposited upon your arrival
- Audience measurement trackers They allow the analysis of site traffic and are subject to your consent, unless configured in accordance with the recommendations of the CNIL.
During your first visit, a banner allows you to accept or reject the optional trackers. Your choice remains modifiable at any time from the footer of the site and is retained for 6 months, in accordance with the recommendations of the CNIL. The lifespan of the trackers is listed in the «Duration of retention» section.
Your browser also allows you to configure or delete cookies. This setting may affect certain site features.
Data on minors
The forms on the website are intended for an adult audience. If a minor submits data, their legal representative may request their deletion at any time, in accordance with the procedures described in the section «How to exercise your rights».
Changes to the policy
This policy evolves in line with changes to the site and applicable regulations. The current version is the one published on this page at the date of your consultation.
