Dentro il Blocco Operatorio
Privacy Policy
Last updated: 6 September 2026.
1. Who processes your data
The data controller is Pietro Strozzi, with registered or professional address at Via Don Minzoni 6H, 23801 Calolziocorte (LC), VAT number 04204710133. For privacy requests, email infermieri5.0@gmail.com. Requests are normally taken in charge within 24 hours.
2. Who this notice applies to
This notice describes the processing of personal data of people who visit Dentro il Blocco Operatorio, create an account, use checklists and tools, save personal notes, purchase or manage a Premium subscription, request support or interact with project content.
3. Data we may process
We may process identification and contact data such as name and email; account and authentication data; subscription, payment-status and administration data; content voluntarily entered into personal features, including notes; technical and security data such as IP address, logs, device and browser information, and activity needed to prevent abuse; usage and measurement data only where permitted and, when required, after consent; and support communications.
4. Data you must not enter
Personal features, including notes, are not designed to store medical records, identifiable patient data, clinical images, reports, health information relating to identifiable people or other confidential professional data. Do not enter personal data about patients or third parties. If such data is entered in breach of this rule, the controller may remove it when discovered and take necessary protective measures.
5. Purposes and legal bases
Data needed to create and manage accounts, provide requested features, manage subscriptions and deliver support is processed to perform a contract or pre-contractual measures. Fiscal, accounting and other legally required data is processed under legal obligations. Essential technical data may be processed for security, abuse prevention, system protection and legal claims on the basis of legitimate interests, balanced against user rights. Non-essential measurement tools and cookies rely on consent where required.
6. Payments
Payments may be handled by specialist providers such as Stripe when configured in production. The website must not store full payment-card details. We receive the information needed to know payment outcomes, subscription status and administrative details. Specific processing depends on the payment service configuration actually in use.
7. Providers and recipients
The service may use providers for hosting and infrastructure, authentication and databases, payments, blog or newsletter management, analytics, security and technical support. They may act as processors or, for some services, independent controllers. Published information must reflect providers actually active and be updated when the architecture changes.
8. Transfers outside the EEA
Some providers may process data outside the European Economic Area. Such transfers must use a mechanism under Chapter V GDPR, such as an adequacy decision or Standard Contractual Clauses where applicable. Final public information must identify relevant providers and the safeguards actually used.
9. Retention
Data is retained only as long as necessary. Account data and personal notes are kept while the account is active and, after a deletion request, only for the time needed for technical closure and legal obligations or disputes. Administrative and fiscal data is retained for statutory periods. Support requests may be retained to handle and document the request. Security logs must have a limited and proportionate lifespan.
10. Security
We apply reasonable and proportionate technical and organisational measures against unauthorised access, loss, alteration or improper disclosure. No information system can be guaranteed absolutely secure, so safeguards are reviewed and updated over time.
11. Your rights
Where the GDPR applies, you may request access, rectification, erasure, restriction, portability and objection. Where processing is based on consent, you may withdraw it at any time without affecting earlier lawful processing. You may also lodge a complaint with the Italian Data Protection Authority or your competent supervisory authority.
12. Exercising your rights
Email infermieri5.0@gmail.com with “Privacy request” in the subject. We may request reasonable information to verify your identity. Requests are normally taken in charge within 24 hours; statutory response periods remain those set by applicable law.
13. Children
The service is intended for healthcare professionals and adults interested in operating-room education. It is not designed as a service specifically directed at children.
14. Changes to this notice
This notice may be updated when the service, providers or law changes. The last-updated date will remain visible. Material changes affecting processing or user choices will be communicated appropriately before the new conditions apply.