Privacy Policy

This policy concerns the personal data collected through this website (contact form, browsing). Data relating to your health, processed in connection with dental treatment on our premises, is covered by a separate privacy notice that is provided to you at the clinic.

1. Data Controller

The Data Controller is GF Odontoiatrica S.r.l. (Sardinia Dental Clinic).

Registered office

Via Capotesta 7, Centro Damasco, 07026 Olbia (OT)

VAT no.

02534800905

Email

gfodontoiatrica@gmail.com

Phone

0789 26466

2. Data Protection Officer (DPO)

The Data Controller has not appointed a Data Protection Officer (DPO).

3. What data we process

• Data you provide voluntarily through the contact form, by phone or by email: first and last name, email address, phone number and any information contained in your message.
• Browsing data collected automatically by the systems that operate the website (e.g. IP address, technical logs, browser type), to the extent necessary for the operation and security of the site. The website uses third-party analytics and marketing tools only with your consent, as described in the Cookies section.

4. Purposes and legal basis of the processing

• Responding to your requests sent through the form, by phone or by email and following up on an appointment request — legal basis: response to a request from you and performance of pre-contractual measures / consent (Art. 6.1.a-b GDPR).
• Security and proper operation of the website — legal basis: legitimate interest of the Data Controller (Art. 6.1.f GDPR).
• Compliance with legal obligations — legal basis: Art. 6.1.c GDPR.
• Statistical measurement of website usage via Google Analytics 4 — legal basis: consent (Art. 6(1)(a) GDPR), which you can deny or withdraw at any time.
• Marketing and remarketing through third-party tools (Google Ads, Meta Pixel) — legal basis: consent (Art. 6(1)(a) GDPR). The site does not offer newsletter sign-ups.

5. How the data is processed

The data is processed using electronic tools and technical and organisational measures appropriate to ensure its security and confidentiality. The website is hosted and maintained by technical service providers (hosting providers and web agencies), appointed as data processors pursuant to Art. 28 GDPR. Submitting the contact form generates a message sent to the clinic's email inbox.

6. Data recipients

The data may be processed, on our behalf and under our instructions, by parties appointed as data processors pursuant to Art. 28 GDPR: technical service providers (hosting providers, web agencies) and email providers. In connection with the measurement and marketing tools activated with your consent, Google Ireland Ltd. (Google Analytics, Google Ads, Google Maps) and Meta Platforms Ireland Ltd. (Meta Pixel) operate, as described in sections 7 and 11. We do not disclose your data publicly; it may be communicated to the competent authorities where required by law.

7. Google Maps and third-party services

The Contact page embeds a Google Maps map (Google Ireland Ltd.). Loading the map may involve the processing of data by Google (e.g. IP address) and the installation of third-party cookies, including transfers to non-EU countries governed by appropriate safeguards (standard contractual clauses). You can prevent the installation of these cookies through your browser settings.

8. Transfer of data outside the European Union

The data is processed within the European Union. Any non-EU transfers connected to third-party services activated with your consent (Google — Analytics, Ads, Maps; Meta — Pixel) take place in compliance with the safeguards provided for by Articles 44 et seq. of the GDPR, such as standard contractual clauses and, where applicable, the EU-US Data Privacy Framework.

9. How long we keep your data

• Contact form data: for as long as strictly necessary to handle your request and, if no care relationship is established, for the period required by legal obligations.
• Browsing data and technical logs: for as long as strictly necessary for the operation and security purposes of the website.

10. Your rights

As a data subject, you may exercise, within the limits of the law, the rights provided for by Articles 15-22 of the GDPR: access to your data, rectification, erasure, restriction, objection to processing, portability and withdrawal of consent (without affecting processing already carried out).

To exercise your rights you can write to us at gfodontoiatrica@gmail.com. You also have the right to lodge a complaint with the supervisory authority, the Italian Data Protection Authority (Garante per la protezione dei dati personali).

11. Cookies and consent management

This website is built with static technology and the fonts are hosted directly on the site. The technical cookies essential to its operation are always active. For usage statistics and marketing purposes we use Google Tag Manager, which loads Google and third-party tools only after your consent: we adopt Google Consent Mode v2, so when the site opens consent is set to "denied" and no measurement or marketing tool is activated until you choose. On your first visit we display a consent management banner with three categories:

• Necessary — technical cookies essential to the operation of the website, always active (they do not require consent).
• Measurement — statistics on the use of the website via Google Analytics 4 (Google Ireland Ltd.), activated only with your consent. Main cookies: _ga, _ga_<ID> (indicative duration up to 24 months).
• Marketing / third parties — activated only with your consent. Includes:
  • Google Ads (Google Ireland Ltd.) for conversion measurement and remarketing — e.g. cookie _gcl_au (indicative duration 3 months);
  • Meta Pixel (Meta Platforms Ireland Ltd.) for retargeting on Facebook and Instagram — e.g. cookie _fbp (indicative duration 3 months); for the collection and transmission of data via the pixel we are joint controllers with Meta pursuant to Art. 26 GDPR (Meta's privacy policy);
  • the Google Maps map on the Contact page, loaded only after consent: in its absence you will find a placeholder with a button to enable it.

Part of the collection takes place through a server-side component of Google Tag Manager (domain d.sardiniadentalclinic.it), which operates in a first-party context and forwards data to the tools listed above according to your choices. We record your consent (date, selected options and version of this notice) for the sole purpose of being able to demonstrate that it was obtained, as required by law.

The use of these tools may involve the transfer of data to Google and Meta, including to non-EU countries, governed by appropriate safeguards (standard contractual clauses). You can change or withdraw your choices at any time through the "Manage cookie preferences" link (also available in the footer of every page), or manage cookies from your browser settings.

12. Changes to this policy

We may update this policy to reflect regulatory changes or changes to the operation of the website. The updated version will always be published on this page.

Last updated: August 2026.