1. Data Controller
The Data Controller for personal data is:
COV — Centro Ortopedico Vigevanese S.R.L.
Viale Leonardo da Vinci 20, 27029 Vigevano (PV)
P.IVA: 01114380189
Phone: 0381 71340
E-mail: info@cov.it
2. Types of Data Collected
The personal data we may collect includes:
- Identification data: name, surname, e-mail address, telephone number, postal address.
- Navigation data: IP address, browser type, pages visited, session duration, operating system.
- Voluntarily provided data: information entered in contact or quote request forms.
We do not collect special categories of data (health data or sensitive data) through the website. Any health-related information voluntarily shared through the contact form will be processed with the highest confidentiality safeguards.
3. Purposes and Legal Basis of Processing
Personal data is processed for the following purposes:
| Purpose | Legal basis |
|---|---|
| Responding to contact and quote requests | Art. 6(1)(b) — execution of pre-contractual measures |
| Management of the commercial relationship | Art. 6(1)(b) — contractual execution |
| Tax and accounting obligations | Art. 6(1)(c) — legal obligation |
| Anonymous statistical analysis of navigation | Art. 6(1)(f) — legitimate interest |
| Sending informational communications (only with consent) | Art. 6(1)(a) — consent |
4. Methods of Processing
Data is processed using electronic tools and, where necessary, paper-based tools, with the adoption of adequate technical and organisational measures to ensure the security, integrity and confidentiality of data, pursuant to Art. 32 of the GDPR.
The website is hosted on the Odoo S.A. platform (Belgium), which complies with European data protection regulations. Data is not transferred outside the European Economic Area (EEA).
5. Retention Period
- Contact data: retained for the time necessary to respond to the request and in any case no longer than 24 months from collection, unless otherwise required by law.
- Contractual data: retained for 10 years as provided for by Italian tax regulations.
- Navigation data: retained in anonymous and aggregated form.
6. Communication and Disclosure of Data
Personal data is not disseminated. It may be communicated to:
- Authorised personnel of the Controller for the performance of company functions;
- Technical service providers (hosting, IT maintenance) appointed as Data Processors pursuant to Art. 28 GDPR;
- Competent authorities, when required by law.
7. Rights of the Data Subject
Pursuant to Arts. 15–22 of the GDPR, you have the right to:
- Access — obtain confirmation of the existence of data concerning you and receive a copy;
- Rectification — request the correction of inaccurate or incomplete data;
- Erasure — request the deletion of data (right to erasure), in the cases provided for by Art. 17 GDPR;
- Restriction — request restriction of processing;
- Portability — receive data in a structured, commonly used and machine-readable format;
- Objection — object to processing on grounds relating to your particular situation;
- Withdrawal of consent — withdraw at any time the consent given, without prejudicing the lawfulness of processing based on consent before withdrawal.
To exercise your rights, write to: info@cov.it
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) (www.garanteprivacy.it).
8. Updates
This privacy policy may be updated periodically. The last revision was made on 11 April 2026.