1. Data Controller
The Data Controller for personal data is:
COV — Centro Ortopedico Vigevanese S.R.L.
Viale Leonardo da Vinci 20, 27029 Vigevano (PV)
P.IVA: 01114380189
Telefono: 0381 80340
E-mail: info@cov-srl.it
2. Types of Data Collected
The personal data we may collect includes:
- Identification data: name, surname, e-mail address, telephone number, postal address.
- Navigation data: IP address, browser type, pages visited, session duration, operating system.
- Voluntarily provided data: information entered in contact or quote request forms.
Non raccogliamo dati particolari (dati sanitari, dati sensibili) attraverso il sito web. Eventuali informazioni di natura sanitaria comunicate spontaneamente tramite il modulo di contatto saranno trattate con le massime garanzie di riservatezza.
3. Purposes and Legal Basis of Processing
Personal data is processed for the following purposes:
| Purpose | Legal basis |
|---|---|
| Responding to contact and quote requests | Art. 6(1)(b) — execution of pre-contractual measures |
| Management of the commercial relationship | Art. 6(1)(b) — contractual execution |
| Tax and accounting obligations | Art. 6(1)(c) — legal obligation |
| Anonymous statistical analysis of navigation | Art. 6(1)(f) — legitimate interest |
| Sending informational communications (only with consent) | Art. 6(1)(a) — consenso |
4. Methods of Processing
Data is processed using electronic tools and, where necessary, paper-based tools, with the adoption of adequate technical and organisational measures to ensure the security, integrity and confidentiality of data, pursuant to Art. 32 of the GDPR.
The website is hosted on the Odoo S.A. platform (Belgium), which complies with European data protection regulations. Data is not transferred outside the European Economic Area (EEA).
5. Retention Period
- Contact data: retained for the time necessary to respond to the request and in any case no longer than 24 months from collection, unless otherwise required by law.
- Contractual data: retained for 10 years as provided for by Italian tax regulations.
- Navigation data: retained in anonymous and aggregated form.
6. Communication and Disclosure of Data
Personal data is not disseminated. It may be communicated to:
- Authorised personnel of the Controller for the performance of company functions;
- Technical service providers (hosting, IT maintenance) appointed as Data Processors pursuant to Art. 28 GDPR;
- Competent authorities, when required by law.
7. Rights of the Data Subject
Pursuant to Arts. 15–22 of the GDPR, you have the right to:
- Access — obtain confirmation of the existence of data concerning you and receive a copy;
- Rectification — request the correction of inaccurate or incomplete data;
- Erasure — request the deletion of data (right to erasure), in the cases provided for by Art. 17 GDPR;
- Restriction — request restriction of processing;
- Portability — receive data in a structured, commonly used and machine-readable format;
- Objection — object to processing on grounds relating to your particular situation;
- Withdrawal of consent — withdraw at any time the consent given, without prejudicing the lawfulness of processing based on consent before withdrawal.
To exercise your rights, write to: info@cov-srl.it
Lei ha inoltre il diritto di proporre reclamo al Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).
8. Updates
La presente informativa può essere aggiornata periodicamente. L'ultima revisione è stata effettuata in data 11 aprile 2026.