Privacy Policy

Last updated: 14 October 2026

This notice explains how PADDA S.r.l. processes the personal data of visitors to paddahealth.com and of anyone who contacts us through the contact form, under Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003.

Data controller

PADDA S.r.l., Via Sant'Antonio 4, 20122 Milan, Italy. VAT no. 03310350966. Email: [email protected].

What data we collect

• Data sent through the contact form: first name, last name, email address and the content of your message.
• Browsing data: the systems that run the website record some technical data, such as IP address, browser type and time of access. This is used only to keep the website working and secure, not to identify users.

We do not collect special categories of data (for example health data). Please do not include them in your message.

Why we process it and on what legal basis

Purpose	Legal basis
Replying to your contact request	Steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR)
Keeping the website working and secure	Legitimate interest of the controller (Art. 6(1)(f) GDPR)

We do not use your data for newsletters, marketing or profiling.

How long we keep it

Contact form data is kept for as long as needed to handle your request and no longer than 24 months after our last exchange, unless a relationship arises that requires longer retention. Browsing data is kept only as long as strictly necessary for website security.

Who can access the data

Data is processed by PADDA S.r.l. staff and by the providers that help us run the website and email, appointed as data processors:

• DigitalOcean, LLC, based in the United States, for website hosting;
• Cloudflare, Inc., based in the United States, for domain management (DNS) and for delivering and protecting traffic to the website;
• our business email service provider.

Your data is never sold or disclosed to the public.

Transfers outside the EU

DigitalOcean and Cloudflare are based in the United States and certified under the EU-U.S. Data Privacy Framework, so the transfer relies on the European Commission adequacy decision. If other providers process data outside the European Economic Area, the transfer relies on an adequacy decision or on Standard Contractual Clauses.

Your rights

You can ask at any time to access, rectify or erase your data, restrict its processing, object to processing based on legitimate interest, and receive it in a portable format (Arts. 15–22 GDPR). Write to [email protected].

If you believe the processing breaches the law, you can lodge a complaint with the Italian Data Protection Authority, Garante per la protezione dei dati personali (garanteprivacy.it).

Cookies

The website uses only technical cookies. All the details are in the Cookie Policy.

Changes

If the website adds new services or new ways of collecting data, this notice will be updated. The date at the top shows the latest version.