Privacy Policy

Information on the Processing of Personal Data (Swiss nLPD)

In accordance with the Swiss law (nLPD) and the relative Ordinance (OLPD), this Privacy Policy explains how your personal data is collected, processed, and protected when you use this website (“Website”). It is intended to help you understand our privacy practices and how your information is handled.

Data Controller

The Data Controller is dr. med. Enrico Capuano, GLN 7601003337426, with its registered office at via delle Scuole 17 – 6900 Paradiso. Telephone: +41 76 454 28 46.

Personal Data We Collect

Data You Voluntarily Provide

  • First and last name
  • Email address
  • Telephone number
  • Address and city
  • The content of requests submitted by email or through the contact form, including any health information voluntarily provided by the user

Failure to provide the information required to process your request may prevent us from responding.

Data Collected Automatically

  • IP address
  • Browser type and version
  • Operating system and platform
  • Pages visited, response times, duration of visits, errors, and interactions with the Website
  • Information collected through cookies (please refer to our Cookie Policy)

Purpose of Processing

Your personal data is processed for the following purposes:

  1. To enable the proper use and navigation of the Website.
  2. To ensure the security of the Website and prevent abuse, unauthorized access, and fraud.
  3. To respond to requests for information, appointment bookings, or medical consultations submitted through our contact channels.

Legal Basis for Processing

Personal data is processed in accordance with the nLPD on the basis of:

  • The necessity of processing to respond to your requests.
  • The legitimate interests of the Data Controller in operating the Website, ensuring system security, and responding to enquiries.
  • Your consent, where you voluntarily provide particularly sensitive personal data, such as health information.

Recipients of Personal Data

Your personal data may be shared with:

  • Competent public authorities where required by law.
  • Service providers that provide services to the Data Controller, including:
    • IT service providers and digital infrastructure providers.
    • Cloud computing and web hosting providers.
    • Medical consultants and healthcare specialists.
    • Individuals or organizations responsible for administrative and organizational support.

The following categories of providers process personal data on behalf of the Data Controller:

  • Website maintenance and IT service providers.
  • Hosting and server infrastructure providers.

All service providers operate under agreements designed to ensure the confidentiality and security of personal data.

International Data Transfers

The processing of personal data may involve transfers to Italy, a country recognized by Switzerland as providing an adequate level of data protection.
Should personal data be transferred to countries that do not provide an adequate level of protection, such transfers will only take place with appropriate contractual safeguards in accordance with the Swiss nLPD.

Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected and in accordance with applicable Swiss legal obligations concerning document retention.

Your Rights

Under the Swiss law (nLPD), you have the right to:

  • Access your personal data.
  • Request the correction of inaccurate or incomplete data.
  • Request the deletion of personal data when it is no longer required.
  • Request the restriction of processing where applicable.
  • Object to processing based on legitimate interests.
  • Request data portability where technically feasible.

You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (IFPDT).

To exercise any of these rights, please contact us using the details provided in the Data Controller section above.

Last updated: 11 November 2025