Privacy notice

This page explains what data I collect through the contact form — the only place on this site where you leave me any information — how I use it and what rights you have.

Who processes your data

The data controller is me, Anthony Paganin, osteopath and exercise scientist, Italian VAT number (P.IVA) 05174310234.

You can write to me by email at anthony.paganin@me.com or by certified email (PEC) at paganinanthony@pec.it.

I have not appointed a data protection officer: for a practice like mine it is not required.

I see patients by appointment at these practices:

Gymnasium Villafranca, Galleria Vezza 17, 37069 Villafranca di Verona (VR)
Gymnasium Sona, Via Verona 22/24, 37060 Sona (VR)
Gymnasium Affi, Via S. Pieretto 25, 37010 Affi (VR)
Fisioterapia Dossobuono, Viale Europa 31, 37062 Dossobuono di Villafranca (VR)
Studio FisicaMente, Via L. Benati 121, 46048 Roverbella (MN)

How this site works

This site is a showcase: a public page with information about my practice, plus this notice and the cookie page.

There is no login, no private area, no shopping cart and nothing to pay online.

The only place where you leave me any data is the contact form.

What data I collect with the form

Using the form is your choice: if you prefer, you can call me or message me on WhatsApp. None of this data is required by law, but without it I can't reply to you.

When you fill in the form, you send me the following:

Name (required)
Email (required)
Phone (optional)
The message you write (required)
The tick confirming that you have read this notice (required)

What happens to the data you send me

When you submit the form, the site checks the data and forwards it straight away by email to my inbox, using the Resend service.

The site has no database and does not store what you write anywhere: there is no archive on the site. The only copy is the email I receive.

Your email address is set as the reply-⁠to address, so I can answer you directly.

The form also contains a hidden field, which you don't see or fill in: it only serves to stop automated programs. If it is filled in, the request is discarded and no email is sent.

Health data

In your message I recommend that you don't go into detail about your health: just tell me in a couple of lines what you are feeling, and we'll talk about the rest in person.

As an osteopath I naturally also process health data, but this happens as part of the treatment, not through the site: for that processing there is a separate notice, which you can read and confirm online or at the practice.

Why I am allowed to process this data

I process the form data in order to reply to you: the legal basis is Article 6(1)(b) of the GDPR, that is, following up on your request, including with a view to a possible professional relationship. The tick you add confirms that you have read this notice; it is not the legal basis for the processing.

I process technical connection data on the basis of legitimate interest, Article 6(1)(f) of the GDPR: making the site work and protecting it.

Technical browsing data

The site runs on Cloudflare, which, like any hosting provider, processes some technical connection data — IP address, date and time, page requested, browser used — to make it work and protect it from misuse.

I have no visitor statistics and use no analytics tools: I don't know who comes by here, or how often.

How long I keep the data

The email with your request stays in my inbox for as long as it takes to deal with it and for any follow-⁠up contact. If the request goes no further, I delete it within 24 months.

Technical connection data follows the provider's retention periods, which are short.

Who processes the data on my behalf

To run the site and deliver messages I rely on these providers, which process the data on my behalf and only for these purposes:

Cloudflare, Inc. — hosts the site and delivers it online
Resend (Plus Five Five, Inc.) — sends the email generated by the form
My email provider — where the email is received and stored

Data processed outside the European Union

Cloudflare and Resend are US companies: data may therefore also be processed outside the European Union, on the basis of the safeguards set out in the contracts governing these services. I do not sell or pass on your data to anyone else.

Your rights

Regarding the data you have given me, you can at any time ask:

to access it and find out what I hold
to correct anything that is wrong
to have it deleted
to restrict its use
to object to the processing
to receive it in a readable format, to take it elsewhere

How to exercise them, and who to turn to

To exercise any of these rights, write to me by email at anthony.paganin@me.com or by PEC at paganinanthony@pec.it. I will reply myself, free of charge.

If you believe I am processing your data improperly, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali: www.garanteprivacy.it.

Last updated: 29 September 2026.