Privacy policy

1. Controller

The controller responsible for data processing on this website is:
AGON FB GmbH
Jaufenstraße 129 D, 39049 Sterzing/Vipiteno (BZ), Italy
Email: info@agon.bz.it
PEC: agonfb@legalmail.it
VAT no.: IT 03060160219

2. General information

We process our users' personal data only to the extent necessary to provide a
functional website and our content and services, or where you have given consent.
Personal data is any information relating to an identified or identifiable natural
person.

3. Hosting

This website is hosted on the cloud infrastructure of Oracle (Oracle Cloud
Infrastructure). The provider is Oracle Italia S.r.l., Viale Fulvio Testi 136,
20092 Cinisello Balsamo (MI), Italy (“Oracle”). Oracle processes, on our behalf,
the data generated when you visit the website (e.g. IP address, time of access,
browser information). The data is processed in a data centre within the European
Union (Oracle Cloud region Italy/Turin); no transfer to a third country takes
place in the context of hosting. The legal basis is our legitimate interest in
secure and efficient provision (Art. 6(1)(f) GDPR). A data processing agreement
(Art. 28 GDPR) is in place with Oracle.
More information: www.oracle.com/legal/privacy/

4. Server log files

When you access the website, information is automatically stored in server log
files: browser type and version, operating system, referrer URL, host name, time
of request and IP address. This data is not merged with other sources and serves
technical delivery and security (Art. 6(1)(f) GDPR). The log files are stored for
as long as necessary for the stated purposes and then deleted.

5. Cookies and consent

Our website uses cookies and similar technologies. Technically necessary cookies
are required for operation (Art. 6(1)(f) GDPR). Cookies and services that are not
technically necessary (in particular for analytics/statistics) are used only with
your consent (Art. 6(1)(a) GDPR). On your first visit you receive a cookie notice
with the option to accept or decline processing. Your choice is stored locally in
your browser. You can withdraw or change your consent at any time with effect for
the future via the “Cookie settings” link (in the footer).

6. Contacting us and appointment requests

If you contact us by email or via the request/appointment form, we process the data you provide (e.g. name, date of birth, contact details, preferred appointment, content of the request) to handle your enquiry and arrange an appointment. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures/contract) or (f) (legitimate interest in responding). We need the information in the mandatory fields to process your request; all other information is optional.

When you use the appointment form, you will usually also share health data with us, such as information about symptoms, injuries or existing imaging (e.g. X-ray, MRI). Even a request for a specific treatment, such as an orthopaedic consultation, allows conclusions to be drawn about your health. Health data belongs to the special categories of personal data (Art. 9 GDPR). We process it solely to handle your request and arrange an appointment, on the basis of your explicit consent, which you give by ticking the checkbox in the form (Art. 9(2)(a) GDPR).

Your consent is voluntary. Without it, we cannot process your request via the form; you can, however, also contact us by email or in person. You may withdraw your consent at any time with effect for the future, for example using the contact details in section 1. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Only the staff responsible for scheduling and the medical and therapy staff involved in your care have access to your information; all of them are bound by confidentiality. Requests for an orthopaedic consultation are forwarded to Dr. Christian Coppola, who works as a self-employed specialist and is an independent controller for the processing in connection with the consultation and treatment. The form transmits your information in encrypted form. Our hosting provider (Oracle, see section 3) and email provider (Aruba S.p.A., Italy) process the data solely on our behalf (Art. 28 GDPR). Beyond this, the data is not disclosed to third parties.

We delete the information from your request once it is no longer needed to arrange your appointment, and at the latest six months after receipt. If treatment follows, the information required for it is transferred to your treatment records, which are subject to statutory retention periods.

7. Google Analytics 4

With your consent we use Google Analytics 4, a web analytics service provided by
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google
Analytics uses cookies and similar technologies to evaluate use of the website
(including pages visited, time on site, approximate region, device/browser
information, truncated IP address). This information may be transferred to Google
servers, including in the USA. For transfers to the USA, Google relies on the EU
Standard Contractual Clauses and/or the EU-US Data Privacy Framework. The legal
basis is your consent (Art. 6(1)(a) GDPR). Without consent, Google Analytics is
not loaded. You can withdraw your consent at any time via “Cookie settings”.
Measurement ID: G-PB9MLPHESB. More information:
policies.google.com/privacy

8. Fonts

Fonts are served locally from our server. No connection to third-party servers
(e.g. Google Fonts) is established.

9. Links to social networks

We link to our profiles on Instagram and Facebook (Meta Platforms Ireland Ltd.).
Only when you click are you redirected to the external sites; data is then
processed according to the respective providers’ terms.

10. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure
(Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to
object (Art. 21 GDPR). You may withdraw consent at any time with effect for the
future. To exercise these rights, contact us using the details in section 1.

11. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority, in
particular the Italian Garante per la protezione dei dati personali (Piazza
Venezia 11, 00187 Rome, www.garanteprivacy.it).

12. Currency and changes

This privacy policy is current as of September 2026. We reserve the right to amend it
to reflect changed legal or technical circumstances.