Privacy Policy

Last updated: January 2025

1. Introduction

Centro Benessere di Zheng Xiaoyan (hereinafter "we", "our" or "Centro Benessere") respects your privacy and is committed to protecting your personal data. This privacy policy describes how we collect, use and protect your personal information in accordance with the General Data Protection Regulation (GDPR).

2. Data Controller

Data Controller: Centro Benessere di Zheng Xiaoyan
Registered Office: Viale Togliatti 143, 50019 Sesto Fiorentino (FI), Italy
Email: support@ctbenessere.com
Phone: +39 350 869 2623

3. Data Collected

We collect the following categories of personal data:

  • Identification data: First name, last name, email, phone number
  • Booking data: Requested services, appointment date and time, selected location
  • Health data: Medical information relevant to treatments (collected only with explicit consent)
  • Technical data: IP address, browser type, device used

4. Purpose of Processing

Your personal data is used to:

  • Manage bookings and provide requested services
  • Appointment-related communications (confirmations, reminders, changes)
  • Improve the quality of our services
  • Comply with legal and tax obligations
  • Send promotional communications (only with explicit consent)

5. Legal Basis for Processing

The processing of your data is based on:

  • Contract execution: To provide requested services
  • Consent: For sensitive health data and marketing
  • Legal obligation: For tax and accounting compliance
  • Legitimate interest: To improve our services

6. Data Retention

Personal data is retained for the time necessary for the purposes for which it was collected:

  • Booking data: 2 years from the date of last service
  • Tax data: 10 years as required by Italian law
  • Marketing data: Until consent is withdrawn

7. Data Sharing

Your data may be shared with:

  • IT service providers (hosting, database management)
  • Accountants and tax advisors
  • Competent authorities when required by law

We do not sell or share your personal data with third parties for marketing purposes.

8. Your Rights

In accordance with GDPR, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Restriction: Limit the processing of your data
  • Portability: Receive your data in structured format
  • Objection: Object to the processing of your data
  • Withdraw consent: Withdraw consent at any time

To exercise these rights, contact us at: support@ctbenessere.com

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, destruction or alteration. We use SSL encryption for transmission of sensitive data and limit access to data only to authorized personnel.

10. Cookies and Similar Technologies

We use cookies and similar technologies to improve your experience on our website. For more information, see our Cookie Policy.

11. Changes to the Policy

We reserve the right to modify this privacy policy at any time. Changes will be posted on this page with the update date.

12. Complaints

If you believe that the processing of your personal data violates GDPR, you have the right to lodge a complaint with the Italian Data Protection Authority.

13. Contact

For questions regarding this privacy policy or to exercise your rights, contact us at:
Email: support@ctbenessere.com
Phone: +39 350 869 2623