Biologist nutritionist · Kinesiologist
This page explains how I handle your personal data, both when you use the website and when you come to the studio. It is the notice required by art. 13 of Regulation (EU) 2016/679 (GDPR).
Last updated: 15 October 2026.
The data controller, meaning the person who decides why and how your data is used, is Dr. Alessandro Vismara, biologist nutritionist and kinesiologist.
Studio: Via G. Boccaccio 11, 28069 Trecate (NO), Italy
Website: alessandrovismara.com
Registered with the Italian National Order of Biologists (no. PLV_A4509)
VAT number (P.IVA): 02628950038
Email: alessandro.vincemalis@gmail.com
Certified email (PEC): alessandro.vismara@pecordinebiologi.it
Phone / WhatsApp: +39 388 477 7893
The legal basis is the reason the law accepts as valid for using your data. Every use has one.
Data collected through the website
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| Browsing the site | IP address, browser type, pages visited, date and time (technical logs) | Keep the site running and protect it from abuse | Legitimate interest (art. 6.1.f) |
| Contact or request form | Name, email, phone, message content | Reply to your request | Your request / pre-contractual steps (art. 6.1.b) |
| Email, phone, WhatsApp | Name, number and content of messages | Reply and arrange the appointment | Art. 6.1.b |
| Non-essential cookies | Online identifiers | See the Cookie Policy | Consent (art. 6.1.a) |
| Usage statistics (Google Analytics) | Pages visited, visit duration, device and browser, approximate location (city), online identifiers | Understand how the site is used and improve it | Consent (art. 6.1.a) |
Filling in the forms is optional, but without a name and a way to contact you I cannot reply.
Data processed at the studio
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| Nutrition and kinesiology services | Identity, contact details and tax code. Health information (conditions diagnosed by your doctor, test results, medication). Body measurements (weight, circumferences, skinfolds). Optional photos for postural and functional assessment. | Assess your situation, build your meal plan and training programme, follow your progress over time | Performance of the service you requested (art. 6.1.b). For health data: art. 9.2.h and your explicit consent |
| Administration | Identity details, tax code, payment details | Invoicing, tax and accounting obligations | Legal obligation (art. 6.1.c) |
Health information is a special category of data (art. 9 GDPR). I use it only to build your meal plan or training programme. Before your first visit I ask you to read this notice and sign the consent form at the studio.
Processing is carried out with manual, IT and online tools, only for the purposes above. I may use software platforms to manage your file, analyse nutrition and plan training. The providers of these platforms act as data processors (art. 28 GDPR), meaning they handle the data only on my instructions. The up-to-date list is available on request.
Third-party services on the website. The site uses services from other companies, which may receive your IP address and technical data when the page loads: Google Maps (the studio maps), Google reviews (through Trustindex), the Instagram feed (through Smash Balloon) and Google Analytics (usage statistics). Where required, they load only after you consent in the cookie banner, managed with CookieYes; Google Analytics runs only with your consent. Links to social profiles take you off this site, and those platforms’ own notices apply.
Bookings. The site links to MioDottore for booking. Data entered there is processed by MioDottore (Docplanner group) as an independent controller, under its own privacy notice. When you book, MioDottore passes me your contact details and the booking, and I use them only to manage the appointment.
Security. The site uses an encrypted connection (HTTPS) and access to its administration is protected by private credentials. If a personal data breach puts your rights at risk, I notify the Italian Data Protection Authority within 72 hours of discovering it and, if the risk is high, I inform you as well.
Automated decisions. I do not use automated decision-making or profiling that has effects on you.
Your data is never published. It may be shared with tax advisers and accountants, with technology and cloud providers (for example hosting and email), and with judicial or administrative authorities when the law requires it.
If a technology provider involves transferring data outside the European Union (for example to the United States), the transfer takes place only to recipients covered by an adequacy decision (such as the EU-U.S. Data Privacy Framework) or under Standard Contractual Clauses, as required by Chapter V of the GDPR.
Your data is never published. It may be shared with tax advisers and accountants, with technology and cloud providers (for example hosting and email), and with judicial or administrative authorities when the law requires it.
In particular I use:
If a technology provider involves transferring data outside the European Union (for example to the United States), the transfer takes place only to recipients covered by an adequacy decision (such as the EU-U.S. Data Privacy Framework) or under Standard Contractual Clauses, as required by Chapter V of the GDPR. For example, Google LLC (United States) participates in the EU-U.S. Data Privacy Framework.
To withdraw your cookie consent, use the site’s cookie settings button. You can also turn off Google Analytics with the browser add-on Google provides.
If you believe the processing breaks the law, you can complain to the Italian Data Protection Authority, the Garante per la protezione dei dati personali. If the website’s services or the law change, I update this page and the date at the top.