Notice on the processing of personal data

The data controller is CareOama. For any request regarding personal data, please write to privacy@careoama.it.

We do not request health-related data. Please do not enter health or special category information in free-text fields.

• Contact details provided voluntarily in the questionnaires: name, email, phone number, postal code.
• Questionnaire answers: family situation, support needs, availability, budget preferences.
• Technical browsing data strictly necessary for the site to function (truncated IP address, device and browser type).

• Responding to requests for information and assessing applications — legal basis: performance of pre-contractual measures (Art. 6.1.b GDPR).
• Research and aggregated analysis of the service — legal basis: legitimate interest (Art. 6.1.f GDPR), with data processed in aggregated or anonymised form.
• Informational communications about the service — legal basis: consent (Art. 6.1.a GDPR), which can be withdrawn at any time.
• Legal, accounting and insurance obligations — legal basis: legal obligation (Art. 6.1.c GDPR).

Contact details are retained for 24 months from the last relevant contact, unless longer statutory obligations apply. Questionnaire answers are anonymised within 12 months and kept only in aggregated form for statistical purposes.

Data may be processed by appointed data processors (Art. 28 GDPR) for hosting, email and contact management tools. We do not sell or share data with third parties for marketing purposes.

Any transfers outside the European Economic Area take place only to countries covered by an adequacy decision, or on the basis of the European Commission's Standard Contractual Clauses, with supplementary measures where necessary.

You may exercise the rights of access, rectification, erasure, restriction, portability and objection (Arts. 15-22 GDPR) at any time, as well as withdraw your consent, by writing to privacy@careoama.it.

You also have the right to lodge a complaint with the competent supervisory authority. In Italy this is the Garante per la protezione dei dati personali (www.garanteprivacy.it); if you reside in another EU member state you may contact your national data protection authority, a list of which is available on the website of the European Data Protection Board (edpb.europa.eu).

The website is not intended for minors under 16. We adopt appropriate technical and organisational measures (encryption in transit, restricted and logged access) to protect data from loss, unlawful use and unauthorised access.