Last updated: 20 September 2026
This Privacy and Cookie Policy describes how personal data are processed when users visit the aNETomy® website and use the services made available through it, in accordance with Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree No. 196/2003, as amended by Legislative Decree No. 101/2018.
Data Controller
The Data Controller is Daniele Della Posta, with registered address at Via Fermo 2C – 00182 Rome, Italy.
For information or requests concerning the processing of personal data, please contact info@anetomy.net.
Browsing data and website operation
The information systems and software procedures used to operate the website acquire, as part of their normal operation, certain technical data whose transmission is implicit in the use of Internet communication protocols. These may include, for example, IP addresses, the date and time of requests, requested resources, browser and device information, and other technical data necessary for the operation and security of the website.
This information may be used to ensure the proper operation and security of the services, diagnose technical problems, and obtain aggregate statistical information about website usage.
Data voluntarily provided by users
The website provides various forms and services through which users may voluntarily provide personal data. The data requested vary according to the service used.
Contact requests
To respond to requests submitted through the contact forms, data such as first name, surname, email address, telephone number, subject and message content may be processed.
Courses and training activities
To manage requests to participate in or enrol in courses and training activities, identification and contact details, information concerning the selected course or module, and any notes provided by the data subject may be processed.
Membership of The Anatomical Network
To manage applications for membership of the association, data necessary for the membership relationship and related requirements may be processed, including identification and contact details, date and place of birth, address, Italian tax code, identification document details and copy, and information relating to payments and membership years.
Webinars
First name, surname and email address are processed for registration and access to the Webinar archive. The system also uses a technical cookie to maintain access to the service for the period specified in the Cookies section below.
Participation in Clinic AI
To manage applications to participate in the Clinic AI project, first name, surname, email address and administrative information relating to participation and the corresponding payment may be processed.
Professional Directory
Eligible professionals can access and manage their profile and choose which professional information to make public in the aNETomy directory, such as profession, city, practice name, professional contact details, website, social media profiles, professional introduction and areas of practice.
Purposes and legal bases for processing
Depending on the service used, personal data are processed in order to:
- respond to requests for information or contact;
- manage enrolments, participation requests and training activities;
- manage the membership relationship and related requirements;
- provide access to restricted content and services;
- manage participation in aNETomy projects and services;
- manage and publish, at the data subject's request, Professional Directory profiles;
- ensure the security, operation and technical maintenance of the website;
- comply with applicable administrative, tax or legal obligations.
The legal basis for processing depends on the purpose pursued and may consist of taking steps at the request of the data subject or performing the relationship established with them, compliance with legal obligations, the Data Controller's legitimate interest in the operation and security of its systems or, where required, the data subject's consent.
Newsletter and informational communications
In some forms, users may separately choose whether to receive newsletters or informational communications relating to aNETomy activities. Subscription is optional and is not a condition for using the website's other services.
Where such processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing carried out before its withdrawal.
Cookies
In its current configuration, the website does not use profiling or advertising cookies, nor does it use third-party analytics cookies to track users.
The website uses technical cookies where necessary for the operation of specific services requested by the user. Prior consent is not required for these cookies, while information about their use is provided in this Policy.
Webinar archive access cookie
Name: anetomy_webinar_access
Type: technical authentication/access cookie
Purpose: to recognise authorised access to the Webinar archive and maintain it between visits
Maximum duration: 90 days
Security attributes: Secure, HttpOnly, SameSite=Lax
The cookie is deleted from the browser when the service's logout function is used, and the corresponding access is revoked by the system.
Technical statistics and website monitoring
aNETomy uses internal server-side systems to obtain technical and statistical information about the operation, availability and overall use of the website. In the current configuration, these systems do not require third-party analytics cookies to be installed in the user's browser.
External content and YouTube
Some pages, particularly the Webinar archive, contain resources and content provided through YouTube. Video thumbnails may be requested from YouTube servers, while embedded videos are configured using the youtube-nocookie.com domain.
Loading or interacting with external content may result in communication between the user's browser and the relevant provider's servers. Any subsequent processing carried out by the provider is also governed by that external service's terms and privacy policy.
Provision of personal data
Providing data marked as required in individual forms is necessary in order to process the relevant request or provide the requested service. Failure to provide such data may make it impossible to complete the request.
Providing data for optional purposes, such as subscribing to the newsletter, remains voluntary.
Data retention
Personal data are retained for the time necessary to achieve the purposes for which they were collected and, where applicable, for the period required to comply with administrative, tax, membership or legal obligations.
Data relating to requests and services are retained according to criteria proportionate to the nature of the request and any relationship established with the data subject. Data that are no longer necessary are erased or rendered non-identifiable, unless further retention is required by law or is necessary for the establishment, exercise or defence of legal claims.
The duration of the technical cookie used to access the Webinar archive is specified in the relevant section above.
Recipients of personal data
Personal data may be processed by the Data Controller, authorised persons and, where necessary, providers of technical, hosting, maintenance, communication or other services required to manage the activities requested by the user.
Personal data are not made publicly available, except for data that the data subject has expressly chosen to make public through services designed for that purpose, such as the Professional Directory.
Transfers of data to third countries
The use of services provided by third parties may, depending on the arrangements adopted by the relevant provider, involve the processing of data outside the European Economic Area. In such cases, processing is carried out in accordance with the safeguards required by applicable data protection legislation.
Security
Technical and organisational measures are adopted to protect personal data and reduce the risks of unauthorised access, loss, alteration or improper disclosure, taking into account the nature of the data and the services provided.
In the event of a personal data breach, the procedures required by applicable legislation are followed, including, where the relevant conditions are met, the notifications and communications provided for under Articles 33 and 34 of the GDPR.
Rights of the data subject
Where provided for by the GDPR, data subjects may exercise the rights recognised under Articles 15 and following of the Regulation, including the right to:
- obtain confirmation as to whether personal data concerning them are being processed and access those data;
- request the rectification of inaccurate data or completion of incomplete data;
- request erasure of personal data where the relevant conditions are met;
- request restriction of processing in the cases provided for by law;
- object to processing where applicable;
- receive personal data in a structured format and request data portability where applicable;
- withdraw consent at any time for processing based on consent.
Requests may be sent to info@anetomy.net.
Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) in accordance with the procedures established by the Authority.
Changes to this Policy
This Policy may be updated to reflect changes to the services, technologies used or applicable legislation. The date of the latest update is shown at the beginning of this page.