anatomicus.com — Personal data processing notice
anatomicus.com è il sito di ANATOMICUS, Istituto di Ricerca e Alta Formazione Professionale in Anatomia Umana, gestito da ATS Srl. La presente informativa descrive come vengono trattati i dati personali degli utenti che utilizzano il sito, in particolare tramite il modulo di contatto e registrazione, in conformità al Regolamento (UE) 2016/679 (GDPR).
Data Controller
ATS Srl – Via Sergio Ramelli 20 – 52100 Arezzo (AR), Italy.
VAT number: IT02327800518
Data Controller's email address: info@istitutoats.com
Types of Data collected
The Personal Data collected by this site, directly or through the contact and registration form, include:
- Full name
- Email address
- Phone number
- Country
- Profession, organisation or institution and professional experience
- Area and course of interest
- Message and any other information provided in the form
- Usage Data (e.g. IP address, browser type, operating system, pages visited and access times)
- Technical cookies
The Data marked as mandatory in the form are needed to act on the User's request; if they are not provided, it may be impossible to give the requested reply. The other Data are optional and not providing them has no consequences.
The User takes responsibility for any third-party Personal Data shared through the site and guarantees that they have the right to share them.
Methods and place of Data processing
Processing methods
The Data Controller adopts appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of the Data. Processing is carried out with IT and telematic tools, using methods strictly related to the stated purposes. Besides the Data Controller, the Data may be accessed by people involved in running the site (administrative and sales staff) and by external suppliers (technical service providers, hosting providers, IT companies), appointed as Data Processors where necessary.
Legal basis for processing
Processing of the Data provided through the form is based on the User's consent (Art. 6(1)(a) GDPR) and, to reply to the request, on the performance of pre-contractual measures (point b) and on the Data Controller's legitimate interest (point f).
Venue
The Data are processed at the Data Controller's operating offices and at the service providers involved. Some providers may process the Data outside the European Union; in such cases the transfer takes place with appropriate safeguards, such as the Standard Contractual Clauses approved by the European Commission.
Retention period
The Data are kept for as long as needed to handle the User's request and the resulting contacts, and in any case no longer than the periods set by legal obligations or until consent is withdrawn. At the end of the retention period the Data are deleted.
Purposes of processing
The User's Data are collected for the following purposes:
- Replying to information and enrolment requests sent through the form
- Managing contacts and leads, including through the Data Controller's CRM system
- Contacting the User again by phone or email, if needed, to provide the requested information
- Hosting and management of the site's infrastructure
- Site security and prevention of abuse and SPAM
Third-party services and Data Processors
To provide the service, the Data Controller relies on selected suppliers appointed as Data Processors, including:
- Site hosting and delivery: Vercel Inc. (United States), with appropriate safeguards for the data transfer
- Contact and lead management (CRM): the Data Controller's management platform (Odoo)
The up-to-date list of Data Processors can be requested from the Data Controller at any time.
Cookies and tracking tools
This site uses only the technical cookies needed for it to work properly (for example to remember the selected language). No profiling or marketing cookies are used. The User can manage or disable cookies through their browser settings; disabling technical cookies may affect some features of the site.
User Rights
Users may exercise the following rights at any time, within the limits and on the conditions set by the GDPR:
- Access to their Personal Data
- Rectification of inaccurate or incomplete Data
- Erasure of the Data (“right to be forgotten”)
- Restriction of processing
- Objection to processing
- Data Portability
- Withdrawal of consent at any time
- Lodging a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali)
How to exercise your rights
To exercise their rights, the User can send a request to the Data Controller's email address: info@istitutoats.com. Requests are handled free of charge and as quickly as possible, in any case within one month.
Changes to this notice
The Data Controller reserves the right to change this notice at any time, informing Users on this page. Please check this page regularly, referring to the date of last change shown at the bottom.
Legal references
This notice is drawn up in accordance with Regulation (EU) 2016/679 (GDPR), in particular Articles 13 and 14, and with Italian Legislative Decree 196/2003 (the “Personal Data Protection Code”) as amended.
Last changed: June 2026