Privacy Policy

Notice under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) · Last updated: 10 November 2026

1. Data controller

The data controller is CIFALI & PITINO PARTNERS S.r.l.s., registered office Via Collepiano Ins. Produttivo 3/B, 82030 Torrecuso (BN), Campania, Italy, tax and VAT no. 01845150620, responsible for the website medappdiabetes.eu and the MedApp Diabetes project. For any privacy request you can write to info@medappdiabetes.eu.

2. What data we process and why

Browsing the website. Technical data (IP address, browser, pages visited) processed by the server to run and protect the site. Legal basis: legitimate interest in the security and operation of the service.
Messages from the chat and contact forms. Name, email and message text, to reply to your request. Legal basis: the data subject’s request and your consent when sending. We ask you not to write health data in these forms.
Subscription in the app. Purchases are made in the app through the App Store or Google Play, which process payment data as independent controllers: we do not see or store your card details. We only receive the information needed to manage the subscription (for example status and expiry). Legal basis: performance of the contract and legal obligations.
Fitness level and health questionnaire in the app. In the app we ask you to fill in a questionnaire to personalise your workouts. Health information is special category data (Art. 9 GDPR) and we process it only with your explicit consent, collected in the app, solely to suggest suitable workouts. You can withdraw consent at any time by writing to us; withdrawal does not affect processing already carried out.

MedApp is a tool to support wellbeing and physical activity: it does not replace the advice of your doctor or health professionals.

3. Who we share data with

Data is processed by the controller and by providers acting as processors: hosting and infrastructure for the website and the app, email service, the App Store and Google Play for managing subscriptions and, where necessary, tax and accounting advisers. Data is not sold or disclosed. If a provider is located outside the European Economic Area, the transfer takes place with the safeguards provided by the GDPR (adequacy decisions or standard contractual clauses).

4. How long we keep data

Support messages: as long as needed to reply and, as a rule, no more than 12 months.
Tax and accounting data on revenue: for the period required by law, normally 10 years.
Health questionnaire data: for as long as needed to personalise your workouts, then deleted or anonymised; you can ask for deletion at any time.

5. Your rights

You can ask for access to your data, rectification, erasure, restriction, portability, and object to processing; you can withdraw consent at any time. Write to info@medappdiabetes.eu: we will reply within 30 days. You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the authority of your country.

The website uses technical cookies, necessary for it to work: for example WordPress session and security cookies. These do not require consent. Some pages may embed third-party content (for example videos or social media), which may set their own cookies under their own notices. If we use analytics or marketing cookies in the future, we will ask for your consent first. You can delete or block cookies in your browser settings.

7. Changes

We may update this notice; the version in force is always the one published on this page, with the update date at the top.