Privacy Policy

Last updated: 01/08/2026

1. Who we are

KardioVis S.r.l., with registered office at Via Castiglione 136, 40126 Bologna, Italy, VAT and tax code 04315431207, is the data controller for personal data processed through this website.

For any question about this policy, or to exercise your rights, you can contact us at info@kardiovis.com.

We have not appointed a Data Protection Officer.

2. Scope of this policy

This policy applies to personal data collected through the website kardiovis.com.

It does not apply to personal data processed in the context of clinical investigations conducted by KardioVis or its partners. Participants in a clinical investigation receive a separate, dedicated information notice at the time of enrolment.

This website does not collect health data. Please do not send us clinical information, medical records or details about your health through the contact form. The terms of service of our website provider do not permit this website to be used to collect health information.

If you are taking part, or considering taking part, in one of our clinical investigations, please contact the investigating hospital directly rather than using this form.

3. What we collect, why, and on what legal basis

Contact form

When you use our contact form, we collect the information you provide, which may include your name, email address, and the content of your message.

Purpose: to respond to your enquiry and, where relevant, to take steps at your request prior to entering into a business relationship.

Legal basis: Article 6(1)(b) GDPR, steps taken at your request prior to entering into a contract, and Article 6(1)(f) GDPR, our legitimate interest in responding to enquiries about our activity.

Providing this data is voluntary, but without it we cannot reply to you.

Retention: 24 months from the date of your last contact with us.

Technical data collected automatically

Our hosting provider records technical information necessary to deliver and secure the website, including IP address, browser type, operating system, and access timestamps.

Purpose: to operate the website, ensure its security, and detect abuse.

Legal basis: Article 6(1)(f) GDPR, our legitimate interest in the secure operation of the website.

Retention: this data is held by our hosting provider and retained in accordance with its own retention practices. See Section 5 below.

Analytics

We use the analytics function built into our website platform, Squarespace, to understand how visitors use the website in aggregate form. We do not use Google Analytics or any other external analytics service.

Purpose: to improve the content and structure of the website.

Legal basis: Article 6(1)(a) GDPR, your consent, given through our cookie banner. These cookies are not placed unless you consent, and you may withdraw your consent at any time.

Retention: the cookies used for this purpose expire after periods ranging from thirty minutes to two years, as set out in our Cookie Policy. The underlying data is held by Squarespace and retained in accordance with its own retention practices.

Embedded map

Our website includes a map provided by Google. When the map loads, your IP address is transmitted to Google.

Purpose: to show the location of our office.

Legal basis: Article 6(1)(a) GDPR, your consent, given through our cookie banner.

4. Who we share data with

We do not sell personal data and we do not share it for advertising purposes.

Personal data may be processed on our behalf by service providers acting as processors under Article 28 GDPR:

•     Squarespace Ireland Limited, Squarespace House, Ship Street Great, Dublin 8, D08N12C, Ireland, which hosts this website and provides the contact form. Squarespace Ireland Limited engages Squarespace, Inc., established in the United States, as a sub-processor

•     Google, which provides the map embedded in the footer of this website

We may also disclose data to public authorities where required by law.

5. Squarespace as an independent controller

In addition to acting as our processor, Squarespace also acts as an independent data controller for technical browsing information relating to visitors to this website. This includes IP addresses, information about your browser, network or device, the pages you visited before arriving here, and information about how you interact with this website.

Squarespace processes this information for its own purposes, in particular to maintain the safety, security and integrity of its services. We also permit Squarespace to analyse the use of this website in anonymised, de-personalised or aggregated form in order to protect and improve its services.

For information on how Squarespace processes this information, and on the rights available to you in that respect, please see the Squarespace Privacy Policy and Cookie Policy, available at squarespace.com. To exercise your rights against Squarespace directly, you may contact privacy@squarespace.com.

6. Transfers outside the European Economic Area

This website is provided by Squarespace Ireland Limited, established in Ireland. Squarespace Ireland Limited engages Squarespace, Inc., established in the United States, as a sub-processor, and personal data may therefore be transferred to the United States.

Squarespace, Inc. is certified under the EU-U.S. Data Privacy Framework. The transfer takes place on the basis of the European Commission adequacy decision of 10 July 2023 relating to that framework.

If that framework ceases to apply, or does not cover a given transfer, the Standard Contractual Clauses approved by European Commission decision 2021/914 of 4 June 2021 apply instead, as incorporated into our agreement with Squarespace.

When the embedded map loads, your IP address is transmitted to Google LLC in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, and that transfer takes place on the basis of the same adequacy decision.

You may request a copy of the safeguards applied by contacting us at info@kardiovis.com.

7. Your rights

Under Articles 15 to 22 GDPR you have the right to request access to your personal data, rectification, erasure, restriction of processing, and data portability. You may object to processing based on our legitimate interest, and you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights, write to info@kardiovis.com. We will respond within one month.

If you believe that our processing of your personal data infringes data protection law, you have the right to lodge a complaint with the Italian data protection authority, Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of your country of residence.

8. Cookies

For information on the cookies used by this website, please see our Cookie Policy.

9. Changes to this policy

We may update this policy to reflect changes in our activity or in applicable law. The date at the top of this page indicates the most recent version.