The data controller of the personal data collected through the ScienzeVita platform is the platform administrator. For any request regarding the processing of your data, you can write using the "Contact Management" form on the Home Page. The controller will provide its full identifying details (including registered office) upon request through that form.

The platform collects and processes the following categories of personal data: • Registration and account data: email, nickname, profile picture, language and theme preferences. • User-generated content: scientific consultation descriptions, uploaded files (documents, images), community posts and comments, article reports. • Interaction data: saved articles, upvotes, personal collections, learning paths, reading progress. • Anonymous analytics data: anonymous session identifier, event type, visited page. We do not link the analytics identity to your personal profile. • Donation data: amount and public name/pseudonym, handled by the payment provider (Stripe) as an external processor.

We use two categories of cookies: • Essential technical cookies: necessary for the site to function (authentication, language and theme preferences, session). They do not require consent and are always active. • Anonymous analytical cookies: they help us understand how users interact with content to improve the platform. They are activated only after your explicit consent via the cookie banner. You can reject them or withdraw consent at any time via the dedicated "Cookie settings" button. We do not use advertising profiling cookies or third-party tracking technologies for advertising purposes.

Data processing is based on the following legal grounds: • Consent: for analytical cookies and optional communications (personalized notifications). • Performance of a contract or pre-contractual measures: to provide the requested services (consultations, saved articles, paths). • Legitimate interest: for service improvement and platform security. • Legal obligations: for any regulatory compliance.

Data is kept for as long as strictly necessary to achieve the purposes for which it is collected: • Account data: until account deletion is requested. • Consultation content: until archived by the user or account deletion. • Anonymous analytics data: session identifier kept in the browser session; aggregated events kept indefinitely in anonymous form for historical analysis. • Contact messages: until the request is resolved and in any case no longer than the legal deadlines. • Donation data: in accordance with applicable fiscal and accounting obligations.

Your data may be processed by external processors providing services to the platform: • Payment provider (Stripe): processes donation transactions under its own terms and compliance certifications (PCI-DSS). It does not receive your clinical data or consultation content. • Artificial intelligence service: to generate responses and translations; it receives only the content necessary for the single processing. • Hosting infrastructure: for database storage and management. Your data is not sold or transferred to third parties for marketing purposes. Sharing with public authorities occurs only where required by law.

We adopt adequate technical and organizational measures to protect personal data from unauthorized access, loss, alteration or disclosure: protected authentication, role-based access control (RLS), encryption in transit and limitation of permissions. No system is completely secure: we promptly communicate any breaches according to legal obligations.

As a data subject, you have the right to: • Access your data (right of access); • Rectify it if inaccurate or incomplete; • Request its deletion (right to be forgotten); • Restrict processing in certain cases; • Receive your data in a structured format and port it elsewhere (portability); • Object to processing based on legitimate interest; • Withdraw the consent given at any time (for analytical cookies and notifications), without affecting the lawfulness of processing already carried out; • Lodge a complaint with the supervisory authority (in Italy: Garante per la protezione dei dati personali, www.garanteprivacy.it). To exercise your rights, use the "Contact Management" form on the Home Page. We will respond within the deadlines set by law (generally within 30 days).

For any questions about this policy or data processing, use the contact form on the Home Page. This policy may be updated to reflect regulatory or service changes; the last update date is shown at the top. We invite you to check this page periodically.