This notice is provided pursuant to Regulation (EU) 2016/679 ("GDPR") to users of the SafePill QR website (the "Site").
Data controller
The data controller is Drigo Mauro, located at Via I Maggio 60, 30023 Concordia Sagittaria (VE), Italy, reachable at mauro.drg@gmail.com.
Data collected
SafePill QR is a "client-side" service: the medication name you enter is used only in your browser to generate the QR Code and is not transmitted, stored or shared with the controller or any third party. The only exception is the optional use of the virtual (AI) assistant: in that case the medication name and your question are transmitted temporarily to the model provider to generate the answer, without being stored (see the "AI assistant" section).
- No registration or account creation.
- No collection of identifying data (name, email, phone number).
- No profiling or marketing cookies. The only third-party cookies are Google Analytics statistical cookies, activated only after consent given via the banner (see Cookie Policy).
Navigation data
The hosting provider may record aggregated technical logs (IP address, user agent, date and time of the request) solely for security and diagnostic purposes, kept only for the time strictly necessary.
The generated QR Code opens a wa.me link that redirects to the user's WhatsApp app. Sending the message takes place exclusively within WhatsApp and falls under the WhatsApp/Meta privacy policy.
Rights of the data subject
Although we do not process personal data, you can contact the controller for any request related to articles 15-22 GDPR at mauro.drg@gmail.com. You can always lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
AI virtual assistant on package leaflets
After the QR Code is generated, an AI-based virtual assistant is available, dedicated exclusively to international standard pharmaceutical information. The user's questions and the medication name are transmitted temporarily to the AI model provider (Lovable AI Gateway and its model sub-processors) for the sole purpose of generating the answer.
- The conversation is stateless: it is not stored in any database, is not linked to a device ID or account, and is erased when the chat or the page is closed.
- No identifying personal or health data (name, age, conditions, current therapies) is requested or should be entered. Any personal data voluntarily entered is not retained by the Site.
- Legal basis: performance of the service requested by the user and legitimate interest (Art. 6.1.b and 6.1.f GDPR). Use of the assistant is optional.
- Processing may involve a transfer to third countries, carried out by the providers on the basis of standard contractual clauses.
- The assistant performs no automated decision-making producing legal or similarly significant effects on the user (art. 22 GDPR): it only provides general information, with no profiling.
For any request concerning this processing, write to mauro.drg@gmail.com.