Privacy & security in Box della Salute

Your privacy, based on how the Box actually works.

Last updated: [TO BE COMPLETED]

The protection of personal data and health information is an integral part of Box della Salute. The infrastructure is designed on a Privacy by Design basis, to minimise data collection, protect information at every step and clearly assign the respective roles and responsibilities.

1 · Access via digital identity

Access to the services is via SPID or the Electronic Identity Card (CIE), according to the configuration provided for the service. This verifies the user's identity digitally and allows consent to be captured and logged without paper forms.

Processing of health data takes place only after the user has received the necessary information and has given consent where required.

2 · Data protection and pseudonymisation

Data and documents generated by the Box are protected with encryption and cryptographic pseudonymisation. Cloud servers do not store names, surnames or tax codes in clear text associated with results, but technical codes not directly traceable to a person's identity.

This separation reduces the risk that information could be linked to a user even in the event of unauthorised access.

3 · How to download results

At the end of the service, the user receives the instructions needed to access the protected portal and download their document using their tax code and a temporary PIN generated by the system.

The user may independently decide to make the document available to their doctor or another healthcare professional. A doctor can access it only when the user voluntarily provides the necessary credentials or PIN: there is no independent access.

4 · Temporary retention

Box della Salute is not an Electronic Health Record and does not create a permanent history of the user's clinical data.

The servers act as a protected transit needed to allow results to be downloaded. Data is retained for a maximum of 15 days and then permanently deleted according to the applicable policies.

It is up to the user to save and keep the downloaded document on their own device.

5 · Network security

Boxes installed in the field are not directly reachable from the outside. Data is transmitted over a protected virtual private network based on Tailscale and the WireGuard protocol.

The internet connection available at the installation site is used solely as a transport medium. Data travels encrypted and is not visible to the local network of the municipality, pharmacy, company or facility hosting the Box.

6 · Roles and responsibilities

Wealty S.A. acts as Data Controller for the personal data relating to the Box della Salute service.

The municipality, local authority or party hosting the Box provides the space and may promote the service, but does not access the servers, does not view results, does not directly collect consent and does not manage users' health data.

The technology provider ensures technical maintenance of the systems and operates according to the role formally assigned and the instructions received, without being able to independently link health results to users' identities.

Wealty S.A. handles the obligations within its remit, including the Data Protection Impact Assessment (DPIA) where required, and the contractual management of trust services, digital identity and cloud infrastructure.

7 · Data subject rights

The data subject may exercise the rights provided by applicable law, including access, rectification, erasure, restriction, portability and objection, in the cases and within the limits set by law.

For information or to exercise your rights, write to [email protected].