- Home
- Privacy policy
Privacy policy
Last updated: pendiente de la primera revisión jurídica
Bloqueante · sin revisión jurídica
Who processes your data
- Controller: Anna Maria Bordes
- Tax identification: [PENDING: owner’s tax number and registered address]
- Contact: [PENDING: final email address]
What is collected and why
Only the data you voluntarily send through the contact form or when booking an appointment: name, email address, reason for enquiry and whatever you write in your message.
The sole purpose is to reply to you and, where applicable, manage the appointment. It is not used for profiling or advertising.
Health data
The form on this site is not designed to collect information about your health, and you are expressly asked not to include it. Health data is a special category protected by article 9 GDPR and is handled only within the practice, in the context of the professional relationship and with appropriate safeguards.
Legal basis
- Consent (art. 6(1)(a) GDPR) to reply to your message.
- Steps taken at your request prior to entering a contract (art. 6(1)(b) GDPR) when you request an appointment.
How long it is kept
Contact messages are kept for the duration of the exchange and afterwards for as long as needed to address possible liabilities. You can request deletion at any time.
Who else has access
Data is not shared with third parties except where legally required. Technical service providers do act as processors, under contracts compliant with article 28 GDPR:
- Website hosting.
- Transactional email delivery.
- Appointment booking system, when you use it.
- Site content management.
- [PENDING: final list of providers, their processor status and server locations]
Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to the address above. You may also withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
If you believe your data has not been handled correctly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Security
The site is served over an encrypted connection, with reasonable technical and organisational measures in place. No system is infallible, but the least possible data is collected — which is the most effective security measure there is.