3. Purposes and Legal Basis for Processing

Purposes

·        Managing appointment requests and communications

·        Providing osteopathic treatment and maintaining health records

·        Responding to requests submitted via WhatsApp or email

·        Improving the Website and analysing browsing statistics

·        Fulfilling tax and administrative obligations

Legal Basis

·        Performance of pre-contractual measures / contract: Article 6(1)(b) GDPR

·        Explicit consent for health data: Article 9(2)(a) GDPR, together with applicable legal obligations relating to healthcare

·        Consent / legitimate interest: for responding to voluntary enquiries

·        Consent for non-essential cookies or legitimate interest for technical cookies

·        Legal obligation: Article 6(1)(c) GDPR

4. Data Retention

Contact details are retained for as long as necessary to manage the relevant request and, where a professional relationship has been established, for the period required under applicable Spanish legal obligations relating to healthcare and tax records.

Personal data collected through contact forms where no appointment subsequently takes place will be deleted within a reasonable period once the data is no longer necessary for the purposes for which it was collected.

5. Disclosure and Transfer of Personal Data

Personal data is not sold to third parties.

Personal data may be shared with service providers acting as data processors on our behalf, such as hosting providers, email service providers, or appointment booking tools/WhatsApp Business, always in accordance with the GDPR.

Where such service providers are located outside the European Economic Area (EEA), personal data will only be transferred where appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses.

6. Your Rights

You may exercise the following rights at any time by contacting us at the email address provided:

·        Right of access to your personal data

·        Right to rectification of inaccurate or incomplete data

·        Right to erasure (“right to be forgotten”)

·        Right to restriction of processing

·        Right to data portability

·        Right to object to certain processing activities

·        Right to withdraw your consent at any time

You also have the right to lodge a complaint with the Spanish data protection supervisory authority, the Agencia Española de Protección de Datos (AEPD).

AEPD — Agencia Española de Protección de Datos

7. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration, or accidental disclosure.

Particular care is taken with health data, which is treated as confidential and may only be accessed by authorised personnel where necessary.

8. Cookies

The Website uses cookies and tracking technologies to ensure the proper functioning of its pages and to improve the user experience.

A. Types of Cookies Used

Technical Cookies (Necessary):
These cookies are essential for the proper functioning of the Website, including navigation between pages and the management of user sessions (e.g. saving cookie preferences). Prior consent from the user is not required for the use of cookies that are strictly necessary for the operation of the Website.

Analytics Cookies (Google Analytics 4):
The Website uses Google Analytics, a web analytics service provided by Google LLC (“Google”). This tool collects aggregated and anonymised information about how users interact with the Website (e.g. most visited pages, time spent on the Website, and traffic sources), solely for the purpose of analysing and improving the Website’s performance and content.

Privacy note:
The service is configured to anonymise the user's IP address before it is stored or processed by Google, thereby preventing the user's direct identification.

B. Consent Management

When users first access the Website, an informational cookie banner is displayed, allowing them to:

·        Accept the activation of Google Analytics analytics cookies;

·        Reject analytics cookies and continue browsing using only the necessary technical cookies;

·        Customise their preferences at any time through the link available in the Website footer.

C. How to Disable Cookies in Your Browser

Users can also configure their browser to block or delete cookies. Configuration guides for the main browsers are available below:

·        Google Chrome

·        Mozilla Firefox

·        Apple Safari

·        Microsoft Edge

To specifically opt out of Google Analytics tracking across all websites, users can install the browser addGoogle Analytics Opt-out Browser Add-on