Privacy policy

01Who is responsible

The controller responsible for data processing on this website is:

02When you contact us

If you call or email us, we process the details you share with us — such as your name, contact details and the content of your message — to answer you and to arrange appointments.

Legal basis: Art. 6(1)(b) GDPR where your request concerns an appointment or treatment; otherwise Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries.

03Hosting and server logs

This website is hosted by Netlify, Inc. (USA). To deliver the pages and keep them secure, Netlify automatically processes technical data in server logs:

• IP address
• date and time of the request
• page requested and referring page
• browser and operating system

Netlify keeps these logs for a limited period. Data may be processed in the USA; such transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses.

Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in the secure and reliable operation of this website.

04Anonymous usage statistics

We use PostHog to see, in anonymous form, how this website is used — for example which pages are viewed and which elements are clicked, together with technical details such as browser, device type, referring page and approximate location.

PostHog runs on servers in the EU. It is configured without cookies and without storing anything on your device, no session recordings are made, no user profiles are created and the data is not used to identify you. Because nothing is stored on your device, these statistics are collected regardless of your cookie choice.

Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in understanding and improving our website.

05Google Tag Manager and Google Analytics

Only if you click “Accept” in the cookie banner do we load Google Tag Manager and Google Analytics, services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics sets cookies (such as _ga) to recognise your browser and measure how the website is used. Google receives your IP address and usage data, which may be transferred to Google LLC in the USA under the EU–U.S. Data Privacy Framework.

If you click “Reject” or make no choice, neither service is loaded.

Legal basis: Art. 6(1)(a) GDPR, your consent, which you can withdraw at any time with effect for the future (see “Cookies and your choice”).

06Google Maps

The contact section of our home page shows an interactive map from Google Maps (Google Ireland Limited). To display it, your browser loads data from Google's servers as soon as the page opens, which transmits your IP address and technical data to Google, regardless of your cookie choice. Data may be transferred to Google LLC in the USA under the EU–U.S. Data Privacy Framework.

Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in helping you find the clinic.

07Fonts

All fonts are delivered from our own website. Your browser does not connect to Google Fonts or any other font provider.

08Cookies and your choice

On your first visit, a banner asks whether you accept cookies. Your choice is saved in your browser's local storage (entry “cookieChoice”) so the banner is not shown again. This entry is not a cookie and is not sent to us.

If you click “Accept”, Google Tag Manager and Google Analytics are loaded and may set cookies. If you click “Reject”, they are not loaded. The cookieless PostHog statistics run in both cases.

To change or withdraw your choice, delete this website's stored data (cookies and site data) in your browser settings. The banner will then appear again on your next visit.

09Legal bases

We rely on the following legal bases of the GDPR:

• Art. 6(1)(a) — your consent: Google Tag Manager and Google Analytics.
• Art. 6(1)(b) — contract and pre-contractual steps: appointment and treatment requests.
• Art. 6(1)(f) — our legitimate interests: secure hosting, anonymous usage statistics, answering general enquiries and remembering your cookie choice.

10How long we keep data

We keep personal data only as long as it is needed for the purpose it was collected for, or as long as the law requires us to. Server logs and statistics are kept by the respective providers for limited periods.

11Your rights

You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16) or erased (Art. 17), to restrict its processing (Art. 18), to data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)).

To exercise your rights, simply contact us by telephone or email using the details above.

You also have the right to lodge a complaint with a data protection supervisory authority — in Spain, the Agencia Española de Protección de Datos (AEPD): www.aepd.es