Data controller

The controller of the personal data collected through the website https://clinicaebalaguer.com is Elvira Balaguer Busquets, self-employed, owner of Clínica Balaguer. Tax ID (NIF): 43195196T. Address: Plaça del Mercat 11, local 2, 07420 Sa Pobla, Illes Balears, Spain. Telephone: +34 971 965 683. Email: contacto@clinicaebalaguer.com.

This policy covers only the data processed as a result of using the website. Health data and other information collected at the clinic when treating a patient (medical records, consent forms, invoicing) are governed by the data protection notice provided in person at the practice.

What data we process and how we obtain it

The website has no contact forms, newsletters or user accounts, so it does not collect personal data directly. We process personal data in two situations:

When you contact the clinic. If you call the telephone number or write to the email address shown on the website, we process the data you provide: your name, telephone number, email address and the content of your enquiry. Please do not include more information about your health in an email than is strictly necessary to deal with your request.

When you browse the website. If you accept analytics and advertising cookies, Google Analytics 4 and Google Ads collect pseudonymised data about your visit: pages viewed, time on site, device and browser type, approximate location, cookie identifiers and interactions such as clicking the call button. The owner does not link this data to your identity. If you refuse cookies, no browsing data is collected.

Purposes and legal basis

Data from people who call or write to the clinic is processed to answer their enquiry and, where appropriate, arrange a first visit. The legal basis is the taking of pre-contractual steps at the request of the data subject (article 6(1)(b) GDPR) and, beyond that, your consent, given by contacting the clinic voluntarily (article 6(1)(a) GDPR).

Browsing data is processed to measure use of the website, improve its content and evaluate the performance of the clinic's Google advertising campaigns. The legal basis is your consent, given when you accept cookies in the banner shown on your first visit and revocable at any time (article 6(1)(a) GDPR and article 22.2 LSSI-CE).

Retention

Data from enquiries received by telephone or email is kept for as long as needed to deal with them and, at most, for one year after the last communication, unless you become a patient of the clinic, in which case it is added to your medical record and kept for the periods required by Spanish healthcare legislation.

Browsing data is kept for the periods stated in the Cookie policy (up to two years for Google Analytics).

Recipients and international transfers

Data is not disclosed to third parties unless required by law. It is accessed, as processors under contract, by the providers that deliver services to the clinic: Quinatec (Tomás Emilio Córdoba, IT services, tomas@quinatec.es), which hosts and maintains the website, and the provider of the clinic's email service.

The Google services used on the website (Google Tag Manager, Google Analytics 4, Google Ads and Google Maps) are provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google may transfer the data to Google LLC servers in the United States; this transfer relies on the European Commission's adequacy decision for the EU-US Data Privacy Framework, to which Google is certified. Find out more at policies.google.com/privacy.

Your rights

You may at any time exercise your rights of access, rectification, erasure, restriction of processing, data portability and objection, and withdraw any consent you have given without affecting the lawfulness of processing carried out beforehand.

To do so, send an email to contacto@clinicaebalaguer.com stating which right you wish to exercise and attaching a copy of your identity document. We will reply within one month of receiving your request.

Complaints to the supervisory authority

If you believe your data is not being processed in accordance with the law, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) at www.aepd.es. We would appreciate the chance to resolve the matter with you first.

Applicable law and changes

This policy complies with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), Spanish Organic Law 3/2018 (LOPDGDD) and Spanish Law 34/2002 (LSSI-CE). We may update it when the services used on the website or the applicable legislation change; the version in force is always the one published on this page, with its last-updated date.