Privacy policy

Last updated: August 2026

1. Data controller

• Controller: Begoña Etcheverry Giadrosich · NIF [NIF]
• Registered professional address: Plaza Alfonso Comín, 5, 08023 Barcelona, Spain
• Data protection contact: WhatsApp +34 671 80 59 51 (see the contact page)

Personal data is processed in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).

2. Data we process and why

Through WhatsApp we may collect your name, email address, telephone number and the content of your enquiry, which may include health data (a special category of data under Article 9 GDPR).

• To respond to your enquiry or request for information.
• To arrange a medical assessment and manage appointments, if you ask us to.
• To maintain communication regarding your care pathway, should one begin.

We do not use your data for advertising purposes and we do not create commercial profiles.

3. Legal basis

• Your explicit consent (Article 6(1)(a) GDPR), given when you start the conversation, and your explicit consent for any health data you choose to share with us (Article 9(2)(a) GDPR).
• Where a care relationship exists: the provision of diagnosis and healthcare by a professional bound by professional secrecy (Article 9(2)(h) GDPR) and compliance with healthcare legislation (Spanish Law 41/2002 on patient autonomy).

4. Data retention

Enquiries that do not lead to a care relationship are retained for as long as necessary to deal with them, and for no longer than one year. Where a care relationship begins, clinical records are retained for the periods required by applicable healthcare legislation (as a general rule, a minimum of five years from the completion of each episode of care, in accordance with Spanish Law 41/2002 and Catalan regional legislation, which may extend this period).

5. Recipients

Data is not shared with third parties except where legally required. The following act as data processors under the contracts required by Article 28 GDPR:

• Web hosting provider (Hostinger).
• Web analytics tools (Google Analytics), in accordance with the Cookie Policy.
• WhatsApp (Meta Platforms Ireland Ltd.), if you choose that channel of communication; its use involves international transfers covered by the safeguards adopted by the provider (standard contractual clauses and the EU–US Data Privacy Framework).
• The hospitals where care is provided, where necessary for its delivery.

6. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability at any time, and you may withdraw your consent, by contacting the controller using the details given in section 1 and providing proof of your identity.

If you consider that your data is not being processed in accordance with the applicable legislation, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Security

Appropriate technical and organisational measures are in place to ensure the confidentiality, integrity and availability of your data, taking into account the particular sensitivity of health data. All personnel involved are bound by professional secrecy.