Data controller

Controller: Jessica Prats Delgado — Tax ID (NIF/CIF): 43445731L
Address: Carrer d’Escòcia, 61, 08016 Barcelona
Contact: fisio@fisioescocia.com

What data do we process and for what purpose?

Contact data (name, phone, email) provided through the contact form or WhatsApp: to answer enquiries and manage appointment requests or bookings.
Health data (special category): within the physiotherapy care and only when the patient attends the clinic, we process the health data needed for diagnosis and treatment. This data is handled under professional secrecy and is not collected through the website unless the user voluntarily discloses it during a consultation.

Legal basis

For the website contact data: the user’s consent (Art. 6.1.a GDPR).
For health data in the care context: the provision of healthcare by a professional bound by secrecy (Art. 9.2.h GDPR) and explicit consent where applicable.

Retention

Contact data will be kept for the time needed to handle the request and, afterwards, for the applicable legal periods. Care-related data is kept in accordance with health regulations (clinical records).

Recipients

No data is shared with third parties except where legally required. The technology providers that support the site (hosting, email) process data as processors, with appropriate safeguards.

Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to fisio@fisioescocia.com, enclosing a copy of an identity document. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).