Privacy policy
Last reviewed: 9 December 2024
This is an English-language courtesy version. The Spanish version of this policy is the authoritative text and is governed by Spanish data protection law.
The purpose of this policy is to inform data subjects about the different processing activities carried out by this organisation through the website that affect their personal data, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and Spanish Organic Law 3/2018 of 5 December on the protection of personal data and the guarantee of digital rights (LOPDGDD).
1. Data controller
ROBERT PUJOL SÁNCHEZ, registered address at Carrer de Roger de Llúria, 44, 7º-1ª, 08009 Barcelona, NIF 33908674G, contact phone +34 693 26 85 90, email hola@quiropracticacatalunya.com.
2. Purposes of processing your personal data
Users / visitors of the controller's website
We process the personal data you provide in order to:
- Handle the requests, complaints and incidents you submit via the contact channels on the website.
- Understand how visitors behave on the site so that we can detect potential attacks on the website.
- Comply with our directly applicable legal obligations.
- Protect and exercise our rights or respond to claims of any kind.
- Where applicable, send commercial communications about our goods or services and/or news or newsletters related to our sector. If you do not give permission, we will not be able to send you this information.
- Where applicable, send satisfaction or quality surveys. If you do not give permission, we will not be able to assess the service provided.
- Manage the booking of your requested appointment. If you do not give permission, we will not be able to schedule your visit.
3. Legal basis for processing
- The consent you have given to process your data for the purposes stated. Failure to provide your personal data means we will not be able to process it for those purposes.
- Compliance with the legal obligations that apply to us. In this case, the data subject cannot object to the processing.
- Our legitimate interest in protecting our image, business and reputation by preventing attacks on our website. In this case, the data subject cannot object to the processing, but may exercise the rights set out in section "Rights" of this policy.
4. Add-ons and tools used on the website
Google Maps
We use Google Maps (API) to show you interactive maps on our website and let you use its features. When you use the service, Google will collect and store information about your use of it. The use of Google may involve International Data Transfers that are not based on an adequacy decision by the European Commission, so we recommend you read the Google privacy policy in advance.
Online booking (Quirohiro)
We use the Quirohiro service for online appointment management and booking through a widget embedded on our site. When you use the booking form, the data you provide is processed by Quirohiro as a data processor in accordance with its own privacy policy. See the Quirohiro privacy policy.
Web hosting (Vercel)
This website is hosted on the servers of Vercel Inc. (USA). The provider is certified under the EU-USA Data Privacy Framework and also relies on the European Commission's Standard Contractual Clauses as a safeguard for international data transfers. See the Vercel privacy policy.
5. Data retention periods
The personal data you provide will be kept for the time needed to fulfil the purposes for which it was originally collected.
Once the data is no longer necessary for the relevant processing, it will be kept duly blocked so that, if required, it can be made available to the competent public administrations, courts, judges or the Public Prosecutor's Office, for the limitation period of any actions that may arise from the relationship with the client and/or the retention periods established by law.
Data blocking periods:
- Spanish Civil Code. Between 1 and 5 years depending on the case, under articles 1964.2 and 1968.2.
- Spanish Commercial Code. 6 years under article 30, for commercial information such as invoices, tickets, corrective invoices and banking documents.
- Spanish General Tax Act. 4 years under articles 66 to 70, for tax-related information.
6. Automated decisions and profiling
The website does not make automated decisions or carry out profiling.
7. Recipients
During the period in which we process your personal data, the organisation may share it with the following recipients:
- Courts and tribunals.
- State security forces.
- Other competent public authorities or bodies, when the controller has a legal obligation to provide the personal data.
8. International data transfers
In compliance with GDPR and LOPDGDD, we inform you that, as a result of the providers we use, the organisation carries out the following international data transfers to recipients established outside the European Economic Area (EEA):
| Country | Purpose | Data types | Safeguard |
|---|---|---|---|
| USA | Web hosting (Vercel) | Identifiers: IP | EU-USA Data Privacy Framework, adequacy decision of 10 July 2023, and Standard Contractual Clauses |
| USA | Maps (Google Maps) | Browsing data and IP | EU-USA Data Privacy Framework |
9. Social media
So you can follow our activity, we want you to know that ROBERT PUJOL SÁNCHEZ has a profile on the following social networks. You are welcome to join them. Note that unless we collect your data directly from you, your data belongs to the relevant social network, so we recommend you read its terms of use and privacy policy:
10. Your rights
Data subjects may request more information about the processing of their personal data and exercise, at any time and free of charge, the rights of access, rectification and erasure, as well as the rights to restrict processing, object to it, request data portability (where technically feasible), or withdraw their consent. Where applicable, you also have the right not to be subject to a decision based solely on automated processing, including profiling.
You can exercise these rights by writing to the postal address or email shown at the top of this policy. We may ask for an ID document to verify your identity when this cannot be done by less intrusive means.
If you feel your data protection rights have been infringed, especially when your rights have not been satisfied, you can lodge a complaint with the competent data protection authority (Spanish Data Protection Agency, AEPD).
Under article 21 of Spanish Law 34/2002 on information society services and electronic commerce, if you no longer wish to receive information about our services, you can opt out by sending an email to hola@quiropracticacatalunya.com with the subject "UNSUBSCRIBE".
11. Accuracy of the data
You guarantee that the data you provide is true, accurate, complete and up to date, and you undertake to notify any changes. You are responsible for any direct or indirect damage caused by failure to comply with this obligation.
If you provide data about third parties, you confirm that you have their consent and undertake to share this notice with them, releasing the organisation from any liability arising from failure to comply with this obligation.
12. Changes and updates
This privacy policy may be modified or updated based on legal requirements or to adapt it to the instructions issued by the Spanish Data Protection Agency, or as a result of changes to our website. We recommend that users visit our privacy policy periodically.
If you have any questions about this policy, you can contact ROBERT PUJOL SÁNCHEZ at the postal address or email shown at the top.