Privacy policy

1. Data controller

• Owner: Pending confirmation: Full name or company name of the owner
• Tax ID (NIF/CIF): Pending confirmation: Tax ID of the owner
• Address: Carrer Maruja Mallo, 3, Local 3 (entrada per Carmen Conde), 08840 Viladecans
• Contact email: info@clinicallevant.com
• Data protection officer: Pending confirmation: State whether one has been appointed and their contact details

2. What data we process

Only the data you choose to give us:

• Contact form: first name, last name, email address and, optionally, phone number, service of interest and a short message. The language of the page you write from is also recorded.
• WhatsApp: if you message us, your number and the messages you send.

Please don’t include health data, diagnoses or medical history in the form or in your first message: we’ll discuss them at your appointment if needed. If you include them anyway, they will only be used to answer your request.

3. What we use it for

• Answering your contact or information request.
• Adding you, if you ask, to our priority contact list and letting you know when we open our appointment book.

We don’t build profiles, make automated decisions or send advertising.

4. Legal basis

The consent you give by ticking the box and sending the form (art. 6.1.a GDPR) and taking steps at your request before any agreement (art. 6.1.b). You can withdraw your consent at any time. Pending confirmation: Legal validation of the legal bases

5. How the form works

Form data is not stored in the website’s database: the server sends it by email to the clinic’s mailbox (info@clinicallevant.com) and it is handled from there. To prevent abuse, the server keeps, for 10 minutes, a count of attempts linked to an irreversible digest (hash) of your IP address, which is deleted automatically.

6. Retention

For as long as needed to handle your request and, if you asked to join it, while you are on our priority contact list. Pending confirmation: Specific retention and deletion period for received emails

7. Recipients and providers

We do not share data with third parties unless required by law. The following providers may access it as data processors:

• Web hosting: Pending confirmation: Hosting provider, country and safeguards
• Clinic email (mailbox receiving requests and sending server): Pending confirmation: Email/SMTP provider, country and safeguards

Third-party services that receive data while you browse or if you choose to use them:

• Fontshare (Indian Type Foundry): provides the site typeface. Your browser connects to api.fontshare.com and cdn.fontshare.com, which receive your IP address. It does not set cookies.
• OpenStreetMap (OpenStreetMap Foundation): provides the map images in the contact section. Your browser connects to tile.openstreetmap.org, which receives your IP address. It does not set cookies. See the Cookie policy.
• Google Maps (Google): only if you click “Get directions”, which opens the Google Maps website.
• WhatsApp (Meta): only if you open a WhatsApp link; the conversation is also governed by WhatsApp’s terms.

Pending confirmation: International data transfers depending on the final providers

8. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent, by writing to info@clinicallevant.com. If you believe your rights have not been respected, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

9. Security

Data is validated on the server before being sent and only authorised clinic staff can access it. Pending confirmation: Encrypted connection (HTTPS) and security measures of the final hosting and email

10. Minors

If you are under 14, the request must be made by your parent or legal guardian.

11. Changes to this policy

We will publish any change on this page, with the update date.