Home / Privacy Policy

Legal

Privacy Policy

Last updated: 1 January 2025

Clinica Mireia ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose and safeguard your personal information when you visit our website clinicamireia.com or use our services, in accordance with the General Data Protection Regulation (GDPR) and applicable Spanish data protection law.

1. Data Controller

The data controller responsible for your personal data is:

  • Business name: Clinica Mireia
  • Address: Carrer de Provença, 147, 08036 Barcelona, Spain
  • Email: info@clinicamireia.com
  • Phone: +34 93 123 45 67

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

  • Contact data: name, email address, phone number
  • Appointment data: preferred treatment, requested appointment date/time
  • Communication data: messages you send us via our contact form
  • Technical data: IP address, browser type, device information, pages visited, time spent on pages (collected via cookies, subject to your consent)

We do not collect any special categories of data (such as health data, biometric data, or genetic data).

3. How and Why We Use Your Data

We use your personal data for the following purposes:

  • To process appointment bookings and respond to your enquiries (legal basis: performance of a contract / legitimate interests)
  • To communicate with you regarding your appointments or services (legal basis: legitimate interests)
  • To improve our website and services through analytics (legal basis: consent, where required)
  • To comply with legal obligations (legal basis: legal obligation)

4. Cookies

We use cookies and similar tracking technologies on our website. For full details of the cookies we use and how to manage them, please see our Cookie Policy.

Where your consent is required for the use of cookies (e.g. analytics or marketing cookies), we will ask for your consent via our cookie banner before placing such cookies. You may withdraw your consent at any time.

5. Google Consent Mode v2

Our website implements Google Consent Mode v2. By default, all non-essential consent signals are set to "denied" until you provide your explicit consent via our cookie banner. This means no personalised advertising or detailed analytics data is collected until you choose to accept cookies.

6. Data Sharing and Third Parties

We do not sell your personal data to third parties. We may share your data with trusted service providers who assist us in operating our website and business, subject to strict confidentiality agreements. These may include:

  • Website hosting providers
  • Email service providers
  • Analytics providers (only with your consent)

All third-party processors are required to handle your data in accordance with GDPR.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Appointment and contact data is typically retained for up to 3 years. Analytics data (where consented) is retained in accordance with the relevant provider's standard retention periods.

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right of access – you may request a copy of the data we hold about you
  • Right to rectification – you may ask us to correct inaccurate data
  • Right to erasure – you may ask us to delete your data in certain circumstances
  • Right to restriction – you may ask us to limit how we use your data
  • Right to data portability – you may request your data in a structured, machine-readable format
  • Right to object – you may object to certain processing activities
  • Right to withdraw consent – where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at info@clinicamireia.com. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. Our website uses HTTPS encryption for all data transmission.

10. International Transfers

Your personal data is stored on servers located within the European Economic Area (EEA). If any transfer outside the EEA is necessary, we ensure adequate safeguards are in place in accordance with GDPR requirements.

11. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos – AEPD): www.aepd.es.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website. The date at the top of this page indicates when the policy was last revised.

13. Contact Us

For any questions about this Privacy Policy or our data practices, please contact us at: