1. Data controller
The controller of the personal data collected through this website will be the individual or legal entity that owns the professional activity. Before final publication, at least the following details should be completed or validated:
- Controller: [to be confirmed]
- Tax ID number: [to be confirmed]
- Professional or registered address: [to be confirmed]
- Contact email: hola@drabelenortuno.com
- Phone: 614 509 854
2. Purposes of processing
The data provided by users through the form or other contact channels may be processed for the following purposes:
- Handling requests for information or prior assessments.
- Managing contact prior to an appointment or consultation.
- Replying to enquiries sent by email or through WhatsApp.
- Maintaining communications related to the submitted request, always within the context of the relevant professional or pre-contractual relationship.
3. Legal basis
The legal basis for processing personal data will generally be the application of pre-contractual measures at the request of the data subject, the user's consent where applicable, and, where relevant, compliance with legal obligations arising from the activity carried out.
4. Categories of data
This website is expected to collect identifying and contact data, as well as any information users voluntarily include in their message. It is recommended not to send especially sensitive data or detailed clinical information through the form beyond what is necessary for initial guidance.
5. Data retention
Data will be kept for as long as necessary to handle the request and, where applicable, for the periods required by applicable law or while liabilities arising from the processing may remain.
6. Recipients and data processors
As a general rule, data will not be disclosed to third parties unless required by law. However, certain technology providers may act as data processors to deliver services related to website hosting, email, messaging, or contact form management.
Before publishing this policy as final, those providers should be identified precisely and it should be reviewed whether there are international data transfers or services subject to specific conditions.
7. Users' rights
Users may exercise their rights of access, rectification, erasure, objection, restriction of processing, and portability, as well as withdraw consent where that is the applicable legal basis, by contacting the email address provided and proving their identity when necessary.
Users also have the right to lodge a complaint with the Spanish Data Protection Agency if they consider the processing does not comply with applicable regulations.
8. Information security
Reasonable technical and organisational measures will be adopted to protect personal data against unauthorised access, accidental loss, alteration, or improper disclosure, in accordance with the level of risk and the final technical configuration of the website.