1. Home
  2. Privacy Policy

Legal

Privacy Policy

Last updated: 27 September 2026

To complete before launch: replace every [bracketed] field with the registered details of the business, and have this text reviewed by a Spanish lawyer. Health data carries stricter obligations than ordinary personal data.

1. Who is responsible for your data

Data controller: [Registered company name] ("VitaNord Fysioterapi Clinic")
Tax number (NIF/CIF): [NIF]
Address: C. Bautista Bertomeu Sober, 5, 1ª planta local 29, 03183 Torrevieja, Alicante, Spain
Email: info@vitanord.net
Data protection contact: [name / email, if appointed]

2. What we collect

WhereData
Booking formName, telephone, email, chosen treatment, therapist, date and time, and the optional reason you write for the appointment.
Contact formName, email, optional telephone, subject and message.
At the clinicClinical history, assessment findings, treatment notes and progress. This is health data under Article 9 GDPR.
WebsiteYour language choice and cookie preference. Analytics only if you consent.

3. Why we use it, and on what legal basis

  • To arrange and deliver your appointment: performance of a contract, Art. 6(1)(b) GDPR.
  • To keep your clinical record: Art. 9(2)(h) GDPR (health care by a health professional bound by professional secrecy), together with Spanish Law 41/2002 on patient autonomy.
  • To answer your enquiry: your consent or steps taken at your request, Art. 6(1)(a)/(b).
  • Invoicing, tax and accounting: legal obligation, Art. 6(1)(c).
  • Optional analytics and map embeds: your consent, Art. 6(1)(a), withdrawable at any time.

We do not use your data for automated decision-making or profiling, and we do not sell it.

4. Who else sees it

Only processors who help us run the clinic, under a written contract and only for our instructions: our website host, our email provider, our appointment/scheduling provider and our accountant. Where a provider is outside the European Economic Area, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision. We may also disclose data where the law requires it.

5. How long we keep it

  • Clinical records: at least five years from your last episode of care, as required by Spanish healthcare legislation.
  • Invoices and accounting records: as required by Spanish tax law (generally four to six years).
  • Enquiries that do not become appointments: up to one year.
  • Cookie consent: up to 12 months, then we ask again.

6. Your rights

You may ask us at any time to give you access to your data, correct it, erase it, restrict or object to its processing, or send it to another provider (portability). Where processing is based on consent, you can withdraw that consent without affecting what was done before. Write to info@vitanord.net. We may ask for proof of identity, and we answer within one month.

If you are not satisfied, you can complain to the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es.

7. Security

We apply technical and organisational measures appropriate to health data: access limited to the treating professionals, encrypted transmission (HTTPS), password-protected systems and professional secrecy binding all our staff.

8. Children

Appointments for patients under 14 must be booked by a parent or legal guardian, who provides the consent required under Spanish law.

9. Changes

If this policy changes we publish the new version here with a new date. Material changes affecting you will be communicated directly.

Book Appointment