Privacy policy

What data is collected and for what purpose

The contact form collects name, email address, telephone number where provided, the reason for the enquiry and the content of the message. The sole purpose of that processing is to attend to and answer the request received.

This form is not a clinical channel. It must not be used to send clinical information, records, reports or medical images, nor for enquiries requiring medical assessment. A message sent by this route neither initiates a clinical relationship nor replaces a consultation, and in an urgent problem an emergency service should be attended.

Legal basis for processing

Processing is based on the consent of the data subject, obtained expressly through the acceptance checkbox on the form, in accordance with article 6(1)(a) of the General Data Protection Regulation. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out beforehand.

Retention period

Data is retained for as long as necessary to deal with the request and thereafter for the period during which legal liabilities may arise from the processing. Once that period has elapsed the data is erased.

Recipients and processors

Data is not transferred to third parties except where legally required. The following service providers act as processors for the operation of the site: Vercel Inc. as hosting and audience measurement provider, and Web3Forms as the contact form delivery service. Both may process data outside the European Economic Area, in which case the transfer relies on the safeguards provided for in Chapter V of the General Data Protection Regulation.

Cookies and audience measurement

This site sets no cookies of any kind, whether first- or third-party, and uses no advertising identifiers. Visit counts are obtained through Vercel Web Analytics, which identifies each visit by a value derived from the request itself, without cookies, without collecting personal identifiers and without allowing a visitor to be tracked across different days or different websites. That value is discarded after 24 hours.

Rights of data subjects

The rights of access, rectification, erasure, restriction of processing, portability and objection may be exercised, as may withdrawal of consent, by writing to info@drpablovaquero.com stating the right being exercised. Proof of identity may be requested where necessary to deal with the request.

Where processing is considered not to comply with the regulations, a complaint may be lodged with the Spanish Data Protection Agency, www.aepd.es.

Security

Reasonable technical and organisational measures are applied to protect data against loss, misuse and unauthorised access. Information is transmitted between browser and server in encrypted form.