Privacy Policy
This website complies with the applicable data protection regulations, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR).
This Privacy Policy explains how personal data provided through this website is collected, used, and protected.
Data Controller
Data Controller: Xavier Martí Cabré
Professional role: Consultant Hand Surgeon
Professional address: Centro Sana, C/Eivissa, 6 CP: 07400, Alcudia, Illes Balears
Email address: info@handsurgerymallorca.com
Personal Data Collected
Through this website, personal data may be collected directly or indirectly, including:
- Name and surname
- Email address
- Telephone number
- Any information voluntarily provided by the user through contact forms, email, or messaging
This website does not intentionally collect special category data (such as health data) through online forms.
Purpose of Data Processing
Personal data provided by users will be processed for the following purposes:
- To respond to enquiries or appointment requests
- To manage communication with users
- To provide information related to the professional activity of the Data Controller
- To comply with legal obligations
Personal data will not be used for unsolicited commercial communications.
Legal Basis for Processing
The legal basis for processing personal data is:
- The explicit consent of the user when submitting their data
- Compliance with applicable legal obligations
Data Retention
Personal data will be retained only for as long as necessary to fulfil the purpose for which it was collected, and for the periods required by applicable law.
Data Recipients
Personal data will not be shared with third parties, except when required by law or when necessary for the proper provision of the requested service.
Where technical service providers are used (e.g. hosting or email services), they will act as data processors under appropriate data processing agreements in accordance with GDPR.
User Rights
Users have the right to:
- Access their personal data
- Rectify inaccurate data
- Request erasure of their data
- Request restriction of processing
- Object to processing
- Request data portability, where applicable
To exercise these rights, users may submit a written request to the email address indicated above, together with proof of identity.
Data Security
Appropriate technical and organisational measures are implemented to ensure the security, integrity, and confidentiality of personal data and to prevent unauthorised access, loss, or misuse.
Third-Party Links
This website may contain links to third-party websites. The Data Controller is not responsible for the privacy practices or content of such external sites.
Changes to This Privacy Policy
This Privacy Policy may be updated to reflect legal or technical changes. Users are encouraged to review it periodically.
Supervisory Authority
If users consider that their data protection rights have been infringed, they have the right to lodge a complaint with the relevant data protection supervisory authority, in particular the Spanish Data Protection Agency (AEPD) or the authority applicable in their country of residence.