Política de Privacidad

Privacy Policy

Responsible for the treatment
Alef Med (hereinafter, “the Clinic” or “Alef Med”), with address in Valencia (Spain), C/ de Cadis, 79
L, Eixample, 46004.
Corporate name: Limited Company — NIF/CIF: B10844793
Contact email: info@alef-med.com — Phone: +34 960 397 016
If you have a Data Protection Officer (DPD/DPO): ADDECUO DATA S.I, contact: info@addecuo.es
Purposes of the treatment
a) Management of appointments, medical records and provision of aesthetic medicine and cosmetology services.
b) Attention to inquiries and requests sent through forms, email or telephone (including WhatsApp if applicable).
c) Administrative and accounting management (invoicing, collections, justification to Public Administrations).
d) Sending appointment reminders and communications related to the contracted service.
e) With your consent, sending commercial communications (news, promotions, events) by electronic means.
f) With your express consent, use of “before/after” images or testimonials for informational or promotional purposes.
g) Website security and fraud prevention.
h) Web analytics and cookies, in accordance with the Cookies Policy.
Legal Bases
a) Execution of a contract or application of pre-contractual measures (art. 6.1.b GDPR): appointment management, provision of the service.
b) Compliance with legal obligations (art. 6.1.c GDPR): health, fiscal and accounting obligations.
c) Vital interest (art. 6.1.d GDPR) in cases of health emergency.
d) Legitimate interest (art. 6.1.f GDPR): site security, fraud prevention, communications about similar services to customers, in accordance with art. 21.2 LSSI.
e) Consent (art. 6.1.a GDPR): commercial communications, analytics/non-technical cookies, use of images and testimonials.
f) Special categories of health data: art. 9.2.h GDPR (provision of health care) and, when necessary, explicit consent (art. 9.2.a GDPR).
Types of data we process
Identifiers and contact details (name, DNI/NIE, address, telephone number, email), clinical data relevant to the provision of the service, clinical history and images, payment and billing data, communications maintained and, where appropriate, data derived from cookies/analytics (they do not directly identify unless otherwise indicated).
Origin
The data come from the interested party himself or his legal representative (for example, in the case of minors), as well as, where appropriate, from third parties necessary for the provision of the service (insurers, laboratories, other health professionals) with their authorization or legal protection.
Recipients and processors
a) Alef Med professionals and healthcare personnel involved in your care.
b) Providers who provide services to the Clinic (appointment management/CRM, web hosting and maintenance, messaging, emailing, payment gateways, analytics), acting as “data processors” under contract in accordance with art. 28 GDPR.
c) Public Administrations and health, fiscal or judicial authorities when there is a legal obligation.
d) Insurers or other health centers/professionals when necessary for the provision of the service and in accordance with regulations.
International transfers
In principle, international transfers are not envisaged. If some technology providers place data outside the European Economic Area, appropriate safeguards (standard contractual clauses, adaptation decisions or other mechanisms allowed by the GDPR) will be guaranteed.
Storage periods
The data will be kept for the time necessary for the corresponding purpose and, in any case, for the applicable legal periods. The medical record will be kept at least for the minimum periods established by current health regulations. Marketing data will be kept as long as you do not revoke your consent or object; accounting/tax data, for the statutory statute of limitations.
Rights of individuals
You can exercise your rights of access, rectification, deletion, opposition, limitation of treatment and portability, as well as withdraw the consent granted, by sending a request to [email] or to the address indicated in point 1, indicating “Data Protection” and proving your identity.
You also have the right to file a complaint with the Spanish Data Protection Agency: www.aepd.es.
Minors
Services will not be provided to minors without the intervention and/or authorization of their legal representatives, in accordance with applicable regulations.
Commercial Communications
You can object at any time to receiving commercial communications, as well as withdraw your consent, by using the unsubscribe link included in each communication or by writing to [email].
Security
Appropriate technical and organizational measures are applied to protect data against unauthorized access, loss, alteration or disclosure, taking into account the nature of the data, the state of the art and risks.
Cookies and analytics
The use of technical cookies is necessary for the operation of the site. Personalization and analytics/marketing cookies are used only with your consent. You can obtain detailed information and manage your preferences in the Cookie Policy.
Policy updates
We may update this Privacy Policy to reflect regulatory or data processing changes. We will publish the current version on this site, indicating the date of the last update.

‍