Privacy policy
Demo text for a fictional practice. Clínica Dra. Serra does not exist and this document has no legal effect.
Data controller
Clínica Dra. Serra, Carrer de Provença 245, 1r 2a, 08008 Barcelona, is responsible for the personal data collected through this website and during your care. You can reach us at hola@clinicaserra.example with any question about your data.
What data we process and why
When you request an appointment we process your name, contact details and the reason for your visit in order to arrange and confirm it. During care we keep a clinical record, which includes health data, as required by Law 41/2002 on patient autonomy and clinical documentation. Health data is a special category of data and is handled under the strictest safeguards.
Legal basis and retention
We process your data to provide health care, to meet our legal obligations and, for the booking form, on the basis of your own request. Clinical records are kept for at least five years after the last episode of care, or longer where Catalan health legislation requires. Booking requests that do not lead to a visit are deleted within six months.
Who has access
Only the clinical and reception team has access to your record. We do not sell or share your data for marketing. We may share it with a laboratory, a specialist or your insurer when needed for your care or to process cover, and with public authorities when the law requires. Any provider that processes data on our behalf is bound by contract and by the GDPR.
Your rights
You may access, correct or delete your data, limit or object to its processing and request portability by writing to hola@clinicaserra.example with a copy of your ID. You may also lodge a complaint with the Catalan Data Protection Authority (APDCAT) or the Spanish Data Protection Agency (AEPD). This policy follows Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018.