Privacy policy

PRIVACY POLICY

1. Data Controller

Data Controller: Dr. Leonidas Alevizos
Professional Activity: General and Digestive Surgery, Trichology and Medical Services
Email: pacientes@cirugiasur.es
Phone: +34 955 70 02 87

This Privacy Policy applies to the websites owned by the Data Controller, including www.cirugiasur.es and www.cirugiasur.com, as well as any redirection between these domains.

2. Purpose of Processing

Personal data provided through the website contact form, email or WhatsApp will be processed for the following purposes:

To manage requests for information or medical appointments.
To respond to user inquiries.
Where applicable, to manage the medical care relationship.
To comply with legal obligations related to healthcare activity.

Personal data will not be used for commercial or marketing purposes without explicit consent.

3. Categories of Data Processed

The following categories of personal data may be processed:

Identification data (name and surname).
Contact data (phone number, email address).
Health-related data voluntarily provided by the user.

4. Legal Basis

Processing of personal data is based on:

The data subject’s consent (Art. 6(1)(a) GDPR).
Pre-contractual measures requested by the data subject (Art. 6(1)(b) GDPR).
Compliance with legal obligations in the healthcare field (Spanish Law 41/2002).
In the case of health data, Art. 9(2)(h) GDPR, within the framework of healthcare services provided by a professional subject to professional secrecy.

5. Data Retention

Personal data will be retained:

For as long as necessary to manage the request for information or appointment.
In case of a medical care relationship, for at least 5 years from the date of discharge from the medical process, in accordance with healthcare regulations.
Thereafter, data will remain blocked for the legally established limitation periods.

6. Recipients

Personal data will not be disclosed to third parties unless required by law or necessary for the proper provision of healthcare services.

Technology providers necessary for website operation, email or messaging systems may have access to the data as data processors under Article 28 GDPR.

7. WhatsApp Communications

If the user contacts via WhatsApp, they accept the use of this communication channel. WhatsApp may involve international data transfers outside the European Economic Area in accordance with the privacy policy of Meta Platforms, Inc.

Users are advised not to send detailed clinical information through this channel.

8. Data Subject Rights

Data subjects may exercise the following rights:

Right of access
Right to rectification
Right to erasure
Right to object
Right to restriction of processing
Right to data portability

Requests may be sent to: pacientes@cirugiasur.es

Data subjects may withdraw their consent at any time.

They also have the right to lodge a complaint with the Spanish Data Protection Authority (www.aepd.es).

9. Use of Cookies

This website uses its own and third-party cookies. Detailed information is available in our Cookie Policy.

10. Changes to this Privacy Policy

The Data Controller reserves the right to update this Privacy Policy to adapt it to legal or technical changes. Updates will be published on this page.

Where changes significantly affect the processing of personal data, data subjects will be duly informed.

Your Well-being, Our Expertise