Privacy policy

Data controller: Dr. Daniel Enrique Pleguezuelo Garrote. Contact: consulta@pleguezuelo.com.

Purpose: to manage your appointment request and the waiting list, to communicate with you about it and, where applicable, to arrange the consultation. The information you provide about the reason for consultation may include health data; it is processed solely for this purpose and with your explicit consent.

Legal basis: your consent (Articles 6(1)(a) and 9(2)(a) GDPR), which you may withdraw at any time.

Recipients: data are not disclosed to third parties unless legally required. Web hosting and email are provided by processors acting on our behalf. Consultation fees are paid on Stripe, which has its own privacy policy.

Retention: while the request is active and afterwards for as long as needed to meet any legal obligations. You can ask for your account to be deleted at any time.

Your rights: access, rectification, erasure, objection, restriction and portability, by writing to consulta@pleguezuelo.com. You may also complain to the Spanish Data Protection Agency (aepd.es).

Security: the connection is encrypted and passwords are stored irreversibly hashed. Notification emails never include the clinical content of your request or messages.