Privacy Policy

In accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD), we provide you with the following information:

1. Data Controller

The owner of this website and the Data Controller for the personal data provided through it is:

Jordi Padrós Augé, Miguel Cano Gutiérrez y Arnau Cerdà Ribó – “FISIOCRANEO”
Domicilio: C/ Alcoi nº 12, bajos 4ª, 08225, Terrassa
CIF: 47882158E
Contact and Data Protection Email:: contacto@fisiocraneo.com

2. Personal Data Collected on This Website

This website is for informational purposes only and therefore does not include contact forms or appointment booking forms.

The only personal data that may be collected are:

• Data that you voluntarily provide when contacting us by email, telephone, or WhatsApp.
• Technical data obtained through anonymized analytical cookies, which do not allow you to be identified.

This website does not collect or process health data or any other special categories of personal data.

3. Purposes of Processing

The personal data you provide may be used to:

1. Respond to your requests for information or contact when you communicate with us by email, telephone, or WhatsApp.
   
   
2. Manage administrative matters related to those communications.
   
   
3. Obtain website usage statistics through Google Analytics using IP anonymization, without collecting personally identifiable information.

No profiling or automated decision-making producing legal effects or similarly significant effects is carried out.

4. Online Appointments (External Platform)

The appointment booking system is provided through an external platform independent of this website: https://app.reasoningphysios.com/CitaOnline/…

When you enter your personal data on that platform to request an appointment, your data is processed by FISIOCRANEO as the Data Controller, since it forms part of the management of the healthcare relationship and the physiotherapy services provided.

The booking platform acts as a Data Processor, providing only the technical infrastructure required to manage appointments. Personal data is processed in accordance with the contractual terms agreed with FISIOCRANEO and under its instructions, applying the security measures required by the GDPR.

This website (fisiocraneo.com) does not directly collect personal data; such data is collected through the appointment management platform as part of the requested service.

5. Legal Basis for Processing

Under the GDPR, the legal bases for processing your personal data are:

• Your consent when you voluntarily contact us using the available communication channels.
  
  
• The legitimate interest of the Data Controller in managing communications received.
  
  

Analytical cookies are processed based on your prior consent, which you may withdraw or modify at any time through our Cookie Policy.

6. Data Retention

Personal data provided through email, telephone, or WhatsApp communications will be retained:

• For the time necessary to respond to your request.
  
  
• For any legally required retention periods relating to tax obligations or professional liability.
  

Anonymized browsing data may be retained in accordance with Google Analytics’ configuration settings.

7. Recipients and Data Processors

Personal data will not be disclosed to third parties unless required by law.

Service providers that may have access to personal data in order to provide services (such as hosting providers, email services, WhatsApp/Chaty, or web analytics providers) act as Data Processors under the corresponding contractual agreements and GDPR-compliant safeguards.

8. International Data Transfers

International transfers of personal data are not anticipated, except those resulting from the use of services such as:

• Google Analytics, which applies safeguards such as Standard Contractual Clauses (SCCs) and IP anonymization.
  
• WhatsApp, owned by Meta Platforms, which operates through international service providers and applies GDPR compliance mechanisms.

9. Your Rights

You may exercise your rights of: Access, Rectification, Erasure, Restriction of processing, Data portabilit, Objection by writing to: contacto@fisiocraneo.com

You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD): https://www.aepd.es

10. Security

The Data Controller implements appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of the personal data processed.

11. Source of the Data

The personal data processed originates exclusively from:

• Communications sent directly by you via email, telephone, or WhatsApp.
  
  
• Technical information generated by non-identifying analytical cookies.