1. Data controller
Cristina Campillo Costoya, tax ID 48324327Q. Professional address: Carrer Pare Pere, 1, 1st floor, door 4, 03700 Dénia, Alicante, Spain. Contact: [email protected] and +34 613 087 797.
2. Data processed and source
Data you provide directly when contacting the practice or during the professional relationship may be processed: identification and contact details, information required for appointments and billing and, once psychological care begins, health data and care records. This website has no forms and is not intended for minors.
3. Purposes and legal bases
- Enquiries and appointments: pre-contractual steps and performance of the professional relationship.
- Psychological care and care records: performance of the professional relationship and processing necessary for care under Article 9(2)(h) GDPR, subject to professional secrecy.
- Billing and legal duties: compliance with legal, tax, professional and care obligations.
- Website security: legitimate interest in keeping the service secure.
4. Recipients and providers
Data is not sold or disclosed except where legally required or necessary to deliver the service. Providers may include Cloudflare (hosting and security), Google Workspace and Google Meet (email and video therapy) and, only if you choose that channel, WhatsApp/Meta. Authorities, courts or professional bodies may receive information where required by law.
Some providers may process data outside the European Economic Area. Where applicable, GDPR safeguards such as adequacy decisions or standard contractual clauses will be used.
5. Retention
Enquiries are retained for as long as needed to respond and address possible liabilities. Care records are retained for the periods required by applicable law and for at least five years after discharge from each care process, without prejudice to longer legal periods. Tax records are retained for statutory periods.
6. Rights
You may request access, rectification, erasure, objection, restriction or portability where applicable by contacting [email protected] or the professional address above. Identity verification may be requested. You may also complain to the Spanish Data Protection Agency.
7. Communications and security
No automated decisions or advertising profiles are used. Avoid including unnecessary clinical information in your first email or WhatsApp message. These channels are not for emergencies; in immediate danger contact 112 or your local emergency services.