Last updated: [day/month/year]

At Bienaimé, we respect the privacy of our website visitors and patients. This Privacy Policy outlines how we collect, use, store, and protect the personal data provided to us through our website, online booking system, and contact channels.

1. Data Controller

The entity responsible for processing your personal data is:

• Data Controller: Gabriela Ortiz B. / [full legal name]

• Trading Name: Bienaimé

• Tax ID/NIE: [number]

• Professional Address: [full address, Madrid, Spain]

• Email: [email address]

• Phone: [phone number]

• Professional Registration Number: [number, if applicable]

2. Personal Data Collected

Depending on how you interact with our website and Bienaimé's services, we may collect the following categories of data:

• First name and last name.

• Email address, phone number, and other contact details.

• Information related to appointment scheduling and bookings.

• Billing and payment information, where applicable.

• Communications sent via forms, email, phone, or WhatsApp.

• Technical data, such as IP address, device type, browser, and navigation data.

• Health-related data required to assess, deliver, and monitor physiotherapy treatments.

Health-related data constitutes a special category of personal data. It will only be processed when necessary to provide clinical healthcare services, in compliance with strict confidentiality and security measures.

3. Purposes of Data Processing

Bienaimé may process personal data for the following purposes:

Inquiries and Information Requests

To respond to inquiries received via online forms, email, phone, WhatsApp, or other designated contact channels.

Appointment Management

To request, confirm, reschedule, send reminders for, or cancel appointments, as well as to manage service availability.

Provision of Healthcare Services

To conduct physiotherapy assessments, deliver treatments, monitor clinical progress, manage clinical care, and maintain the necessary medical records.

Administrative and Billing Management

To manage payments, invoices, treatment packages, refunds, and to fulfill applicable tax, accounting, and administrative obligations.

Service-Related Communications

To send booking confirmations, appointment reminders, pre- or post-treatment instructions, and other communications necessary to deliver the requested service.

Marketing Communications

To send updates, promotions, or commercial information regarding Bienaimé only when the user has provided explicit consent or when another legal basis applies.

Website Security and Operation

To maintain the security of our website, prevent fraudulent activities, resolve technical issues, and analyze its overall performance.

4. Legal Basis for Processing

The legal bases for processing your personal data may include:

• The performance of pre-contractual measures or a contract when a user requests information, schedules, or books a service.

• Compliance with legal, tax, accounting, healthcare, and administrative obligations.

• The provision of health care or physiotherapy treatment by professionals bound by professional secrecy and confidentiality obligations.

• The explicit consent of the data subject for specific purposes, such as marketing communications or non-essential cookies.

• The legitimate interest of Bienaimé in maintaining website security, preventing fraud, and effectively managing patient care, provided that the rights and freedoms of our patients do not override these interests.

Where processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

5. Health-Related Data

Health data provided during a consultation, physical assessment, or treatment session will be processed exclusively to deliver clinical care, monitor patient progress, and fulfill applicable professional and statutory obligations.

Access to this clinical information is strictly restricted to authorized healthcare professionals and partners who need to know such data to provide the treatment and who are bound by professional secrecy.

We strongly advise against sending sensitive clinical information through general contact forms, social media platforms, or public messages. Please only use the secure, private channels designated by Bienaimé.

6. Data Retention Period

Your data will be retained only for as long as necessary to fulfill the purposes for which it was collected, and subsequently, for the retention periods required by applicable law.

Specifically:

• Inquiry data will be kept for as long as necessary to address your request and manage potential liabilities.

• Client, billing, and payment records will be retained for the legally established tax and accounting periods.

• Clinical medical records will be preserved for the periods mandated by applicable healthcare regulations.

• Data used for marketing communications will be kept until you withdraw your consent or request its deletion.

• Cookie data will be retained for the durations specified in our Cookie Policy.

When personal data is no longer required, it will be securely deleted or blocked during the periods in which legal liabilities could arise.

7. Recipients and Third-Party Providers

Bienaimé does not sell personal data, nor do we disclose it to third parties unless we are under a legal obligation to do so or it is strictly necessary to deliver the requested healthcare service.

Bienaimé may utilize external service providers for:

• Website hosting and maintenance.

• Appointment scheduling and booking systems.

• Email and communication platforms.

• Messaging services, including WhatsApp.

• Payment processing.

• Tax, accounting, or legal counsel.

• Web analytics and cookie management, where applicable.

These third-party providers process data solely on Bienaimé's instructions and are subject to corresponding legal and contractual data protection obligations.

Our scheduling platform is [Platform Name]. When your data is processed directly by this booking platform, you should also refer to their independent privacy policy.

8. International Data Transfers

Some of our technology providers may store or process information outside the European Economic Area (EEA).

Where international data transfers occur, Bienaimé will ensure that the legally required safeguards are in place, such as adequacy decisions, Standard Contractual Clauses (SCCs) approved by the European Commission, or other legally recognized mechanisms.

You may request additional information regarding these safeguards by writing to [email address].

9. Children's Data

Minors must obtain the authorization of their parents, legal guardians, or legal representatives before providing personal data or scheduling clinical treatment.

Bienaimé reserves the right to request any information necessary to verify this parental consent when appropriate.

10. Your Rights as a Data Subject

You are entitled to exercise the following rights regarding your personal data:

• Access: To find out what personal data we are processing.

• Rectification: To request the correction of inaccurate or incomplete information.

• Erasure: To request the deletion of your data when applicable.

• Objection: To object to the processing of your data under certain circumstances.

• Restriction: To request that we temporarily restrict the processing of your data.

• Data Portability: To receive your data in a structured, commonly used format and transmit it to another controller, where applicable.

• Withdrawal of Consent: To withdraw any consent previously granted.

• Avoid Automated Decisions: The right not to be subject to a decision based solely on automated processing which produces legal effects or significantly affects you, where applicable.

To exercise these rights, please send a request to [email address], specifying the right you wish to exercise and providing the necessary information to verify your identity.

If you believe your personal data has not been processed in accordance with regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) via www.aepd.es.

11. Communications via WhatsApp

When you contact Bienaimé via WhatsApp, your phone number, profile name, messages, and shared files may be processed to answer your inquiry and manage your appointments or physiotherapy services.

The use of WhatsApp is also subject to the terms of service and privacy policies of its respective provider.

We recommend that you do not send highly sensitive clinical records through this platform unless explicitly requested by Bienaimé and necessary for your treatment.

You may request to continue communications through any other available channel.

12. Cookies and Similar Technologies

Our website may use technical cookies necessary for its operation and, subject to your consent, analytical, personalization, or marketing cookies.

Detailed information regarding the cookies used, their providers, purposes, and retention periods is available in our independent Cookie Policy.

Non-essential cookies will not be installed on your device until you have granted your consent through the cookie banner.

13. Security and Confidentiality

Bienaimé implements appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, alteration, disclosure, or destruction.

However, no system connected to the Internet can be guaranteed to be completely secure. Users should avoid sending sensitive medical information through channels that do not offer adequate security safeguards.

14. Accuracy of Data

You guarantee that the data provided is true, accurate, and up to date, and you agree to notify us of any changes.

Bienaimé is not responsible for any consequences arising from false, inaccurate, incomplete, or outdated information provided by the user.

15. External Links and Services

Our website may contain links, embedded content, or tools belonging to third parties.

Bienaimé does not control the privacy practices of these external websites or providers. We recommend reviewing their respective privacy policies before providing any personal information.

16. Modifications to This Policy

Bienaimé may modify this Privacy Policy to adapt it to legal, technical, or service-related changes.

The current version will always be available on our website and will display the date of its last update.

17. Contact Information

For any questions regarding this Privacy Policy or the processing of your personal data, you can contact Bienaimé at:

• Email: [email address]

• Phone: [phone number]

• Address: [full professional address]