Privacy policy
Last updated: 6 November 2026
At Saude Clinic we treat your data with the confidentiality healthcare requires. This page explains what data we use, why, for how long and how to exercise your rights under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
Data controller
- Holder: Guilherme Fernando Souza Nunes (Saude Clinic) · Tax ID (NIF) 04721825V
- Address: Calle Valencia 16, Bajo 2, 03195 El Altet (Alicante), Spain
- Phone: +34 613 05 76 16 · Email: saudeclinicfisioterapia@gmail.com
What data we process
- Contact and appointment details: name, phone, email and the booked day and time, when you book on the website, WhatsApp, by phone or on Doctoralia.
- Health data needed to treat you: reason for the visit, medical history, allergies, medication, assessment, treatment and progress (clinical record).
- Signed documents: data protection, informed consents and, if you give it, permission to publish images.
- Messages you send us on WhatsApp, email or social media.
Why we use it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Managing your appointments and sending reminders | Performing the care relationship you request (Art. 6.1.b GDPR) |
| Providing physiotherapy care and keeping your clinical record | Healthcare (Art. 9.2.h GDPR) and the legal duty under Spanish Law 41/2002 on patient autonomy (Art. 6.1.c) |
| Answering your questions | Your request (Art. 6.1.b GDPR) |
| Publishing images of your treatment on the website or social media | Your explicit consent, which you can withdraw at any time (Art. 6.1.a GDPR) |
We do not profile you or make automated decisions with your data.
How long we keep it
- Clinical record: at least 5 years after discharge from each episode of care, or longer if Valencian regional law requires it.
- Appointment and contact details: while the care relationship lasts and, afterwards, for the legal periods needed to handle possible liabilities.
- Image permission: until you withdraw it.
Who else accesses your data
We do not share your data with third parties unless required by law. To operate, we use providers that process data on the clinic's behalf, under contract and with security measures:
- Cloudflare: hosting for the website and the patient database, stored on servers in the European Union.
- Google (Google Drive): archive of signed documents.
- Doctoralia: online booking, while it is still in use.
- WhatsApp (Meta): communication with you when you choose that channel.
Some of these providers are based in the United States. Those transfers rely on the EU-US Data Privacy Framework or standard contractual clauses approved by the European Commission.
Your rights
You can request access, rectification, erasure, objection, restriction and portability of your data, and withdraw any consent you have given at any time. Write to saudeclinicfisioterapia@gmail.com or to the postal address above, attaching a copy of your ID. Please note that clinical records must be kept for the legal period even if you ask for their erasure.
If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).
Security
We apply technical and organisational measures to protect your data: password access for clinic staff only, encrypted connections, backups and a log of who views or changes each clinical record.
Cookies
This website does not use advertising or analytics cookies.
| Cookie | Purpose | Duration |
|---|---|---|
| saude_session | Keeps the session in the clinic's private management area (authorised staff only). Technical and necessary. | 12 hours |
| Google Maps | Only if you click «Show map» on the contact page: Google may set its own cookies. | Set by Google |
You can delete or block cookies in your browser settings.