Privacy Policy

1. Data Controller

The data controller is Pedro Oscar Yelamo Vera, a physician licensed and regulated in Spain (Nº Colegiado 484814280), with a professional address at Calle Arbolantxa, 2, Piso 1 IZ, 48001 Bilbao, Vizcaya (Spain). You can contact us regarding privacy using the contact details published on the Website.

2. Data We Collect

• Identification and contact data: name, date of birth, email address, and telephone number.
• Health data: medical history, symptoms, current medications, and any information you share during the consultation, as well as documents we issue (reports, certificates, prescriptions).
• Booking and transaction data: appointment details and payment confirmation (payments are processed by third-party providers; we do not store full card numbers).
• Technical data: limited analytics and advertising measurement data, collected only with your consent (see “Cookies” below).

3. Legal Basis for Processing

We process your identification, contact, and health data on the basis of your explicit consent and for the provision of healthcare (Article 6(1)(a)/(b) and Article 9(2)(a)/(h) GDPR).

We process technical, analytics, and advertising data only on the basis of the consent you provide through our cookie banner (Article 6(1)(a) GDPR). We also process certain data to comply with our legal obligations, including medical record-keeping (Article 6(1)(c) GDPR).

4. How We Use Your Data

• To provide and document your telemedicine consultation and any resulting medical care.
• To issue prescriptions, certificates, or reports when clinically appropriate.
• To manage bookings, payments, and communications with you.
• To comply with legal, regulatory, and professional obligations.
• To measure and improve our website and advertising, only where you have consented.

5. Protection of Health Information

Your health information is treated as a special category of personal data and is given a high level of protection. All communications and data transmitted through the Website are protected in transit using SSL/TLS encryption, and access to your medical records is restricted to the treating physician and limited strictly to what is necessary to provide your care.

6. Data Sharing and Processors

We do not sell your personal data. We share data only where necessary to provide the service or comply with the law:

• Service providers (processors) that support scheduling, secure video consultation, and payment processing, under data processing agreements.
• Pharmacies or other healthcare providers, only where necessary to fulfil a prescription or referral you have requested.
• Public authorities, where we are legally required to disclose information.

7. Data Retention

We retain your medical records for the periods required by Spanish healthcare legislation (as a general rule, a minimum of five years from the date of each episode of care, and longer where specific regulations apply). Booking and billing records are retained for the periods required by tax and commercial law. Consent-based analytics data is retained only for as long as necessary for the purpose for which it was collected.

8. International Transfers

Your data is processed within the European Economic Area (EEA) wherever possible. If any processor transfers data outside the EEA, we ensure appropriate safeguards are in place, such as European Commission adequacy decisions or Standard Contractual Clauses.

9. Your Rights

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Request rectification of inaccurate or incomplete data.
• Request erasure of your data, subject to our legal record-keeping obligations.
• Request restriction of, or object to, certain processing.
• Request portability of the data you provided to us.
• Withdraw your consent at any time, without affecting processing carried out before withdrawal.
• Lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).

10. Cookies and Tracking

We use strictly necessary cookies to operate the Website. Analytics and advertising measurement (including Google tools) are loaded only after you accept them through our cookie banner, using consent mode so that no advertising or analytics identifiers are set until you consent. You can change your choice at any time by clearing the stored preference in your browser.

11. Children

The Website is not directed to children. Consultations concerning minors must be arranged and consented to by a parent or legal guardian.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is the one published on this page, identified by the “Last updated” date above.