Privacy policy

When you submit a form, we process your name, the email address or telephone number you provide, your preferences for availability or session format, the page from which you contact us, and any brief reason for your enquiry that you choose to include. That reason may reveal health information.

We use this data solely to respond to your request and follow up on it. Submitting a request does not confirm an appointment or a place. We do not use the reason for your enquiry for advertising, profiling or automated decision-making.

Provide only the details we need to respond. If you are requesting care for a minor, the child's parent or legal representative must submit the form.

The legal basis for responding to your request is your consent under Article 6(1)(a) of the General Data Protection Regulation (GDPR). If the reason for your enquiry reveals health data, we process it with your explicit consent under Article 9(2)(a) of the GDPR.

The consent box is unticked by default. When you submit it, we record the version of this policy that you accepted. You can withdraw your consent by writing to teresaramirezortegonpsicologia@gmail.com . Withdrawing consent does not affect the lawfulness of processing carried out before we receive the withdrawal. Without your contact details and consent, we cannot handle your request through this channel.

Only Teresa and authorised members of her practice can access your request. CleverPsico and Railway provide service management and hosting. Vercel hosts the website, and Resend sends the private notification. The notification contains an opaque reference number and does not include the reason for the request or the applicant's contact details.

These providers operate under their terms and data processing agreements. Where providers outside the European Economic Area are involved, the contractual safeguards provided for by the GDPR apply, including standard contractual clauses where applicable. We do not disclose your data for commercial purposes simply because you submitted the form.

We retain online requests, records of consent and the technical notification for 90 days from submission. After that period, the system deletes them automatically in batches, unless they must be temporarily blocked to meet a legal obligation or defend a claim.

If a care relationship begins, any information that must be included in the clinical record is processed separately and kept for the retention periods that apply to clinical documentation. Backups are restricted from ordinary use and deleted in line with the provider's secure retention cycle.

Where applicable, you may request access, rectification, erasure, restriction of processing or data portability, object to processing, or withdraw your consent by writing to teresaramirezortegonpsicologia@gmail.com . We may ask for reasonable information to verify your identity.

You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) at aepd.es (opens in a new tab) .

We apply technical and organisational measures appropriate to the risks to protect personal data. The website may retain technical security and operational logs for as long as necessary to detect misuse and resolve incidents.

The cookie policy explains the website's use of cookies and measurement technologies. If this processing changes, we will publish a new version and ask you to accept it again where necessary.