PRIVACY POLICY


Please read this Privacy Policy carefully. It describes how we use the data you provide, always in accordance with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 (GDPR), the Spanish Organic Law on Personal Data and Guarantee of Digital Rights (LOPDGDD), and other applicable regulations.


Our goal is transparency. If you have any questions after reading this policy, please contact us through any of the available communication channels.


I.- DATA CONTROLLER



  • Controller: Mercè Rafecas Codina.

  • Tax ID (NIF): 52422910E.

  • Address: C/ del Garona, 47B 08810 Sant Pere de Ribes (Spain).

  • Email: merce@mercerafecas.com.


II.- GUIDING PRINCIPLES (GDPR) We are committed to processing data according to the principles of: Legality, Lawfulness (express consent or contractual/legal necessity), Fairness and transparency, Data minimization, Purpose limitation, Accuracy, Security, and Storage limitation.


III.- USER CONSENT Filling out contact forms, after accepting this Policy, constitutes unequivocal consent to the automated processing of data. Consent is also implied if the user contacts us directly through other website channels. Only the minimum necessary data is requested to respond to inquiries regarding therapies. Special categories of data (sensitive data) will only be requested when necessary for the actual provision of therapy services.


IV.- PURPOSES OF PROCESSING



  1. Responding to user inquiries regarding therapies, working methods, and pricing.

  2. Management, administration, billing, and service delivery.

  3. Therapeutic follow-up as required by the nature of the service.


V.- DATA RETENTION Data will be kept for the minimum period necessary for the specific purpose. Once the purpose is fulfilled or the service ends, data will be blocked (Art. 17.3 GDPR) for the duration of the legal statute of limitations to address potential liabilities, after which it will be permanently deleted.


VI.- LEGAL BASIS (LAWFULNESS) The legal basis is the consent of the data subject, including special categories of data if therapy is contracted. Acceptance of this policy is mandatory to process requests through this website.


VII.- RECIPIENTS Data will not be transferred to third parties except under legal obligation (Public Bodies, Tax Agency, Law Enforcement, or Courts).


VIII.- DATA PROTECTION RIGHTS You may exercise your rights of access, rectification, objection, erasure, restriction, and portability by writing to merce@mercerafecas.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).


IX.- MINORS The website content is not intended for minors under 18; they must be accompanied by a legal guardian. Only users aged 14 and over may personally provide consent for data processing.


X.- SECURITY AND CONFIDENTIALITY We implement technical and organizational measures to prevent loss or unauthorized access. In the event of a security breach, we commit to notifying the Supervisory Authority within 72 hours. All data is treated with strict confidentiality.


XI.- INTERNATIONAL DATA TRANSFERS If data is stored on servers outside the European Economic Area (EEA), we ensure compliance with GDPR standards through appropriate contractual clauses.


XII.- MODIFICATIONS Mercè Rafecas Codina reserves the right to modify this Privacy Policy. Any changes will be published at least ten days before they take effect.

Scroll to Top