Privacy Policy
1. Responsible for the processing
Identity: Francisco de Borja Arteaga Romero
NIF: 30233275M
Address: Avenida de la Buhaira 30, portal 5, 4B, 41018 Seville
Email: info@drarteaganeurocirugia.com
2. What data do we process
We process the data you provide us through the contact and appointment request forms, by email, by phone or via WhatsApp: name, surname, phone number, email address and the content of your message.
If your message includes information about your health (symptoms, diagnoses, tests, or treatments), it will be treated as data of special category, Only with your explicit consent and for the purpose of evaluating and responding to your inquiry.
3. Purpose of the treatment
Your data will be processed for:
- To respond to the queries and requests you make through the website.
- Managing the application and scheduling appointments.
- Evaluate your case when you request a second opinion or provide clinical information.
No automated decisions will be taken or profiles created based on your data.
4. Legitimation
The legal basis for the processing is:
- His consent, which is granted by checking the acceptance box on the form or by voluntarily contacting us (Art. 6.1.a GDPR).
- His explicit consent for the health data you choose to provide (Article 9.2.a GDPR).
- The Application of pre-contractual measures at his/her request, when he/she requests an appointment (Article 6.1.b GDPR).
You may withdraw your consent at any time, without this affecting the legality of the processing that took place before your withdrawal.
5. Data retention
The data will be kept for the time necessary to process your request. If an assistance relationship is not established, it will be deleted within a maximum of one year from your last communication.
If you become a patient, your data will be part of your medical record and will be kept for the periods required by Law 41/2002 on patient autonomy and by applicable health regulations.
6. Recipients
Your data will not be disclosed to third parties, except where required by law.
To provide the service, they may access your data, as data controllers, the providers who provide technical support for the website and for communications: the web hosting provider, the email and WhatsApp provider, if they decide to contact you via those channels. All of them are subject to contract and to the obligation of confidentiality.
7. International transfers
Some providers, such as Google or WhatsApp (Meta), may process data outside the European Economic Area. These transfers are carried out with appropriate guarantees, such as the EU-US Privacy Shield Framework (Data Privacy Framework) or the standard contractual clauses approved by the European Commission.
8. Your rights
You can exercise your rights access, rectification, deletion, opposition, limitation of processing and portability, as well as withdrawing the consent given, by writing to info@drarteaganeurocirugia.com or by post to the address indicated in section 1. You must provide proof of your identity.
If you believe that the treatment does not comply with the regulations, you can file a complaint with Spanish Data Protection Agency (www.aepd.es).
9. Security
Appropriate technical and organizational measures are applied to ensure the security and confidentiality of your data, especially health data, and to prevent their loss, alteration, or unauthorized access.
10. Minors
This website is not directed to persons under 14 years of age. Any inquiries regarding minors must be made by their parents or legal guardians.
11. Cookies
The information about the cookies used on this website can be found in Cookie policy.
Last update: September 2026.