1. Identity of the Data Controller

In accordance with Regulation (EU) 2016/679, General Data Protection Regulation (GDPR), and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we inform you that any personal data collected will be processed by:

Controller: VITALISTIC CONCEPT, SOCIEDAD LIMITADA
Company ID (CIF): B10646172
Address: C/ Plaza de Arriola 1, 2º 4º, 29005 Málaga, España
Email: info@esenciaquiropractica.com
Contact phone numbers: +34 951542673 / +34 615 18 60 62

2. Personal Data We Collect

The data we may collect includes, but is not limited to:

  • Full name
  • Telephone number
  • Email address
  • Information regarding appointments or requested consultations
  • Health-related data, strictly within the context of providing chiropractic care
  • Any other information voluntarily provided by the user via forms or communications

In the case of advertising campaigns on platforms such as Meta Ads, only the data necessary to contact the individual and arrange an informational visit or consultation will be collected.

3. Purpose of Data Processing

Your data will be processed for the following purposes:

  • To manage the relationship with patients, including appointment scheduling and consultation follow-up
  • To provide information about our services, promotions, or events related to chiropractic health
  • To respond to enquiries made via online forms or other means of contact
  • To send reminders, informative or educational communications relating to our services
  • To comply with legal obligations in healthcare or administrative matters

Under no circumstances will your data be used for purposes other than those stated without prior consent from the data subject.

4. Legal Basis for Data Processing

The legal bases for processing personal data are:

  • The explicit consent of the data subject, especially concerning data collected through advertising forms (e.g., Meta Ads)
  • The execution of a contract for the provision of chiropractic services
  • Compliance with legal obligations, particularly in healthcare matters
  • Legitimate interest in maintaining customer relations and improving service quality

In the case of health-related data, explicit consent from the data subject is required, in accordance with Article 9 of the GDPR.

5. Data Retention

Personal data will be retained for as long as necessary to fulfil the purpose for which it was collected and unless the data subject requests its deletion.
In the case of clinical records, these may be retained for a minimum of five years from the date of the last visit, in compliance with current healthcare regulations.

6. Disclosure of Data to Third Parties

Data will not be shared with third parties unless required by law or strictly necessary for the provision of the service, such as:

  • Auxiliary healthcare service providers
  • Tax or accounting advisors
  • Digital platforms used for appointment management or forms (e.g., Meta, where applicable)

In all cases, such third parties will be subject to strict contractual obligations regarding confidentiality and compliance with the GDPR.

7. International Data Transfers

As a rule, no international data transfers will take place. However, some technological services used (such as Meta or external CRM platforms) may involve data processing in countries outside the European Economic Area (EEA).
In such cases, appropriate legal safeguards will be applied, such as standard contractual clauses approved by the European Commission.

8. Rights of Data Subjects

Users may exercise the following rights at any time:

  • Right to access their personal data
  • Right to rectification of inaccurate data
  • Right to erasure (right to be forgotten)
  • Right to object to the processing of their data
  • Right to restrict data processing
  • Right to data portability

To exercise these rights, you may contact us at: esenciaquiropracticamalaga@gmail.com, indicating “Data Protection” in the subject line.
A copy of your identity document must be attached.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if you believe your rights have been violated.

9. Security Measures

VITALISTIC CONCEPT, S.L. has adopted the necessary technical and organisational measures to ensure the security and integrity of personal data and to prevent its alteration, loss, unauthorised processing or access, in accordance with applicable legislation. These measures are reviewed and updated regularly to reflect best practices and regulatory requirements.

10. Changes to This Privacy Policy

We reserve the right to modify this policy to reflect changes in legislation, case law, or industry practices. Any such changes will be announced on this page with reasonable notice.