Privacy Policy
How we collect, use, and protect your personal information in compliance with GDPR
Last updated: March 2026
1. Data Controller Information
In accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws, we inform you of the following:
Data Controller: Psicofertil and Donor Select International
Tax ID (CIF/NIF): [B-12345678]
Registered Address: [Carrer de Mallorca, 123, 08008 Barcelona, Spain]
Contact Email: psicofertildonor@gmail.com
Phone: [+34 931 234 567]
Data Protection Officer: psicofertildonor@gmail.com (if applicable)
2. Introduction & Scope
Psicofertil and Donor Select International is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, process, store, and protect your information when you use our website or services.
This policy applies to all personal data processed by us, including health data collected as part of our psychological support, nutrition, physiotherapy, and donor evaluation services.
By using our services, you acknowledge that you have read and understood this Privacy Policy. For health services, we will obtain your explicit consent for processing sensitive health data.
3. What Data We Collect
- •Personal Identification Data: Name, surname, date of birth, nationality, identification number (DNI/NIE/passport).
- •Contact Information: Email address, telephone number, postal address.
- •Health Data (Special Category): Medical history, psychological assessments, health conditions, treatment information, nutrition and physiotherapy records. This data is collected only when necessary for providing healthcare services.
- •Professional Data (for clinic clients): Clinic name, professional credentials, service requirements.
- •Technical Data: IP address, browser type, device information, cookies, usage patterns on our website.
- •Communication Data: Records of your communications with us, appointment bookings, consultation notes.
4. Legal Basis for Processing
- •We process your personal data based on the following legal grounds under GDPR Article 6:
- •Consent (Article 6.1.a): When you provide explicit consent for specific processing activities, particularly for marketing communications.
- •Contract Performance (Article 6.1.b): Processing necessary to provide our healthcare services and fulfill our contractual obligations.
- •Legal Obligation (Article 6.1.c): When we must process data to comply with legal requirements, such as health record retention laws.
- •Legitimate Interests (Article 6.1.f): For improving our services, website functionality, and fraud prevention.
- •For Special Category Health Data (Article 9.2): We process health data based on your explicit consent and for the provision of health or social care (Article 9.2.h), in accordance with professional secrecy obligations.
5. How We Use Your Data
- •To provide psychological support, nutrition counseling, physiotherapy, and donor evaluation services.
- •To manage appointments, consultations, and treatment plans.
- •To communicate with you about your care, appointments, and service updates.
- •To maintain medical and psychological records as required by law.
- •To improve our services through analysis and research (anonymized where possible).
- •To comply with legal and regulatory requirements in the healthcare sector.
- •To send service-related information and, with your consent, promotional communications.
- •To ensure the security and proper functioning of our website and services.
6. Data Sharing & Recipients
- •Healthcare Professionals: We may share data with other healthcare providers involved in your care, subject to professional confidentiality.
- •Service Providers: We use trusted third-party providers for IT services, appointment scheduling, and secure data storage. All providers are bound by data processing agreements. Our current data processors include: Vercel Inc. (website hosting, analytics, and speed insights), Resend Inc. (transactional email delivery for contact form submissions), and Unsplash Inc. (stock photography used on the website).
- •Legal Authorities: We may disclose data when required by law, court order, or to protect rights and safety.
- •Clinic Partners (for donor evaluation): With your explicit consent, evaluation results may be shared with the requesting fertility clinic.
- •We do NOT sell, rent, or trade your personal data to third parties for marketing purposes.
- •All data recipients are contractually obligated to maintain confidentiality and comply with GDPR requirements.
7. Data Retention Periods
- •Health Records: Retained for 15 years from the last consultation, in accordance with Spanish healthcare regulations.
- •Contact Information: Retained while you remain an active patient/client, plus 3 years for legal purposes.
- •Donor Evaluation Records: Retained for 30 years as required by reproductive health legislation.
- •Marketing Communications: Retained until you withdraw consent or request deletion.
- •Website Analytics Data: Vercel Analytics and Speed Insights data is retained according to Vercel's data retention policies. Cookie consent preferences are stored for 180 days.
- •After retention periods expire, data is securely deleted or anonymized. Data may be retained longer if required by law or for legal claims.
8. Your Rights Under GDPR
- •Right to Access (Article 15): Request copies of your personal data and information about how we process it.
- •Right to Rectification (Article 16): Request correction of inaccurate or incomplete data.
- •Right to Erasure / Right to be Forgotten (Article 17): Request deletion of your data in certain circumstances.
- •Right to Restriction (Article 18): Request limitation of processing in specific situations.
- •Right to Data Portability (Article 20): Receive your data in a structured, commonly used format and transfer it to another controller.
- •Right to Object (Article 21): Object to processing based on legitimate interests or for direct marketing.
- •Rights Related to Automated Decision-Making (Article 22): Right not to be subject to decisions based solely on automated processing.
- •To exercise any of these rights, please contact us at psicofertildonor@gmail.com. We will respond within one month.
9. Cookies & Tracking Technologies
- •We use cookies and similar technologies to enhance your experience on our website. Non-essential cookies are only set after you give your consent through our cookie banner.
- •Essential Cookies: Necessary for website functionality and security. These cannot be disabled. This includes the cookie consent preference cookie.
- •Functional Cookies: Remember your language selection and other preferences. These are only set with your consent.
- •Analytics Cookies: We use Vercel Analytics and Vercel Speed Insights to understand how visitors use our website. These are only activated with your consent.
- •You can manage your cookie preferences at any time by clicking 'Manage Cookies' in the website footer.
- •For more information, see our Privacy Policy or contact us.
10. Data Security Measures
- •We implement appropriate technical and organizational measures to protect your data:
- •Encryption of data in transit (SSL/TLS) and at rest where appropriate.
- •Access controls ensuring only authorized personnel can access personal data.
- •Regular security assessments and updates to our systems.
- •Staff training on data protection and confidentiality.
- •Secure backup procedures and disaster recovery plans.
- •While we use industry-standard security measures, no system is completely secure. We cannot guarantee absolute security but continually work to protect your data.
11. International Data Transfers
- •Your data is primarily processed and stored within the European Economic Area (EEA).
- •Some of our service providers are based in the United States, including Vercel Inc. (hosting and analytics) and Resend Inc. (email delivery). These transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission.
- •Adequacy decisions confirming the recipient country provides adequate protection.
- •Your explicit consent for specific transfers when required.
- •We only use reputable service providers with strong data protection commitments.
12. Children's Privacy
Our services are intended for individuals aged 18 and over.
We do not knowingly collect personal data from minors under 18 without parental or guardian consent.
If you are under 18 and wish to use our services, a parent or legal guardian must provide consent and may need to accompany you to consultations.
If we become aware that we have collected data from a minor without proper consent, we will take steps to delete that information promptly.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.
We will notify you of significant changes by email (if we have your email address) or by posting a notice on our website.
The 'Last Updated' date at the top of this policy indicates when it was last revised.
We encourage you to review this policy periodically to stay informed about how we protect your data.
Continued use of our services after changes constitutes acceptance of the updated policy.
14. Contact & Complaints
If you have questions, concerns, or wish to exercise your rights, please contact us:
Email: psicofertildonor@gmail.com
Address: [Carrer de Mallorca, 123, 08008 Barcelona, Spain]
Phone: [+34 931 234 567]
You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos - AEPD):
AEPD Website: www.aepd.es
Address: C/ Jorge Juan, 6, 28001 Madrid, Spain
We are committed to resolving any concerns and will work with you to address any issues.
Have Questions?
If you have any questions about our privacy practices, please contact us.