Privacy policy
1. Who is responsible for your data
The data controller is Jovere Collective, S.L. (trading as Maderoterapia Denia), CIF/NIF B88998448, registered office Calle Quevedo 16, 03700 Dénia (Alicante), Spain. Studio: Av. de Ramón Ortega 5, 03700 Dénia (Alicante), Spain. Email: maderoterapiadenia@gmail.com.
2. What data is collected and why
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| Visiting the website | Technical data such as IP address, browser and time of visit, stored briefly in server logs by the hosting provider | Running the website securely | Legitimate interest (GDPR Art. 6.1.f) |
| Contacting us via WhatsApp | Name, phone number, the content of your messages | Answering your questions and arranging appointments | Your request and pre-contractual steps (GDPR Art. 6.1.b) |
| Health questions before treatment | Information about your health and possible contraindications | Checking that maderotherapy is safe and suitable for you | Your explicit consent (GDPR Art. 9.2.a) |
| Your client file | Name, contact details, date of birth, treatment history, notes, and photos only if you agree | Providing and tracking your treatments | Contract (Art. 6.1.b); health data and photos with explicit consent (Art. 9.2.a) |
You are not obliged to share health information. Without it, however, we may not be able to treat you safely.
3. Who receives your data
Your data is not sold or passed on for advertising. It is only shared where necessary:
- WhatsApp (Meta Platforms Ireland Ltd.): when you message us, your messages are processed by WhatsApp. Meta may transfer data to the USA under the EU-US Data Privacy Framework.
- Website hosting (Netlify, Inc.): stores technical access data. Transfers to the USA are covered by the EU-US Data Privacy Framework or standard contractual clauses.
- Tax adviser (gestoría): invoicing data, where required by law.
- Authorities: only where there is a legal obligation.
4. How long data is kept
- WhatsApp conversations with people who do not become clients: deleted after 12 months at the latest.
- Client file and health questionnaire: for as long as you are a client, and afterwards only as long as needed for possible legal claims.
- Invoices and accounting data: as long as required by tax law (generally 4 to 6 years).
- Server logs: kept for a short time by the hosting provider.
5. Your rights
You can ask at any time to access, correct or delete your data, to restrict or object to its processing, or to receive it in a portable format. You can also withdraw your consent at any time, without affecting processing that took place before. To do so, write to maderoterapiadenia@gmail.com or send a WhatsApp message.
If you believe your data is being processed unlawfully, you can file a complaint with the Spanish Data Protection Agency (AEPD), www.aepd.es.
6. Security
Paper records are kept in a locked place. Digital records are protected by password. Only the therapist treating you has access to your client file.