Privacy policy

Data controller: Equipo Inmune SLP. Contact: pacientes@equipoinmune.com.

Purpose: to manage your appointments, your waiting-list request and your medical record, to communicate with you and to arrange your consultation with the Equipo Inmune doctor who sees you. The information you provide may include health data; it is processed solely for this purpose and with your explicit consent.

Legal basis: your consent (Articles 6(1)(a) and 9(2)(a) GDPR), which you may withdraw at any time, and the provision of the healthcare you request (Article 9(2)(h) GDPR).

Recipients: the Equipo Inmune doctors involved in your care. Data are not disclosed to third parties unless legally required. Web hosting and email are provided by processors acting on our behalf. Consultation fees are paid on Stripe, which has its own privacy policy. Video consultations use Whereby (Norway, European Economic Area) as a processor: they are not recorded and each appointment's room is deactivated after the consultation. Appointments are entered in the doctor's Google calendar (Google acts as a processor).

Retention: medical records are kept for the period required by healthcare law; other data while your account is active and afterwards for as long as needed to meet any legal obligations.

Your rights: access, rectification, erasure, objection, restriction and portability, by writing to pacientes@equipoinmune.com. You may also complain to the Spanish Data Protection Agency (aepd.es).

Security: the connection is encrypted, passwords are stored irreversibly hashed, and medical records and documents are stored encrypted. Our emails do not include clinical information in their text: your reports, prescriptions and treatment are downloaded from your area or, if your doctor has chosen so, attached as a password-protected PDF.