# Privacy Policy

> How Brain & Spine Barcelona S.L.P. processes and protects your personal data in accordance with the GDPR and Spanish data protection law (LOPDGDD).

URL: https://brainandspine-bcn.com/en/privacy-policy/
Fuente: Brain & Spine Barcelona — https://brainandspine-bcn.com

---

# Privacy Policy

Last updated: July 2025

## 1. Data controller

- **Controller:** BRAIN & SPINE BARCELONA S.L.P.
- **Tax ID (CIF):** B56970221
- **Registered address:** Calle Alcalde Aris, 18 – 4.º C – 08960 Sant Just Desvern (Barcelona)
- **Email:** [Escríbenos](https://brainandspine-bcn.com/#formulario)
- **Phone:** [+34 635 820 593](tel:+34635820593)

## 2. Data we process

We may process the following categories of data that you provide via forms, email or telephone: name and surname, address, email address, phone number, date of birth and payment-related data. When you send us medical reports or test results for a second opinion, we may process **special category data (health data)**, which is processed for the purpose of healthcare and with appropriate confidentiality safeguards.

## 3. Purposes of processing

- To respond to your enquiries, information requests and requests for a second medical opinion.
- To manage the clinical and administrative relationship with the patient.
- To provide the healthcare services requested and follow up on them.
- To improve your experience as a user. No automated decisions with legal effects will be taken based solely on a profile.

## 4. Legal basis

The legal basis for processing your data is your consent, the performance of the contractual or clinical relationship, compliance with applicable legal obligations and, where applicable, the legitimate interest of the controller. The processing of health data is based on the healthcare purpose (Art. 9.2.h GDPR).

## 5. Retention of data

Data will be retained for as long as the relationship with the data subject continues and, once it has ended, for the periods required by applicable law (in particular, healthcare and clinical documentation regulations) in order to address any potential liabilities.

## 6. Recipients

Your data may be disclosed to third parties providing services to the controller (processors) under appropriate contractual guarantees, to the healthcare professionals involved in your care, and to public authorities where there is a legal obligation to do so. No international transfers of data will take place unless you are informed in advance.

## 7. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, as well as withdraw any consent given, by writing to [Escríbenos](https://brainandspine-bcn.com/#formulario) or to the postal address above, providing proof of your identity. You also have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD, [www.aepd.es](https://www.aepd.es)) if you consider that the processing does not comply with applicable law.

## 8. Cookies

This website uses cookies. For further information, please consult our [Cookie Policy](https://brainandspine-bcn.com/en/cookie-policy/).