Privacy Policy
1. Data controller
In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Organic Law 3/2018 of 5 December on Personal Data Protection and the guarantee of digital rights (LOPD-GDD), we inform you that the controller of your personal data is:
- Company name: ONELAB FISIOTERAPIA Y READAPTACION DEPORTIVA SL
- Tax ID (CIF): B75398040
- Address: Av. de la Costa Blanca, 21, Local 20, 03540 Playa de San Juan, Alicante
- Phone: 611 951 528
- Email: onelabfisioterapia@gmail.com
- Website: onelabfisioterapia.com
2. Personal data we process
No personal data is collected directly through this website by means of its own forms. Data that users provide to manage appointments or bookings is processed through the external platform OneClinc (onelab.oneclinic.app), which acts as data processor under its own terms and privacy policy.
However, through the use of third-party services embedded in this website (described in section 6), browsing data such as IP address, browser type, operating system, pages visited and visit duration may be collected.
3. Purposes and legal bases of processing
Browsing data collected through third-party services is processed for the following purposes:
- Website usage analysis (Google Analytics): to produce anonymous statistics on user behaviour in order to improve the content and usability of the site. Legal basis: user consent (Art. 6.1.a GDPR).
- Display of interactive maps (Google Maps): to show the clinic's location. Legal basis: user consent (Art. 6.1.a GDPR).
- Loading of typefaces (Google Fonts): to provide the website's typeface. Legal basis: legitimate interest of the controller (Art. 6.1.f GDPR) in ensuring the correct visual presentation of the site.
4. Health data
As a physiotherapy clinic, in the context of providing healthcare services we process special-category data (health data) of our patients, in accordance with Art. 9.2.h GDPR. This processing takes place exclusively in the clinical setting and through the systems provided for that purpose, not through this website.
5. Recipients and international transfers
We do not disclose your personal data to third parties, except where legally required. However, the third-party services embedded in this website involve the transfer of data to Google LLC, a company based in the United States. This transfer is covered by the Standard Contractual Clauses approved by the European Commission and, where applicable, by the EU-US Data Privacy Framework.
You can consult Google's privacy policies at: policies.google.com/privacy.
6. Third-party services on this website
6.1 Google Analytics
This website uses Google Analytics, a web analytics service from Google LLC. Google Analytics collects information about the use of the site (pages visited, time spent, traffic source) through cookies and other tracking technologies. This information is transmitted to and stored on Google's servers. For more information on how Google uses this data, visit policies.google.com/privacy. You can disable Google Analytics by installing the opt-out add-on available at tools.google.com/dlpage/gaoptout.
6.2 Google Maps
This website embeds interactive maps from Google Maps, a service provided by Google LLC. Loading the map may involve transmitting data such as your IP address to Google's servers. The map is only loaded when the user gives explicit consent through the mechanism provided on the page.
6.3 Google Fonts
This website loads typefaces from Google Fonts, a service of Google LLC. When accessing a page on this site, the user's browser may connect to Google's servers to download the fonts used, which may involve transmitting the user's IP address to Google.
7. Retention period
Browsing data collected through Google Analytics is kept for the period configured in the Analytics account (26 months by default), after which it is deleted automatically.
Data of patients treated in the context of providing healthcare services is kept for the periods established by applicable health legislation (a minimum of 5 years from discharge, in accordance with Law 41/2002 on patient autonomy and Valencian regional regulations).
8. Rights of data subjects
You may exercise the following rights at any time against the data controller:
- Access: find out what personal data of yours we process.
- Rectification: request the correction of inaccurate or incomplete data.
- Erasure: request the deletion of your data when it is no longer necessary.
- Restriction of processing: request that we temporarily suspend the use of your data.
- Portability: receive your data in a structured, commonly used format.
- Objection: object to processing based on legitimate interest.
- Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.
If you consider that the processing of your data does not comply with current regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), based at C/ Jorge Juan, 6, 28001 Madrid — www.aepd.es.
9. Cookies
This website uses first-party and third-party cookies. Technical cookies are necessary for the site to work. Analytics cookies (Google Analytics) and those associated with Google Maps are only activated with your prior consent, which you can give or withdraw at any time through the cookie settings panel available on the site.
10. Changes to this policy
We reserve the right to modify this privacy policy to adapt it to legislative changes or changes in the services provided. In the event of substantial changes, we will give visible notice on the website. We recommend that you check this page periodically.