Legal information and privacy

Privacy policy

Controller and contact

Galatzo Health S.L., tax identification number B44888725, Camí dels Reis, Building 3A, 1st Floor North, 07010 Palma, Illes Balears, Spain, is the controller of personal data collected through www.galatzohealth.com. Contact: info@galatzohealth.com.

Data and purposes

Processing covers the identification and contact details provided, the subject, the message and information needed to handle the request. Forms are used to answer enquiries and coordinate requests for appointments or service information. Technical data necessary for website operation and security may also be processed. This website currently has no newsletter, forum or CV submission forms. A contact request does not subscribe the sender to advertising.

Legal bases

Responding to enquiries is based on the legitimate interest in handling requests received (GDPR Article 6(1)(f)); where a request concerns engaging a service, steps taken at the individual's request before entering a contract may apply (Article 6(1)(b)). Handling data protection rights and legal obligations is based on Article 6(1)(c). Non-essential cookies require consent (Article 6(1)(a)). Consent for additional purposes must be requested specifically and separately.

Medical information and form fields

The initial enquiry form is not intended to receive medical reports, diagnoses or sensitive health information. Please do not include these. Clinical information collection and healthcare require separate information and procedures. Only information needed to handle the enquiry should be provided. Required fields are identified in the form; the general message may be optional. Anyone providing another person's data must have a lawful basis to do so and must have informed that person.

Retention

Data is kept for the time necessary to handle the enquiry and manage any resulting relationship. Where appropriate, it will subsequently be restricted or retained for applicable legal retention and liability periods. Data no longer required will be deleted or anonymised. Cookie retention periods depend on the service and its configuration.

Providers, recipients and transfers

Website services may involve hosting and website platform providers (IONOS and Duda), email, security and consent management providers. Forms use Google reCAPTCHA. Choosing WhatsApp or another external service also makes that provider's privacy terms relevant. Enquiry data is not sold. Disclosure may occur where legally required or necessary to handle the request. Providers acting as processors must offer the safeguards and agreements required by the GDPR. Where a provider processes data outside the European Economic Area, an adequacy decision or other valid safeguards, such as standard contractual clauses, must apply. Information on relevant providers and safeguards may be requested from info@galatzohealth.com.

Rights

Individuals may request access, rectification, erasure, portability, restriction or objection to processing, and withdraw consent where consent is the legal basis, without affecting earlier lawful processing. Requests may be sent to info@galatzohealth.com or the controller's registered address. Where there are reasonable doubts about identity, proportionate additional information may be requested; identity document copies should not be sent automatically. A complaint may also be lodged with the Spanish Data Protection Agency (www.aepd.es). The data protection rights section provides the adviser's request form.

Security and updates

Processing must respect the GDPR and Spanish data protection law principles of lawfulness, transparency, data minimisation, confidentiality and security. This information will be updated when processing activities, providers or applicable obligations change. This policy concerns the website and does not replace information specific to clinical care.

Cookie policy

What cookies are and who uses them

Cookies and similar technologies store or retrieve information on a device. This policy applies to www.galatzohealth.com, owned by Galatzo Health S.L. Some technologies are necessary for navigation or a requested function; others require a prior choice.

Categories and services

The IONOS/Duda platform supplies technical website functions. Termly stores and manages consent preferences. Google reCAPTCHA supports form security. Where enabled, Google Tag Manager and any measurement or advertising tools it manages must respect the relevant choice. Google Maps and other external content may require permission before loading. Videos hosted directly on the platform and external links should not be confused with embedded third-party players.

Essential and optional cookies

Essential technologies support necessary functions, security or storage of the privacy choice. Analytics measures website use; advertising technologies, if used, support advertising measurement or personalisation; other integrations may use functionality technologies. Non-essential technologies must not activate before consent. Classification must reflect actual service behaviour rather than the cookie name alone.

Choice and withdrawal

The panel allows optional cookies to be accepted, rejected or configured. Rejecting must be as accessible as accepting. Choices can be changed at any time using ‘Cookie settings’ in the footer and on this page. Withdrawal prevents future consent-dependent loading; browser controls may be needed to delete cookies already stored. Rejecting some services may prevent certain external content from being displayed.

Current technology information

The settings panel provides detected services or categories and available cookie information. Their presence and duration may vary with the pages visited, functions used and visitor choices. The adviser's inventory must be checked against the active configuration; not every Google or DoubleClick cookie listed in that document is automatically essential. Additional information or discrepancies may be addressed to info@galatzohealth.com.

Third parties, transfers and rights

Third-party technologies are also subject to their providers' information. Google publishes its policies at policies.google.com/privacy and Termly at termly.io. Some providers may process data outside the European Economic Area, subject to applicable safeguards. Controller details, contact channels and rights are described in the privacy policy. Browser preferences can block or delete cookies, which may affect some functions.

Data protection rights

The adviser's form may be downloaded, completed and sent to info@galatzohealth.com or the controller's registered address. Unnecessary identification documents and clinical information should not be sent. Identity may be verified proportionately where necessary. The original form is provided in Spanish; requests may be addressed to the team in the preferred language.

Download data protection rights request form (PDF, Spanish)