Privacy Policy

Introduction

meditanmgp S.L. ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at meditanmgp.life or use our services at our aesthetic center located at Avenida de España 79, 07151 Palma de Mallorca, Balearic Islands, Spain.

Data Controller

meditanmgp S.L. acts as the Data Controller for the processing of your personal data. Our company registration number is 59821743 and our VAT number is ESB59821743. For any data protection inquiries, please contact us at privacy@meditanmgp.life.

Data Collection

The data we collect includes personal information such as your name, email address, phone number, address, and health-related information necessary for providing our aesthetic treatments and services. We collect this information when you contact us, book consultations, receive treatments, or interact with our website. Additional data may include technical information about your device and browsing behavior when you visit our website.

How We Use Your Information

We explain how we use your information in this section to ensure transparency about our data processing activities. We use your personal data to provide and improve our aesthetic services, communicate with you about appointments and treatments, process payments, comply with legal obligations, and send you relevant information about our services with your consent. Your health information is used solely for the purpose of providing safe and effective treatments tailored to your needs.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds: your consent for marketing communications, performance of a contract when providing our services, compliance with legal obligations in healthcare, and our legitimate interests in operating our business while ensuring your rights are protected.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information with trusted service providers who assist us in operating our business, such as payment processors, appointment scheduling systems, and IT support services. These providers are bound by confidentiality agreements and are only permitted to use your information for specified purposes.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Medical records and treatment information are kept for the period required by Spanish healthcare regulations, typically 5 years after your last treatment. Marketing consent information is retained until you withdraw consent. Website analytics data is typically retained for 26 months.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

Cookies and Website Analytics

Our website uses cookies to enhance your browsing experience and analyze website traffic. We use both essential cookies necessary for website functionality and optional analytics cookies with your consent. For detailed information about our cookie usage, please refer to our Cookie Policy.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption of sensitive data, secure storage systems, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure.

International Data Transfers

Your personal data is primarily processed within the European Union. If we need to transfer data outside the EU, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses approved by the European Commission.

Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and indicating the date of the last revision. We encourage you to review this policy periodically.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about our data processing practices, please contact us using the following information:

We are committed to addressing your concerns and will respond to your inquiries within 30 days as required by GDPR. If you are not satisfied with our response, you have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos).