Privacy policy
This policy explains what personal data is processed through this website, why, for how long, and what rights you have over it.
Data controller
The controller of the data collected through this website is:
- Controller
- Fabiola José Ramírez González
- Tax number (NIF)
- Y9970186E
- Address
- Av. La Gaviota 1, local 3, 38686 Playa de la Arena, Guía de Isora, Santa Cruz de Tenerife
- Phone
- +34 681 992 267
- info@fabicenter.com
What data we collect
The booking form asks only for what is needed to schedule and confirm your appointment:
- Your first name and surname.
- Your phone number.
- Your email address.
- The service you choose.
- The date and time of the appointment.
- The language you booked in, which decides the language of your confirmation.
Nothing else is collected. There is no user account, there are no free-text fields, and we do not ask for anything that is not essential to giving you an appointment.
Why we collect it
Your data is used only to:
- Manage your booking and hold the slot in the centre's diary.
- Send you a confirmation email with a calendar file attached.
- Let the centre know about the new appointment so it appears in the right diary.
- Let you cancel the appointment from the link in that email.
Your data is never used for marketing emails, nor passed to third parties for advertising.
Legal basis
The processing relies on Article 6(1)(b) of Regulation (EU) 2016/679 (GDPR): performance of a service contract and, at your request, steps taken before entering into it.
The legal basis is not consent. The details on the form are the minimum needed to provide the service you are asking for, and without them the appointment cannot be scheduled or confirmed.
The tick box you use when booking records that this policy was made available to you before you sent your details — an information duty under Article 13 GDPR — and is not what makes the processing lawful.
The booking form collects no health data
There is no field for your reason for visiting, your symptoms or free-text notes, and that omission is deliberate.
Any clinical information is taken in person during your appointment and forms part of your clinical record. That is a separate processing operation, governed by Spanish healthcare law and by professional confidentiality, and it is not handled through this website.
How long we keep it
Booking data is kept for one year from the date of the appointment, after which it is deleted.
This is without prejudice to the retention periods that Spanish tax and healthcare rules impose on the centre's own records, which sit outside this website.
Who else processes your data
Providing the service relies on suppliers who process the data on the controller’s behalf, each under a data processing agreement:
| Provider | Service | Location |
|---|---|---|
| Neon | Database | Frankfurt, Germany (EU) |
| Vercel | Website hosting | United States |
| Appointment calendar | United States | |
| MailerSend (MailerLite) | Email delivery | Lithuania (EU) |
No data is shared with anyone other than the above, unless the law requires it.
International transfers
Website hosting and the appointment calendar involve transferring data to the United States.
Those transfers rely on the European Commission’s adequacy decision for the EU-US Data Privacy Framework and, in the alternative, on the standard contractual clauses approved by the Commission, which would continue to apply should that adequacy decision cease to be in force.
Neon and MailerSend process the data within the European Union, so no international transfer is involved.
Your rights
Anyone whose data is processed through this site may ask for:
- Access to their personal data.
- Rectification of anything inaccurate.
- Erasure of the data.
- Objection to the processing.
- Restriction of the processing.
- Portability of the data.
To exercise any of them, write to info@fabicenter.com saying which right you want to exercise. We reply within one month.
You can also lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es).
Automated decisions and profiling
No automated decision-making or profiling is carried out with the data collected through this website.
Security
The site is served entirely over an encrypted connection (HTTPS) and booking data is held in a database with restricted access. Access credentials are never shared or published.
Last updated: