Privacy Policy

At PHYSIO WELLNESS, we recognize that privacy and the protection of personal data are essential to users (the "Users") of our website https://physiowellness.es/ (the "Website"). We therefore provide this comprehensive information on the protection of personal data (the "Privacy Policy").

This Privacy Policy sets out in a transparent and accessible manner all details regarding how we process personal data, the purposes of such processing, and the rights available to Users. We recommend reading this Privacy Policy together with our Terms of Use prior to using our Website or booking physiotherapy services.

Data controller and contact details

The owner of the website https://physiowellness.es/ and the data controller is Marçal Ramirez Roig ("PHYSIO WELLNESS"), operating under Spanish legislation, with registered address at Carrer Vuit, 4, 08794 Les Cabanyes (Barcelona), holding tax identification number (NIF) 46998681K. Users may contact PHYSIO WELLNESS to exercise their data protection rights or resolve any privacy-related queries by emailing hola@physiowellness.es.

What personal data does Physio Wellness collect from its users?

Personal data refers to any information relating to an identified or identifiable natural person. Processing operations include collecting, recording, storing, using, disclosing, and deleting personal data.

To provide our services, PHYSIO WELLNESS may collect the following personal data:

• Full name, date of birth, gender, nationality, and identity document (DNI/NIE/Passport);
• Postal address, mobile phone number, and email address;
• Payment-related information (debit and credit cards);
• Service booking and attendance history;
• Satisfaction surveys, reviews, and clinical feedback;
• Website usage and navigation data (referring pages, visited sections, session duration, etc.);
• Technical device data (IP address, device type, browser, etc.); and any other information provided when contacting us.

Through which channels and third parties do we collect personal data?

PHYSIO WELLNESS collects personal data directly from Users via:

• Website contact forms, registration, and user accounts;
• Appointment bookings through our Website or DocFav;
• Voluntary participation in clinical or promotional surveys;
• Customer service queries and communications;
• Social media interactions with PHYSIO WELLNESS channels.

We may also receive data from authorized third parties (e.g., referring medical practitioners or insurers) with prior User consent. In such instances, only essential contact details are requested to invite the User to complete their registration directly.

What processing activities do we carry out with users' personal data?

We process personal data transparently according to specific purposes, legal bases, and retention periods:

1. Management of promotional activities and events

– Purpose:

• Manage participation in promotions, raffles, or workshops organized by PHYSIO WELLNESS.
• Deliver prizes or materials to confirmed winners or participants.
• Handle enquiries or claims related to promotional activities.
• Detect and prevent fraud and comply with statutory legal obligations.

– Legal basis: Contractual necessity arising from accepted promotional terms, legal obligation, and express consent where applicable.

– Retention period: For the duration of the promotion, plus statutory limitation periods (up to 5 years) in a blocked state before secure deletion.

2. Marketing, newsletters, and electronic communications

– Purpose:

• Provide relevant updates, health insights, and promotional information regarding services and events at PHYSIO WELLNESS.

– Legal basis: Express consent of the User, or legitimate interest where permitted by law.

– Retention period: Until the User withdraws consent or requests erasure, followed by applicable statutory limitation periods.

3. Website analytics and service improvement

– Purpose:

• Analyze website usage, optimize user journey and device responsiveness, and enhance clinical service offerings.
• Ensure platform security and prevent unauthorized access.

– Legal basis: Express consent (via cookie management settings).

– Retention period: In accordance with cookie durations detailed in our Cookie Policy, or until consent is revoked (up to 2 years for aggregated analytics).

4. Maintenance of suppression lists

– Purpose:

Maintaining an updated suppression register of individuals who have requested data erasure or opted out of commercial communications.

– Legal basis: Compliance with legal data protection obligations (GDPR / LOPDGDD).

– Retention period: Retained for the statutory period required to demonstrate legal compliance.

What rights can users exercise regarding their personal data?

• Right of access: To confirm whether we process your personal data and obtain a copy of such data.
• Right to rectification: To request correction of inaccurate data or completion of incomplete records.
• Right to object: To object to data processing based on legitimate interests or direct marketing at any time.

To opt out of commercial communications, you may email hola@physiowellness.es or click the unsubscribe link at the bottom of any email newsletter.

• Right to erasure ("right to be forgotten"): To request deletion of your personal data when no longer required, subject to mandatory statutory retention obligations.
• Right to data portability: To receive your data in a structured, commonly used, machine-readable format or have it transferred to another controller where technically feasible.
• Right to restriction of processing: To request that we pause processing while data accuracy or legitimate grounds are verified.

Users may exercise their rights by sending a written request with proof of identity to hola@physiowellness.es or by post to: PHYSIO WELLNESS, Avinguda Camí dels Capellans, 79, local 3, 08870 Sitges (Barcelona), stating "DATA PROTECTION" in the subject. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).

To whom do we disclose your data?

PHYSIO WELLNESS shares personal data strictly with treating physiotherapists and clinicians who require access to deliver appropriate healthcare services.

We do not disclose personal information to external third parties, except where required by law, court order, or regulatory authority (such as tax authorities, courts, or law enforcement).

Data may also be disclosed in the context of corporate restructuring or to protect the safety and legal rights of our staff, patients, and IT infrastructure.

Who can access your data?

We work with trusted third-party service providers (such as hosting, clinic management software, and IT support) who process data on our behalf as Data Processors. All processors operate under formal data processing agreements that guarantee strict compliance with European data protection regulations.

Is your data secure?

We implement technical and organizational measures to ensure a high level of security appropriate to the risk, safeguarding data against unauthorized access, loss, or alteration.

All data is hosted on secure servers within the European Economic Area (EEA). PHYSIO WELLNESS does not transfer personal data outside the EEA without adequate safeguards.

Changes to this Privacy Policy

This Privacy Policy may be updated to reflect legislative, regulatory, or operational developments. We recommend reviewing this page periodically.