Privacy policy
1. Data controller
Clínica Médica Montgo, S.L., tax ID (CIF) B98132277, Plaza Constitución, 2 Bajo, 03700 Dénia (Alicante), info@clinica-montgo.com, 96 578 51 02 · 620 472 967. Data protection officer: DigitalStrategyGurus OÜ, Lõõtsa tn 5-11, Lasnamäe linnaosa, 11415 Tallinn, Harju maakond (Estonia).
2. What data we process, for what purpose and on what legal basis
| Purpose | Data | Legal basis (GDPR) | Retention period |
|---|---|---|---|
| Managing your appointment request (web form) | First name, surname, email, telephone, year of birth, town or city, availability, chosen service, patient type (new/existing) | Art. 6.1.b (pre-contractual measures) and 6.1.a (consent) | Until you request its erasure |
| Managing the request for assessment or treatment | The above, and any health data you provide | Art. 9.2.a (explicit consent) | Until you request its erasure |
| Patient medical record | Health data | Art. 9.2.h and Ley 41/2002 | Minimum 5 years from discharge (Ley 41/2002; regional regulations may extend this) |
| Statistics on use of the Site (Google Analytics), only if you accept analytics cookies | Pseudonymous online identifiers (_ga cookies), pages visited, device and browser type, approximate location; the IP address is not stored | Art. 6.1.a (consent) and art. 22.2 LSSI | 2 months in Google Analytics; cookies expire after 2 years or when you withdraw your consent |
3. Recipients
Your data is not disclosed to third parties except under legal obligation or when necessary to provide you with the service. Providers that access data on behalf of the owner act as data processors under a contract in accordance with art. 28 GDPR: Odaveth (DigitalStrategyGurus OÜ, the clinic's technology platform), Vercel Inc. (web hosting) and Easyhost (email). Vercel Inc. is based in the United States; this international transfer is covered by the standard contractual clauses approved by the European Commission. If you accept analytics cookies, Google Ireland Limited (Google Analytics) processes the Site's usage data as a data processor. Google may transfer data to Google LLC in the United States; this transfer is covered by the EU-U.S. Data Privacy Framework and the standard contractual clauses. Google Analytics operates without Google Signals or advertising features.
4. Rights
You may exercise your rights of access, rectification, erasure, restriction, portability and objection, and withdraw your consent at any time, by writing to info@clinica-montgo.com or to the postal address indicated, together with a document proving your identity. If you believe we have not processed your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
5. Forms
The form includes an unticked checkbox to accept this policy and to give your explicit consent to the processing of the health data you provide.
Last updated: 6 November 2026