Privacy policy
Last updated: 19 September 2026
1. Data controller
- Controller
- Miguel Otero PENDING: surname ("Otero Salud")
- Tax ID (NIF)
- PENDING
- Address
- Av. de Rosa Regás 10, 28907 Getafe (Madrid), Spain
- [email protected]
- Phone
- +34 614 11 87 66
2. What data we process
- Identifying and contact data: name, phone, email and the content of your enquiry, when you contact us or request an appointment (website, phone, WhatsApp or email).
- Health data (special category under art. 9 GDPR): history, assessments, diagnoses and treatments, collected only within the in-person care relationship to create and keep your clinical record.
3. Purposes and legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Handle your appointment request, enquiry or contact | Pre-contractual steps and consent (art. 6(1)(b) and 6(1)(a)) |
| Provide healthcare and maintain your clinical record | Healthcare purposes by a professional bound by secrecy (art. 9(2)(h)) together with art. 6(1)(b) |
| Comply with legal obligations (health, accounting and tax) | Legal obligation (art. 6(1)(c)) |
4. How long we keep it
- Contact data: while your request is handled and, afterwards, for the limitation periods of any liability.
- Clinical record: at least five years from the discharge date of each care episode, under article 17 of Spanish Law 41/2002 on patient autonomy (and any longer period required by applicable regional law).
5. Who we share your data with
Data is not shared with third parties except by legal obligation (e.g. health authorities or the tax administration) or where strictly necessary for your care. We may rely on providers acting as data processors (e.g. web hosting) under a contract meeting art. 28 GDPR. PENDING: list processors if appointment management or data hosting is contracted.
If you contact us via WhatsApp or Instagram, those platforms process your data under their own policies, outside Otero Salud's control.
6. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw consent at any time, by writing to [email protected] or to the postal address above, enclosing a copy of a document proving your identity.
If you believe the processing does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Security and confidentiality
Otero Salud applies appropriate technical and organisational measures to protect data, especially health data, and all staff are bound by professional secrecy. Data transmitted through the website uses an encrypted connection (HTTPS).
8. Cookies
The use of cookies is described in the Cookie Policy.