Privacy policy
Who processes your data
- Controller: Anna Maria Bordes
- Address: Carrer Comtes d’Urgell, 28, 25142 Bellvís (Lleida)
- Contact: info@annabordes.com
What is collected and why
Only the data you voluntarily send through the contact form or when booking an appointment: name, email address, reason for enquiry and whatever you write in your message.
The sole purpose is to reply to you and, where applicable, manage the appointment. It is not used for profiling or advertising.
Health data
The form on this site is not designed to collect information about your health, and you are expressly asked not to include it. Health data is a special category protected by article 9 GDPR and is handled only within the practice, in the context of the professional relationship and with appropriate safeguards.
Legal basis
- Consent (art. 6(1)(a) GDPR) to reply to your message.
- Steps taken at your request prior to entering a contract (art. 6(1)(b) GDPR) when you request an appointment.
How long it is kept
Contact messages are kept for the duration of the exchange and afterwards for as long as needed to address possible liabilities. You can request deletion at any time.
Who else has access
Data is not shared with third parties except where legally required. Technical service providers do act as processors, under contracts compliant with article 28 GDPR:
- Website hosting and delivery: Vercel. It logs the requests the server receives, including your IP address.
- Email delivery: Resend. It is how the message you write in the contact form is sent.
Where your data is processed
In the European Union. This site’s functions — the contact form and the publishing panel — run in Frankfurt, and the email provider handles messages on European soil as well.
No data is transferred outside the European Economic Area. A processor agreement as required by article 28 GDPR is in place with each provider.
What is not involved
This website has no online booking system, and no third-party maps, videos or embedded widgets. Typefaces are served from this same domain, not from an external service.
Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to the address above. You may also withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
If you believe your data has not been handled correctly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Security
The site is served over an encrypted connection, with reasonable technical and organisational measures in place. No system is infallible, but the least possible data is collected — which is the most effective security measure there is.