Legal information
Privacy policy
This policy describes how personal data is processed on the website rocioprado.es, in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD).
Data controller
- Identity: Rocío Prado Calvo (registered podiatrist).
- Professional association: ICOPOMA · Registration number 838283333
- Email: Send email
Personal data collected on this site
This website does not collect or store personal data through its own forms. There is no registration, login, subscription or submission of data to the rocioprado.es server.
Communication with the owner takes place exclusively through external channels:
- WhatsApp: the conversation takes place on the platform operated by Meta Platforms and is governed by its terms of use and privacy policy.
- Email: email communications are handled through the owner's email service.
- Doctoralia: appointments and reviews are managed on the platform of Doctoralia Internet, S.L., which acts as an independent controller and is governed by its own privacy policy.
External resources loaded out of technical necessity
The fonts (Fraunces and Inter), images, stylesheets and scripts are served from the same domain, in order to minimise the transfer of personal data to third parties. The only exceptions are two technical services provided by Cloudflare, Inc. (the infrastructure that serves this site): the anti-abuse widget Cloudflare Turnstile, which loads only when the contact buttons are clicked, and the measurement tool Cloudflare Web Analytics, which uses no cookies and stores no visitor identifiers. In both cases the browser connects to Cloudflare's servers, entailing the technical transfer of the IP address that is indispensable in order to serve the resource.
Conversion measurement (Cloudflare Analytics Engine)
We record the contact requests made through the website on an aggregated, cookie-free basis —request type, segment, country and originating campaign (UTM parameters)—, without storing your IP address or any data capable of identifying you. The data processor is Cloudflare, Inc. (United States), relying on the European Commission's Standard Contractual Clauses. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in assessing the effectiveness of the website and of our campaigns.
Web analytics (Google Analytics 4)
With your prior consent (which you can give or withdraw from the cookie notice), this site uses Google Analytics 4 to obtain aggregated usage statistics that help improve the site. The provider is Google Ireland Limited, which acts as a data processor and may process the data on Google LLC servers in the United States, relying on the European Commission's standard contractual clauses as appropriate safeguards under the GDPR. The legal basis for this processing is your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time without affecting the lawfulness of processing based on consent before its withdrawal. If you do not accept it, Google Analytics is not loaded and none of its cookies are installed. Further details are set out in the cookie policy.
Behaviour analysis (Microsoft Clarity)
With your prior consent, this site uses Microsoft Clarity to obtain heatmaps and recordings of browsing with sensitive content masked that help improve usability. Text entered into fields is masked before being stored. The provider is Microsoft Corporation, which acts as a data processor and may process the data in the United States, relying on the European Commission's standard contractual clauses. The legal basis is your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time. If you do not accept it, Clarity is not loaded and installs no cookies. Further details are set out in the cookie policy.
Clinical data
The health data of patients who attend in-person consultations is NOT managed through this website. It is managed in the systems of the relevant partner clinic, subject to the GDPR, the LOPDGDD and the specific regulations on medical records.
Legal basis for processing
When voluntary communication is established with the owner (via WhatsApp, email or Doctoralia), the legal basis for processing is the taking of steps at the request of the data subject prior to entering into a contract and, where applicable, informed consent in the healthcare context.
Data retention
Data arising from communications is retained only for as long as necessary to handle the enquiry or professional relationship, or for the legally established periods where healthcare regulations apply.
User rights
As a data subject, you have the following rights:
- Access, rectification and erasure of your data.
- Objection to and restriction of processing.
- Data portability.
- Lodging a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos): www.aepd.es.
To exercise any of these rights, you may write to Send email providing a document proving your identity.
Amendments
This policy may be updated to adapt to regulatory changes or changes in the operation of the site. The date of the last update is the one shown at the foot of the document.