Privacy policy
Last updated: 1 October 2026
Clínica Dental Peyrí, S.L. processes your data confidentially and in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
Data Protection Officer: [DPO name or company], contactable at info@clinicadentalpeyri.com.
2. Data we process
- Contact details you give us by form, phone, email or WhatsApp: name, phone, email and preferred time.
- The treatment you are enquiring about.
- Health data (special category, Art. 9 GDPR), only if you become a patient: clinical record, X-rays, clinical photos, allergies and medication.
- Browsing data, only if you accept the relevant cookies.
Please do not include health information in the web form; your clinical assessment takes place at the clinic.
3. Purposes, legal basis and retention
| Purpose | Legal basis | Retention |
|---|---|---|
| Handling your appointment or information request | Consent (Art. 6.1.a GDPR) and pre-contractual steps (Art. 6.1.b) | Until handled; up to 12 months if you do not become a patient |
| Healthcare and clinical records | Provision of healthcare (Art. 9.2.h GDPR) and legal obligation (Spanish Law 41/2002, Catalan Law 21/2000) | At least 15 years from discharge of each episode of care (Law 21/2000) |
| Invoicing, accounting and financing | Performance of contract (Art. 6.1.b) and legal obligation (Art. 6.1.c) | Periods required by tax and commercial law (up to 6 years) |
| Appointment reminders and treatment communications | Performance of contract and consent | While you are a patient or until you object |
| Publishing before-and-after photos or testimonials | Express written consent | Until you withdraw it |
| Measuring website use and ad performance | Consent (cookies) | See cookie policy |
We do not make automated decisions or create profiles.
4. Recipients
We do not share your data unless required by law (health authorities, courts, tax authorities) or where necessary for your treatment and you authorise it. We use processors under contract in the following categories: clinical management software providers, dental laboratories, financing providers (only if you request financing), web hosting and email providers and, if you accept, Google (Tag Manager, Analytics, Ads and Maps).
5. International transfers
Some providers (Google, web hosting, WhatsApp/Meta) may process data outside the European Economic Area, under the EU-US Data Privacy Framework or European Commission standard contractual clauses.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw consent at any time, by writing to info@clinicadentalpeyri.com or to Carrer d'Aragó, 270, 08007 Barcelona, with proof of identity. Clinical records cannot be erased while there is a legal obligation to keep them.
If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es) or the Catalan Data Protection Authority (apdcat.gencat.cat).
7. Minors
Data of patients under 14 is provided and authorised by their parents or legal guardians. Patients aged 14 or over may consent to the processing of their data, subject to healthcare rules on informed consent.
8. Security
We apply technical and organisational measures appropriate to the risk, reinforced for health data: access control, staff confidentiality, HTTPS encryption and backups.