Privacy policy

Last updated: May 2026

At Clínica MuVi we take the privacy of your data seriously. This policy explains what information we collect, what we use it for and what rights you have over it, in compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

1. Data controller

2. What data do we collect and for what purpose?

Type of processing	Data collected	Purpose	Legal basis
Appointment request via the website	Name, telephone, reason for consultation	To handle your request and contact you to arrange the appointment	Consent of the data subject (art. 6.1.a GDPR)
Clinical records	Identifying data, health data, medical history, assessments, treatment progress	Provision of the healthcare requested	Necessary for purposes of preventive medicine or healthcare by a professional bound by professional secrecy (art. 9.2.h GDPR; Spanish Law 41/2002)
Invoicing	Name, tax ID, tax address	To issue invoices and comply with tax and accounting obligations	Legal obligation (art. 6.1.c GDPR)
Contact by WhatsApp / telephone / email	Name, telephone, email, content of the communication	To deal with your query or request	Consent (art. 6.1.a GDPR)

3. Retention periods

Your data will be kept for as long as necessary to fulfil the purpose for which it was collected and, in any case, for the legally established periods:

• Clinical records: a minimum of 5 years from the discharge date of each episode of care, in accordance with Spanish Law 41/2002. Some cases require longer periods.
• Tax and accounting data: 6 years (Commercial Code) and 4 years (tax regulations).
• Commercial contact data / forms: until you withdraw your consent or request deletion.

4. Recipients and data transfers

Your data will not be passed to third parties except where legally required (Tax Authority, health authorities, courts and tribunals). The following data processors, with whom the corresponding contract has been signed in accordance with art. 28 GDPR, may have access to your data:

• Hosting and email provider.
• Clinic management and electronic clinical records software, where applicable.
• Tax and accounting advisers.
• WhatsApp Business service (Meta Platforms Ireland Ltd.) when the patient contacts us through this channel.

We do not make international transfers of data outside the European Economic Area, except those that may be made through the above providers with the appropriate safeguards provided for in the GDPR.

5. Your rights

As the data subject you may exercise the following rights at any time: access, rectification, erasure, objection, restriction, portability and withdrawal of consent.

To exercise them, write to clinicamuvi@gmail.com stating the right you are exercising and attaching a copy of your ID card or equivalent document. We will reply within one month at most.

If you believe that the processing of your data does not comply with the regulations, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es).

6. Cookies

This website does not use advertising or profiling cookies. It uses one technical cookie to remember your decision and, only if you accept them in the cookie notice, Google Analytics measurement cookies. The Google map and reviews load when you reach those sections of the home page. Full details are in the cookie policy.

7. Data security

We apply the technical and organisational measures necessary to guarantee the security, integrity and confidentiality of your data, preventing its alteration, loss or unauthorised access, as required by the GDPR.

8. Changes to this policy

This policy may be updated to adapt to legislative changes or new services. We recommend reviewing it periodically. The date of the last update appears at the top of the document.