This is an English translation provided for convenience. The Spanish version is the reference text.
This policy explains how the personal data of people who visit this website or contact me by email is processed, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
- Controller: Cristina Magriñá Sanchez
- Address: C/ Muntaner, 356, Sarrià-Sant Gervasi, 08021 Barcelona (Spain)
- Email: info@cristinamagrina.es
2. What data is processed and why
This website has no forms, user accounts, analytics or advertising systems. The only data processed is the following:
- Email communications. If you write to me, I will process your email address and any data you include in your message (for example, your name or your reason for consulting) in order to reply to your request, give you information and, where applicable, arrange a first appointment.
- Technical visit data. When you access the site, the hosting provider unavoidably receives technical connection data (such as your IP address, browser, and date and time of access), which is needed to deliver the pages and keep the service secure. I do not use it to identify you or to build profiles.
Please do not include health data or other especially sensitive information in a first email: standard email is not a fully secure channel. If you become a client, the processing of your clinical data will be governed by the information and consent provided to you before care begins, not by this policy.
3. Legal basis
- Replying to your messages and arranging an appointment: your consent when you write to me (Art. 6.1.a GDPR) and pre-contractual measures taken at your request (Art. 6.1.b GDPR).
- Technical visit data: the legitimate interest in keeping the site secure and working properly (Art. 6.1.f GDPR).
4. Recipients and processors
I do not share your data with third parties, except where legally required. The following providers are involved in delivering the service and act as data processors:
- Website hosting: Cloudflare, Inc. (United States), which delivers and protects the web pages. International transfers rely on the safeguards provided for in the GDPR, such as standard contractual clauses or the EU–US Data Privacy Framework.
- Email: Microsoft (Microsoft 365 / Exchange Online), the email service provider for cristinamagrina.es. Any international transfers that may take place rely on the same GDPR safeguards.
The site contains links to third-party services (LinkedIn, Gmail, Outlook, Google Maps). Data is only shared with those services if you click the link, and their processing is governed by each service's own privacy policy.
5. Retention
I will keep your messages for as long as needed to deal with your request and, afterwards, for the legal limitation periods for possible liabilities, after which they will be deleted. If the communication turns into a care relationship, clinical data will be kept for the periods set by the applicable health legislation. Technical access data is kept by the hosting provider only for as long as strictly necessary for its security purpose.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to info@cristinamagrina.es and stating which right you wish to exercise. I may ask you to prove your identity. I will reply within one month at most.
If you believe your data has not been processed properly, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): C/ Jorge Juan, 6, 28001 Madrid, www.aepd.es.
7. Minors
This website is aimed at adults. If you are under 14, you need the consent of your parent or legal guardian to provide personal data. If you are looking for help for your child, please write to me as their parent or legal guardian.
8. Automated decisions and security
No automated decisions are made and no profiles are built from your data. Reasonable technical and organisational measures are applied to protect the information, although no system is completely invulnerable.
9. Changes to this policy
This policy may be updated to reflect legal changes or changes in how the site works. The date of the latest update appears at the top of this page.