Privacy Policy
Last updated: July 2026
In compliance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on Personal Data Protection and the guarantee of digital rights (LOPDGDD), users of this website and patients of the practice are informed about the processing of their personal data.
1. Data controller
Controller: Dr. Rafael Torres Collado
Tax ID (NIF): 18897103G
Address: Av. Primado Reig 96, Entresuelo A, 46010 Valencia (Spain)
Telephone: 963 62 10 10 · Email: rtorres@comv.es
Physician registered under no. 464611220 with the Official Medical College of Valencia
2. Purposes and legal bases of processing
| Purpose | Legal basis |
|---|---|
| Management of appointments and handling of enquiries made by phone, email or web form | Consent of the data subject (Art. 6.1.a GDPR) and pre-contractual measures (Art. 6.1.b GDPR) |
| Provision of healthcare: diagnosis, treatment and medical follow-up, including the preparation and safekeeping of the clinical record | Purposes of preventive medicine, diagnosis and healthcare by a professional subject to professional secrecy (Arts. 6.1.b and 9.2.h GDPR) and compliance with Spanish Law 41/2002 on patient autonomy |
| Invoicing and compliance with tax and accounting obligations | Legal obligation (Art. 6.1.c GDPR) |
Health data is a special category of data. It is processed exclusively for healthcare purposes by healthcare personnel subject to the obligation of professional secrecy, or under their responsibility, in accordance with Article 9.2.h of the GDPR.
3. Data processed
- Identification and contact data: name, surname, telephone, email, address.
- Health data necessary for healthcare: medical history, diagnoses, treatments and progress (clinical record).
- Financial data necessary for invoicing the services.
4. Retention periods
Contact data from web enquiries will be kept for the time needed to handle the request. Clinical record documentation will be kept for the periods established by Law 41/2002 and the health regulations of the Valencian Community: at least five years from the discharge date of each healthcare episode, and for any longer periods legally required. Invoicing data will be kept for the periods required by tax regulations.
5. Data recipients
Data is not disclosed to third parties except where legally required (health authorities, judicial authority, tax agency) or where necessary for care (for example, clinical analysis laboratories, with the patient’s knowledge). Certain technology providers (web hosting, email) may access data as data processors, under contracts compliant with Article 28 of the GDPR. No international transfers of data are made outside the European Economic Area, except those arising from third-party services described in the Cookie Policy.
6. Rights of data subjects
Anyone may exercise their rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw their consent at any time, by writing to the controller at Av. Primado Reig 96, Entresuelo A, 46010 Valencia, or by email to rtorres@comv.es, enclosing a copy of their identity document.
The right of access to the clinical record shall be exercised in accordance with Law 41/2002. Likewise, if you consider that your rights have not been properly addressed, you may file a complaint with the Spanish Data Protection Agency (www.aepd.es, C/ Jorge Juan 6, 28001 Madrid).
7. Security measures
The controller applies appropriate technical and organisational measures to guarantee the confidentiality, integrity and availability of the data, taking particular account of the sensitive nature of health data, in accordance with Article 32 of the GDPR.
8. Accuracy of data and minors
The user guarantees that the data provided is accurate and undertakes to communicate any changes. Children under 14 may only provide personal data with the consent of their parents or guardians; healthcare for minors shall be governed by the provisions of Law 41/2002.
9. Updates
This policy may be updated to adapt to regulatory or website changes. The current version will always be published on this page.