Privacy policy

Version: September 2026

Who processes your data

AREYAN DENTAL SLPU · NIF B71392534 · CALLE DIVINIA PASTORA 12, 31013 PAMPLONA. info@clinicadentaldivinapastora.com.

Data and purposes

When you request an appointment, we process your name, telephone number, email address, contact preference and language to respond, arrange the visit and send an acknowledgement. Required fields are necessary to handle your request. This form does not ask for diagnoses, reports or health data. If acting for a minor, use the responsible adult’s details. We do not use these requests to send advertising.

Legal basis

Managing your request and arranging a possible appointment are based on steps taken at your request before entering into a contract (GDPR Article 6(1)(b)). The form checkbox records that you have read this information. Our own controls against abusive submissions rely on the legitimate interest of maintaining service security (Article 6(1)(f)). Google Maps and loading reCAPTCHA require separate consent (Article 6(1)(a) and Article 22.2 of Spain’s LSSI). You can request an appointment by telephone or email without activating Google services on this website.

Retention and security

Form requests are removed from the private register after 90 days, at the next daily maintenance run. Messages received by the clinic are kept as long as needed to handle the request and, where applicable, for statutory liability periods. Anti-abuse controls use identifiers derived from the IP address, email or verification token, valid for up to 24 hours; expired records are removed during WordPress maintenance. The form does not store the IP address in the request record. Subsequent clinical care has its own information and retention obligations.

Recipients and external services

Access is restricted to authorised clinic staff. Notifications are sent to the clinic’s management mailboxes, including Gmail, and to the email address you provide. Hosting and email providers act under their service agreements. Google services may involve international data processing under their applicable terms and safeguards. Your data is not sold. WhatsApp and map links open external services at your request; avoid sending medical information through these channels.

Google form protection

If you allow it, reCAPTCHA v3 loads when you press submit. Google receives technical information about the browser, device, IP address and interaction to estimate whether a submission is automated. Our server checks the result before recording your request. We do not send reCAPTCHA the name, telephone number, email address or preferences entered in the form. We do not store its score or the original token. Verification does not make clinical decisions or determine access to care: if it fails or you prefer not to enable it, you can request the same appointment by telephone or email.

Google Ireland Limited provides these services in the EEA and may process data outside this territory. Google publishes information about its entities certified under the EU–US Data Privacy Framework and other safeguards, such as standard contractual clauses. You can consult those safeguards and request further information from the clinic’s privacy contact. Google’s international safeguards ↗

Your rights

You may request access, rectification, erasure, objection, restriction and portability where applicable by writing to the contact email address or the controller’s address above. We normally respond within one month; where the law permits an extension, we will inform you. If necessary, we will request proportionate information to verify your identity. You can withdraw consent for Google services in “Privacy preferences”, without affecting the lawfulness of earlier processing. You may also lodge a complaint with Spain’s Data Protection Agency (AEPD). AEPD ↗