In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 (GDPR), the Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), and Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE), HIRAM ABIF ESPINOSA CUSTODIO guarantees the protection and confidentiality of any personal data provided by users, patients, or visitors of our website, in accordance with current regulations.

The data protection policy of HIRAM ABIF ESPINOSA CUSTODIO is based on the principle of proactive responsibility, whereby the data controller assumes and demonstrates compliance with legal obligations to the competent supervisory authorities.

1.- DATA CONTROLLER

Name: HIRAM ABIF ESPINOSA CUSTODIO
C.I.F.: 72003093Y
Address: C/ Matapiñoneras, 11 – Block 4 – Apt. 107, 28703 San Sebastián de los Reyes, Madrid
Phone: 627 39 63 22
Email: info@drespinosacustodio.com

2.- PURPOSE OF DATA PROCESSING

The personal data you provide will be included in the processing activity records owned by HIRAM ABIF ESPINOSA CUSTODIO and will be used for the following purposes:

• Provision of medical services and patient care, including appointment management, treatments, and clinical follow-up.
• Administrative and accounting management, including the issuance of invoices or payment receipts.
• Handling inquiries or information requests received through forms, email, or phone.
• Communication with data subjects to maintain the existing professional or contractual relationship.

We do not create user profiles or carry out automated decisions with legal effects.

For health-related data, processing is carried out in accordance with Article 9.2(h) of the GDPR and Article 6 of Law 41/2002, regulating patient autonomy and rights and obligations regarding clinical information and documentation.

3.- LEGAL BASIS FOR PROCESSING

The processing of your personal data is based on the following legal grounds:

• Contractual relationship: when necessary for providing requested services or formalizing medical treatments.
• Legitimate interest: to handle inquiries, complaints, and manage payments or incidents.
• Explicit consent: for electronic communications or sending information not directly related to contracted services.

4.- DATA RECIPIENTS

Personal data will not be shared with third parties unless legally required.

Data may be disclosed to:

• Public administrations, judges, and courts, as required by applicable law.
• Banks or collection agencies, when necessary to execute a contract.
• The data controller’s tax or accounting advisor, exclusively for tax or accounting purposes.
• In any other case, prior informed consent will be requested before any disclosure.

5.- INTERNATIONAL TRANSFERS

No international transfers of personal data outside the European Economic Area will be carried out, except in cases of legal obligation or explicit consent from the data subject and with adequate safeguards under the GDPR.

6.- DATA RETENTION PERIOD

Personal data will be retained only as long as necessary to fulfill the purpose for which it was collected.

After the contractual or healthcare relationship ends, data will be properly blocked for the prescription periods established by civil, tax, and healthcare legislation, exclusively to address potential liabilities or legal requirements.

Once blocked, data will be inaccessible to HIRAM ABIF ESPINOSA CUSTODIO and will only be available to competent authorities.

7.- SECURITY MEASURES

HIRAM ABIF ESPINOSA CUSTODIO has adopted all necessary technical, organizational, and security measures to ensure the integrity, confidentiality, and availability of personal data, in accordance with Article 32 of the GDPR.

Staff and collaborators are bound by confidentiality obligations and have received appropriate data protection training.

If third-party services are contracted, they must ensure compliance with the same measures and allow verification.

8.- DATA SUBJECT RIGHTS

You may exercise the following rights at any time, free of charge, as recognized in Articles 15 to 22 of the GDPR:

• Right of access: to know what personal data we process and for what purpose.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”).
• Right to restriction of processing: when data accuracy is disputed or processing is challenged.
• Right to object: when processing is based on legitimate interest.
• Right to data portability: receive your data in a structured format and transmit it to another controller.
• Right to withdraw consent at any time, without retroactive effect.

To exercise these rights, you may write to: info@drespinosacustodio.com or send a request by postal mail to the address indicated in section 1, attaching a copy of your identity document.

9.- COMPLAINTS AND SUPERVISORY AUTHORITY

If you consider that your rights have not been properly respected, you may file a complaint with the Spanish Data Protection Agency (AEPD) through the following means:

Electronic headquarters: https://www.aepd.es
Postal address: C/ Jorge Juan, 6, 28001 Madrid
Phones: 901 100 099 / 912 663 517

Filing a complaint with the AEPD is free of charge and does not require a lawyer or legal representative.

10.- POLICY UPDATES

HIRAM ABIF ESPINOSA CUSTODIO reserves the right to modify this Privacy Policy to adapt to legislative or jurisprudential changes.

Any modification will be published on this website with the date of the latest update.

Last update: October 8, 2025

Compliance verified:
GDPR (EU) 2016/679
LOPDGDD (Spain)
LSSI-CE 34/2002
AEPD best practices