Privacy policy
1. Data controller
- Data controller: Lara Quintas Marquès.
- Tax ID (NIF): 46242486C.
- Address: C/ Casanova, 174, 1.º-1.ª · 08036 Barcelona, Spain.
- Contact email: quintasmarqueslara@gmail.com.
2. Why we process your data
This website is for information only and does not ask you for any data: it has no contact form, no registration, no private area and no other online procedure. There are only two possible kinds of processing:
- If you email us at the address shown on this website, we process whatever you include in your message in order to reply. That address is published for legal and data protection matters, not for booking appointments or clinical questions: for those, use the centers' phone numbers on the contact page.
- If you accept analytics cookies, we compile aggregate statistics on website use with Google Analytics: pages visited, reading time, buttons and links clicked and technical errors, to find out which content is useful and improve the site. Full details are in the cookie policy.
We do not use your data for any other purpose, we do not carry out automated profiling and we do not share it with third parties for commercial purposes.
Do not send health information by email
Health data is a special category of personal data (Article 9 of the GDPR), and ordinary email is not a secure channel for it. Do not include symptoms, diagnoses, reports or test results in your messages. To book an appointment, call the center where you would like to be seen; clinical matters are dealt with during the visit.
3. Legal basis
Replying to an email you send is based on your own consent, given when you write to us (Article 6(1)(a) GDPR). The processing of analytics cookies is likewise based on your consent, given through the cookie banner, and you can withdraw it at any time.
4. What data we process
Contact data: only what you include in the email you send us. The website does not ask you for anything.
Browsing data: only if you accept analytics cookies, and always in aggregate form without identifying you (pages viewed, items you click, time spent, device type, browser language and technical performance and error data). IP addresses are anonymized.
5. How long we keep your data
Emails are kept for as long as they are needed to deal with your request, and are then deleted.
If you are one of Dr. Quintas's patients, your clinical records — which are created during your visit, not on this website — are kept for at least five years from the discharge of each episode of care (Article 17.1 of Spanish Law 41/2002) and for fifteen years in the case of informed consent forms, discharge reports, surgical and anesthesia reports, reports of additional tests and the birth record (Article 12.4 of Catalan Law 21/2000).
If you accept analytics cookies, Google Analytics data is kept for 14 months.
6. Who your data is shared with
- Google Ireland Limited — if you accept analytics cookies, for Google Analytics; and if you choose to load a map, for Google Maps. Google may transfer data to the United States under the EU-US adequacy decision (Data Privacy Framework) and, alternatively, under the European Commission's standard contractual clauses. See Google's privacy policy.
- GitHub, Inc. — hosts this website. Because it is a static site with no database, it does not receive any data you enter, since there is nothing to enter; it does log requests to the server. See its General Privacy Statement.
No other data is disclosed, except where required by law.
7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to quintasmarqueslara@gmail.com and stating which right you wish to exercise. It is enough to write from the same email address you used to contact us, or to prove your identity by any other proportionate means: you do not need to send a copy of your ID.
If you believe we have not handled your request properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Security
We apply reasonable technical and organizational measures to protect your data against unauthorized access, loss or alteration.