1. Data controller
- Controller
- Instituto Neuroquirúrgico de Barcelona S.C.P
- Tax identification number
- J63087373
- Commercial Registry
- Barcelona Commercial Registry
- Registration details
- Volume 45520 · Folio 94 · Sheet B-490473 · Entry 1
- CNAE
- 8622
- Address
- 11-29 Carrer de Torras i Pujalt, 08022 Barcelona, Spain
- Contact
- administracionconsulta@inbscp.com
- Data-subject rights
- administracionconsulta@inbscp.com
2. Data we process
Through the form we may process identification and contact details, the general reason for the enquiry, an optional message and technical data strictly necessary to protect the service. We do not request medical reports, diagnostic images or a full medical history through the website.
3. Purposes and legal bases
- Answering enquiries and appointment requests: steps taken at the user’s request before entering into a service or consent, as applicable.
- Organising possible healthcare: where applicable, provision and management of healthcare by professionals bound by confidentiality.
- Website security: legitimate interest in preventing abuse and protecting the integrity of the service.
- Legal obligations: where a law requires specific information to be kept or disclosed.
4. Health data
Do not include detailed clinical information in the form. If it is needed to assess your case, we will provide an appropriate secure channel. Health data are special-category data and will be handled with enhanced safeguards.
5. Recipients and processors
Data may be handled by authorised staff and necessary technical providers under confidentiality and data-processing agreements where required. Data will not be disclosed to third parties except where required by law or for a properly informed healthcare need.
6. International transfers
Google Maps is loaded only after consent to external content. Google may process data under its own privacy policy. The website’s contact form does not rely on a third-party form provider.
7. Retention
Enquiries are retained for the time needed to respond and then for the minimum period required to address possible liabilities. If a clinical relationship begins, clinical information will be retained under the applicable healthcare legislation.
8. Rights
You may request access, rectification, erasure, objection, restriction and portability, and withdraw consent where consent is the legal basis. You may also lodge a complaint with the Spanish Data Protection Agency.
9. Security
Technical and organisational measures proportionate to risk are applied, including form validation, data minimisation, HTTPS and access restrictions. No system is infallible; avoid sending unnecessary information.
10. Children
Minors should use the contact channels with the assistance of a parent or legal guardian where appropriate.