Privacy Policy

1. Data Controller

  • Controller: Alba Gámez Roca
  • ID Number: 47320161F
  • Address: Carrer Sant Felip 65, 08320 El Masnou, Barcelona
  • Website: https://therapybcn.es

2. Purpose of data processing

The personal data provided by the user may be processed for the following purposes:

  • Managing information requests, appointments or inquiries submitted through the Website.
  • Providing psychology/therapy services requested by the user.
  • Sending communications related to the services offered, if the user has given consent.
  • Complying with applicable legal obligations.

3. Legal basis for processing

The processing of personal data is based on:

  • Consent of the data subject, when the user provides their data through contact or appointment request forms.
  • Performance of a contract, when processing is necessary to provide the therapeutic service.
  • Legal obligation, when required by applicable law.

4. Health data

In the context of providing therapeutic services, health data may be processed, which constitutes a special category of data under Article 9 of the GDPR. The processing of such data is carried out on the basis of the patient’s explicit consent and within the framework of the healthcare professional relationship, applying the enhanced security measures required by law.

5. Data retention

Personal data will be retained for as long as necessary to fulfill the purpose for which they were collected and, where applicable, for the periods established by applicable legislation. Clinical record data will be retained for the minimum period required by current healthcare regulations.

6. Recipients

Personal data will not be disclosed to third parties, except where legally required or when strictly necessary for the provision of the service (e.g., video call platforms for online sessions). In such cases, it will be ensured that these third parties provide adequate guarantees in accordance with the GDPR.

7. User rights

The user may exercise the following rights at any time before the data controller:

  • Access: to know what personal data is being processed.
  • Rectification: to request correction of inaccurate data.
  • Erasure: to request deletion of data.
  • Restriction of processing: to request limitation of processing in certain circumstances.
  • Portability: to receive data in a structured format.
  • Objection: to object to the processing of their data.

To exercise these rights, the user may contact: Carrer Sant Felip 65, 08320 El Masnou, Barcelona, attaching a copy of their identity document.

The user also has the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

8. Security

The data controller adopts appropriate technical and organizational measures to ensure the security of personal data and prevent its alteration, loss, unauthorized processing or access.

Last update: May 2026