Privacy policy

In compliance with Regulation (EU) 2016/679 on Data Protection (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), users of this Site are informed about the processing of their personal data.

Data controller

• Controller: Sandra Gómez Villacastín
• Activity: Licensed Psychologist (COPC No. 13,984)
• Address: Vía Augusta, 120, 1º 2ª, Puerta 7 (Plaza Molina), 08006 Barcelona
• Email: sandragomez.psicologa@gmail.com

Data collected and purpose

Through the contact form, the data you voluntarily provide is collected (name, email, phone number and the content of your message), with the sole purpose of responding to your enquiry and, where applicable, managing the requested appointment.

Special category of data: health information

Within the context of a therapeutic relationship, the content of your message or the consultation process may involve data relating to your health, including mental health. Article 9.2.h of the GDPR permits the processing of this special category of data when necessary for the purposes of preventive or occupational medicine, assessment of working capacity, medical diagnosis, the provision of health care, or the management of health systems, always subject to the duty of professional secrecy to which the practice of psychology is bound.

This data is treated with the highest level of confidentiality, in accordance with the Code of Ethics of the Official College of Psychology, and is not shared with third parties except where legally required.

Legal basis

The legal basis for processing your data is your explicit consent, given by ticking the corresponding checkbox on the contact form, as well as the performance of the professional relationship that may be established, where applicable, following your request.

Data retention

Data provided through the contact form will be kept only for as long as necessary to manage your enquiry. If a therapeutic relationship begins, clinical data will be retained for the periods required by applicable healthcare and data protection regulations.

Recipients and data processors

The contact form on this Site uses the FormSubmit service to manage and send messages to the controller's email address. The Site is hosted on Vercel's infrastructure. Both providers act as data processors and may be located outside the European Economic Area, in which case the safeguards provided for by the GDPR for international transfers apply.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability by writing to sandragomez.psicologa@gmail.com, indicating the right you wish to exercise and attaching a copy of a document proving your identity. You can also file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) if you believe the processing does not comply with current regulations.