Privacy policy

Protection of personal data

1. Information for users

Dr. Xavier Carbonell-Estrany (hereinafter, the CONTROLLER) is responsible for the processing of personal data and informs you that all data are handled in accordance with Regulation (EU) 2016/679 of 27 April (GDPR) and Organic Law 3/2018 of 5 December (LOPDGDD).

2. Purpose of processing

Personal data collected through the contact form will only be used to:

  • Respond to enquiries and requests for information
  • Manage requested medical appointments
  • Send information related to the medical services provided

3. Legal basis

The legal basis for processing is the consent of the data subject (Article 6.1.a GDPR), granted when submitting the contact form.

4. Data retention

Personal data will be retained while a doctor-patient relationship exists and for the legal period required for storing clinical records.

5. Data disclosure

Data will not be disclosed to third parties unless legally required. No international transfers of personal data are carried out.

6. Rights of users

Users may exercise the following rights:

  • Access, rectification, portability and erasure of data
  • Restriction or objection to processing
  • Lodging a complaint with the supervisory authority (AEPD)
  • Withdrawal of consent

Requests may be sent by email to xavier@carbonellestrany.net

7. Cookies

This website uses analytical cookies (Google Analytics) only after obtaining your explicit consent through the cookie banner. Further details are available in the cookie policy.

8. Data security

The CONTROLLER has implemented the necessary technical and organisational measures to guarantee the security of personal data and prevent alteration, loss, unauthorised processing or access.

9. Contact

For any questions regarding this Privacy Policy, please contact us at:
Email: xavier@carbonellestrany.net
Address: C/ d'Anglí, 59, 08017 Barcelona
Phone: +34 93 204 19 63

Last updated: November 2025