Sole Centro de Imagen Integral — Dermatología & Medicina Estética, Nerja

SOLE Centro de Imagen

Privacy policy

1. Data controller

Owner: Soledad Jiménez Gallardo. Trading name: SOLE CENTRO DE IMAGEN INTEGRAL. Tax ID: 52351740Z. Registered address stated in the original legal notice: Urb. Condal no. 35, 29780 Nerja (Málaga), Spain. Centre: Avd. Constitución s/n (opposite no. 1), 29780 Nerja (Málaga). Contact: info@solecentrodeimagen.com · +34 952 523 813.

This policy describes processing under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018.

2. Data and sources

We receive the details you provide when contacting us: name, telephone, email and message. Orders also require products, quantities, amount, delivery address and order reference. The contact form opens your email application; the message is sent from that application, not automatically by this website.

Hosting infrastructure may process technical data such as IP addresses and security logs. We have not installed Google Analytics or advertising pixels. Google Maps receives technical data only when you allow it to load. Stripe handles payment in its own environment; this website does not receive or store your full card number.

Do not include medical information or other special-category data in the general enquiry form. Any clinical records are handled separately with their own privacy information and lawful basis.

3. Purposes and lawful bases

Enquiries: replying on the basis of consent and, for requested services, steps prior to entering a contract. Appointments and orders: performance of the contract. Invoicing and tax duties: legal obligations.

Website security and fraud prevention: legitimate interests, respecting your rights. Optional external content: consent. Cookie acceptance and enquiry submission do not authorise advertising.

4. Recipients and transfers

Necessary hosting and technical providers (Lovable Cloud), email services, payment services (Stripe), carriers and advisers may access data as needed to provide services or comply with the law. Google receives data when an authorised map loads; WhatsApp and social networks apply their policies when you choose to use them.

Some providers may process data outside the European Economic Area. Safeguards must match the contracted provider and service, such as a current adequacy decision or standard contractual clauses where appropriate. Request details of the actual providers and safeguards at info@solecentrodeimagen.com.

5. Retention

Enquiries are retained for the time needed to respond and address liabilities. Order and billing records are retained for applicable tax, accounting and claims periods, generally four years for tax duties and six years for commercial records, without prejudice to other statutory periods.

Cookie choices expire after six months. The basket remains in local storage until cleared or browser data is deleted.

6. Your rights

Request access, rectification, erasure, objection, restriction and portability where applicable at info@solecentrodeimagen.com or by post to the controller. Withdraw consent without affecting prior lawful processing. Additional identity information will only be requested when necessary.

We normally respond within one month. Complex requests may take up to two additional months, with notice. You may complain to the Spanish Data Protection Agency: https://www.aepd.es.

7. Security and changes

Access should be restricted to people who need to handle the data. Technical and organisational safeguards must remain proportionate to risk. Incidents will be handled in accordance with GDPR duties.

We will update this policy when processing or providers change and request fresh consent when required.