Privacy Policy

Last updated: 16 September 2026

1. Information for the user

Who is responsible for processing your personal data?

Servicio Medico Arenal Plus SL, with tax ID B27688902 and registered office at C/ General Felix Mas, 4 2º-3, 07013 Palma (Illes Balears), is the CONTROLLER responsible for processing the USER's personal data and informs the USER that these data will be processed in accordance with Regulation (EU) 2016/679 of 27 April (GDPR) and Spanish Organic Law 3/2018 of 5 December (LOPDGDD).

What do we process your personal data for?

To maintain a commercial and service relationship with the user. The operations envisaged for the processing are:

• Provision and management of the administrative and health services involved: appointments, issuing of certificates, handling of enquiries, handling of incidents, assistance with accidents en route, etc.; for which the processing of health-related data may be necessary.
• Invoicing, collection and accounting for our services.
• Sending commercial advertising communications by e-mail, SMS, social networks or any other electronic or physical means, present or future, that makes commercial communications possible. These communications will be made by the CONTROLLER and will relate to its products and services, or to those of its partners or suppliers with whom it has reached a promotional agreement. In this case, third parties will never have access to personal data.
• Carrying out market research and statistical analysis.
• Processing orders and requests, and responding to enquiries or any type of request made by the USER through any of the contact methods made available on the CONTROLLER's website.
• Sending the online newsletter about news, offers and promotions relating to our activity.

On what grounds may we process your personal data?

Because the processing is legitimised by article 6 of the GDPR as follows:

• For the performance of a contract to which you are party (art. 6.1.b GDPR) and with your consent for the processing of health data (art. 9.2.a GDPR).
• For compliance with a legal obligation (art. 6.1.c GDPR).
• With the USER's consent: sending commercial communications and the newsletter.
• On the legitimate interest of the CONTROLLER: carrying out market research, statistical analysis, etc., and processing orders, requests, etc. at the USER's request.

How long will we keep your personal data?

They will be kept for no longer than necessary to maintain the purpose of the processing or while legal provisions require their custody; when they are no longer needed for that purpose, they will be deleted using appropriate security measures to guarantee the anonymisation of the data or their total destruction.

Who do we share your personal data with?

No communication of personal data to third parties is envisaged except, where necessary for the development and performance of the purposes of the processing, to our communications service providers, with whom the CONTROLLER has signed the confidentiality and data processor agreements required by current privacy legislation.

What are your rights?

The rights available to the USER are:

• The right to withdraw consent at any time.
• The right of access, rectification, portability and erasure of your data, and to restrict or object to its processing.
• The right to lodge a complaint with the supervisory authority (www.aepd.es) if you consider that the processing does not comply with current legislation.

Contact details for exercising your rights:

2. Mandatory or optional nature of the information provided by the user

By ticking the corresponding boxes and entering data in the fields marked with an asterisk (*) in the contact form or in download forms, USERS expressly, freely and unequivocally accept that their data are necessary for the provider to deal with their request, the inclusion of data in the remaining fields being optional. The USER guarantees that the personal data provided to the CONTROLLER are true and is responsible for notifying any change to them.

The CONTROLLER states that all data requested through the website are mandatory, as they are necessary to provide an optimal service to the USER. Should not all data be provided, it cannot be guaranteed that the information and services provided will be fully tailored to the USER's needs.

3. Security measures

In accordance with the provisions of current personal data protection legislation, the CONTROLLER complies with all provisions of the GDPR and the LOPDGDD for the processing of the personal data under its responsibility, and manifestly with the principles described in article 5 of the GDPR, whereby they are processed lawfully, fairly and transparently in relation to the data subject, and are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

The CONTROLLER guarantees that it has implemented appropriate technical and organisational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect the rights and freedoms of USERS, and has communicated the appropriate information to them so that they can exercise those rights.

For more information about privacy safeguards, you may contact the CONTROLLER at: