Privacy Policy

Privacy Policy
Physiotherapy and Osteopathy Stefan Schwarz

In compliance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR), and other applicable regulations on the protection of personal data, the user is informed of the following aspects:

1. Data Controller
Trade name: Stefan Schwarz Physiotherapy and Osteopathy
Responsible: Stefan Schwarz
Address: [Ronda Sant Pere 39, 3º1ª, 08010 Barcelona, Spain]
Email: info@stefan-schwarz.com
Telephone: +34 644 236 956

2. Purpose of the treatment

The personal data we collect through the booking system, forms or direct contact is used for the following purposes:
Manage appointments, reservations, and rescheduling using the Shore system.
To monitor physiotherapy and osteopathy treatments.
Issue invoices and comply with tax or administrative obligations.
To contact you regarding your appointment or treatment.
Send information related to our services (only if you have given your express consent).

3. Legal basis for processing

The processing of your personal data is based on:
Your express consent when booking an appointment or sending us an inquiry.
The execution of a health services provision contract.
Compliance with legal obligations, especially health and tax obligations.

4. Use of the SHORE reservation system

We use the external booking system Shore GmbH (Radlkoferstraße 2, 81373 Munich, Germany), which acts as a data processor pursuant to Article 28 of the GDPR.

Your data (name, email, phone number, reason for appointment, etc.) is securely stored on Shore's servers in the EU. Shore complies with European data protection regulations. You can view their privacy policy at:
https://www.shore.com/es/politica-de-privacidad

5. Recipients

Your data will not be shared with third parties, except in the following cases:
Due to legal obligation (e.g., tax administration).
To technology providers that provide necessary services (such as Shore), always with a data processing contract.
When you expressly authorize us to share them (for example, with other healthcare professionals).

6. User Rights

You have the right to:
Access your personal data.
Request the correction of inaccurate data.
Request the deletion of your data when it is no longer needed.
To oppose the treatment or request its limitation.
Request the portability of your data.

You can exercise these rights by sending an email to: [your professional email], attaching a copy of your identity document.

7. Data retention

Your data will be kept for the time necessary to fulfill the purpose for which it was collected and for the legally required periods (for example, keeping medical records or invoices).

8. Data Security

We have implemented appropriate technical and organizational measures to ensure the security, confidentiality, and integrity of your personal data. All data is stored on secure servers, in compliance with current regulations.

9. Changes to this policy

We reserve the right to modify this policy to adapt it to new legislation or changes in our services. We recommend that you review it periodically.

📅 Last updated: July 21, 2025