Privacy policy
Last updated: 20 October 2026
This English version is a translation provided for information purposes only. In case of any discrepancy, the Spanish version shall prevail.
1. Data controller
- Controller: Clínica UBUD S.L. (Centro Ubud) · CIF B56756158
- Address: C/ Arenas, 12 · 29620 Torremolinos (Málaga)
- Contact: centroubudtorremolinos@gmail.com · +34 602 544 143
2. What data we process and why
- Contact and appointments (WhatsApp, phone, email): name, phone number, email and the content of your enquiry, in order to reply to you and manage your appointments.
- Medical records and healthcare: identification data and health data necessary to assess and carry out your treatments, including clinical photographs to monitor your progress.
- Invoicing and payments: identification and financial data necessary to issue invoices, manage treatment packages and, where applicable, financing.
- Job applications: the data in your CV, in order to assess your application in recruitment processes.
3. Legal basis
- Your consent when you contact us (Art. 6.1.a GDPR).
- The contractual relationship for the provision of the service (Art. 6.1.b GDPR).
- The centre’s legal obligations, such as the retention of medical records and tax regulations (Art. 6.1.c GDPR).
- For health data, the provision of healthcare (Art. 9.2.h GDPR) and, where applicable, your explicit consent (Art. 9.2.a GDPR).
4. Retention
Contact data are kept for as long as the relationship lasts and, thereafter, for the applicable limitation periods for liabilities. Medical records are kept for at least five years from discharge for each care episode, in accordance with Ley 41/2002, de autonomía del paciente (Spanish Patient Autonomy Act). CVs are kept for a maximum of one year.
5. Recipients
We do not disclose your data to third parties except where required by law (for example, the tax authorities or health authorities) or where necessary to provide the service: financial institutions if you apply for financing, and providers acting as data processors (appointment management, IT, web hosting, messaging). Communication via WhatsApp involves the use of WhatsApp/Meta services, which may process data outside the European Economic Area with the safeguards provided for in the GDPR.
6. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to centroubudtorremolinos@gmail.com or to our address, stating the right you wish to exercise. If you consider that we have not handled your request properly, you may lodge a complaint with the Agencia Española de Protección de Datos (Spanish Data Protection Agency) (www.aepd.es).
7. Security
We apply appropriate technical and organisational measures to protect your data, especially health data, against unauthorised access, loss or alteration.
8. Cookies
Please see our Cookie policy.