Privacy Policy

In accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD), we provide you with the following information:

1. Data Controller

The owner of this website and the Data Controller for the personal data provided through it is:

PHYSIOTHERAPY CCM S.L.P
CIF: B26799379
Av Riera de Cassoles 43 4rt 6ª 08012 (BARCELONA)
Contact and data protection email: contacto@craneolab.com

2. Personal Data Collected on This Website

This website is for informational purposes only and therefore does not include contact forms or appointment booking forms.

The only personal data that may be collected are:

• Data that you voluntarily provide when contacting us by email, telephone, or WhatsApp.
• Technical data obtained through anonymized analytical cookies, which do not allow you to be identified.

This website does not collect or process health data or any other special categories of personal data.

3. Purposes of Processing

The personal data you provide may be used to:

1. Respond to your requests for information or contact when you communicate with us by email, telephone, or WhatsApp.
   
   
2. Manage administrative matters related to those communications.
   
   
3. Obtain website usage statistics through Google Analytics using IP anonymization, without collecting personally identifiable information.

No profiling or automated decision-making producing legal effects or similarly significant effects is carried out.

4. Online Appointments (External Platform)

The appointment booking system is provided through an external platform independent of this website: https://app.reasoningphysios.com/CitaOnline/…

When you enter your data into said platform to request an appointment, the data is processed by CRANEOLAB as the Data Controller, as it forms part of the management of the care relationship and the physiotherapy services provided.

The platform used acts as a Data Processor, providing only the technical support necessary to manage appointments. Personal data processing is carried out in accordance with its contractual terms and CRANEOLAB’s instructions, applying the security measures required by the GDPR.

This website (craneolab.com) does not directly collect personal data; instead, collection takes place on the appointment management platform as part of the requested service.

5. Legal Basis for Processing

Under the GDPR, the legal bases for processing your personal data are:

• Your consent when you voluntarily contact us using the available communication channels.
  
  
• The legitimate interest of the Data Controller in managing communications received.
  
  

Analytical cookies are processed based on your prior consent, which you may withdraw or modify at any time through our Cookie Policy.

6. Data Retention

Personal data provided through email, telephone, or WhatsApp communications will be retained:

• For the time necessary to respond to your request.
  
  
• For any legally required retention periods relating to tax obligations or professional liability.
  

Anonymized browsing data may be retained in accordance with Google Analytics’ configuration settings.

7. Recipients and Data Processors

Personal data will not be disclosed to third parties unless required by law.

Service providers that may have access to personal data in order to provide services (such as hosting providers, email services, WhatsApp/Chaty, or web analytics providers) act as Data Processors under the corresponding contractual agreements and GDPR-compliant safeguards.

8. International Data Transfers

International transfers of personal data are not anticipated, except those resulting from the use of services such as:

• Google Analytics, which applies safeguards such as Standard Contractual Clauses (SCCs) and IP anonymization.
  
• WhatsApp, owned by Meta Platforms, which operates through international service providers and applies GDPR compliance mechanisms.

9. Your Rights

You may exercise your rights of access, rectification, erasure, restriction, portability, and objection by writing to: contacto@craneolab.com

You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD): https://www.aepd.es

10. Security

The Data Controller implements appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of the personal data processed.

11. Source of the Data

The personal data processed originates exclusively from:

• Communications sent directly by you via email, telephone, or WhatsApp.
  
  
• Technical information generated by non-identifying analytical cookies.