​Last updated: September 2026

​

At Maresme Family Medicine, I take the privacy and security of your personal data seriously. This Privacy Policy explains how your personal data is collected, used, stored and protected when you contact me, use my website or receive medical care from me.

This policy applies to personal data processed in connection with Maresme Family Medicine, including information provided through this website, email, telephone/WhatsApp, booking systems and during medical consultations.

​

1. Who is responsible for your personal data?

Data controller: Maresme Family Medicine / Helen Kraak
Email: info@maresmefamilymedicine.com
Telephone / WhatsApp: +34 676 606 868

The data controller is responsible for deciding how and why your personal data is processed.

​

2. What personal data do I collect?

Depending on how you interact with Maresme Family Medicine, I may process:

• Your name and contact details

• Appointment and booking information

• Billing and payment information

• Information you provide when contacting me by email, telephone or WhatsApp

• Medical history, symptoms, diagnoses, medication, test results and other health information necessary to provide medical care

• Information relating to insurance or reimbursement where relevant

• Technical information relating to your use of the website, where applicable

Health information is considered special category personal data under the GDPR and is therefore subject to enhanced protection.

Please avoid sending sensitive medical information through website contact forms unless specifically requested.

​

3. Why do I use your personal data?

Your personal data may be processed for the following purposes:

• To arrange and manage appointments

• To provide medical assessment, diagnosis, treatment and follow-up

• To maintain your medical record

• To communicate with you about your care

• To issue invoices and process payments

• To deal with insurance or reimbursement requests where applicable

• To comply with legal and professional obligations

• To protect the health and safety of patients

• To improve the quality and administration of my medical services

• To respond to enquiries submitted through the website

Your personal data is not sold or used for third-party marketing purposes.

​

4. Legal basis for processing

Depending on the purpose, personal data may be processed on the following legal bases under the GDPR:

• Provision of healthcare and management of your care

• Compliance with legal and professional obligations

• Performance of a contract or steps taken at your request before entering into a contract

• Legitimate interests, where applicable and where these interests do not override your rights

• Your consent, where consent is legally required

Health data is processed only where a valid legal basis and an applicable exception for special category data under Article 9 of the GDPR applies, including where processing is necessary for the provision and management of healthcare.

Consent is therefore not necessarily the legal basis for every aspect of medical data processing.

​

5. Who may receive your data?

Your personal data is treated as confidential.

Where necessary for providing healthcare or fulfilling legal obligations, information may be shared with:

• Other healthcare professionals involved in your care

• Laboratories, diagnostic services or other healthcare providers involved in your treatment

• Insurance companies where relevant and authorised

• Professional service providers acting on my behalf, such as booking, medical-record, accounting, payment or IT providers

• Public authorities or other third parties where disclosure is required by law

Where a third-party service provider processes personal data on my behalf, appropriate data protection agreements and safeguards are used where required.

I do not sell your personal data to third parties.

​

6. Use of third-party services

Maresme Family Medicine uses third-party services to operate the practice and website. These may include services for:

• Appointment booking and medical records

• Email and communications

• Payment processing

• Accounting and invoicing

• Website hosting and related technical services

These providers may process personal data only as necessary to provide their services and, where applicable, under appropriate data processing agreements and GDPR safeguards.

Some providers may process data outside the European Economic Area. Where this occurs, appropriate safeguards required by the GDPR will be used.

​

7. How long is your data stored?

Personal data is retained only for as long as necessary for the purposes for which it was collected, taking into account applicable legal, professional, accounting and medical-record retention requirements.

Medical records are retained in accordance with applicable Spanish healthcare legislation and professional obligations. The right to request deletion of personal data therefore does not necessarily mean that medical records can be deleted immediately where there is a legal obligation to retain them.

​

8. How is your data protected?

I use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.

Access to medical information is restricted to people who need it for legitimate healthcare or administrative purposes.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

​

9. Your rights

Subject to applicable legal limitations, you have the right to:

• Access your personal data

• Request correction of inaccurate or incomplete data

• Request erasure of your personal data

• Request restriction of processing

• Object to certain processing

• Request data portability where applicable

• Withdraw consent where processing is based on consent

Some of these rights may be limited where legal or healthcare obligations require information to be retained or where access could affect the rights of others.

Requests concerning your personal data can be made by contacting:

info@maresmefamilymedicine.com

You also have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos – AEPD) if you believe your data protection rights have not been respected.

​

10. Website cookies

This website may use cookies and similar technologies. The use of non-essential cookies is subject to the applicable cookie requirements and your preferences where required.

For further information, please refer to the website's Cookie Policy / cookie settings.

​

11. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in legislation, technology or the way Maresme Family Medicine operates.

The latest version will always be published on this page, with the date of the most recent update shown at the top.

​

12. Contact

If you have any questions about this Privacy Policy or how your personal data is handled, please contact:

Maresme Family Medicine
Helen Kraak
Email: info@maresmefamilymedicine.com
Telephone / WhatsApp: +34 676 606 868