Legal
Privacy policy
Last updated: 6 November 2026. This is a translation for information; the Spanish version prevails.
This policy explains how we process your personal data when you use the website lvng.health, in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on data protection and digital rights (LOPDGDD).
1. Data controller
| Controller | Juan Fabiani de la Iglesia |
|---|---|
| Tax ID (NIF) | 53962151B |
| Registered address | Vía Augusta, 229, 08021 Barcelona (Centro Médico Ganduxer) |
| Privacy email | [email protected] |
| Data protection officer | Not appointed: not required for a healthcare professional practising on their own (art. 34.1.l LOPDGDD) |
2. What data we process and why
| Treatment | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Waiting list | Name, email, phone (optional), location, language and programme of interest | Letting you know when we open appointments and managing your booking | Your consent (art. 6.1.a GDPR) | Until you book or withdraw your consent, and for 12 months at most |
| News by email | Sending you LVNG news, only if you tick the box | Your consent (art. 6.1.a GDPR; art. 21 LSSI) | Until you unsubscribe | |
| Enquiries through the form or by email | Name, email and whatever you tell us | Answering your enquiry | Your consent and pre-contractual steps (art. 6.1.a and b) | As long as needed to reply and, at most, 12 months |
| Visit measurement | Aggregated browsing data, with no cookies or identifiers | Learning how the website is used | Legitimate interest in improving it (art. 6.1.f GDPR) | Nothing that identifies you is stored |
Health data. The website's forms don't ask for health data: please don't include any. Clinical data are collected only in the consultation, processed for your healthcare (art. 9.2.h GDPR) and kept in your medical record under Law 41/2002 on patient autonomy, for at least five years from each episode of care. That processing is governed by the information you will receive at your first consultation.
LVNG Lab calculators. Calculations are done in your own browser: the data you enter is neither sent nor stored.
3. Recipients
We do not share your data with third parties unless required by law. The following help us provide the service, as processors under a contract compliant with art. 28 GDPR: Cloudflare (website hosting, waiting list and cookie-free visit measurement), Google (email) and Doctoralia (booking platform).
International transfers. Cloudflare and Google are US companies and may process data outside the European Economic Area. Both are certified under the EU-US Data Privacy Framework and apply the European Commission's standard contractual clauses. Doctoralia (Docplanner) processes data within the European Union.
4. Your rights
You can request access to, rectification or erasure of your data, restriction of processing and portability, object to processing and withdraw your consent at any time, without affecting prior processing. Write to us at [email protected] stating which right you are exercising. We will reply within one month.
If you believe we haven't handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es).
5. Security
We apply appropriate technical and organisational measures to protect your data: encrypted connection, restricted access and providers with security guarantees.
6. Minors
LVNG's services are for people aged 18 or over. We don't collect data from minors through the website.
7. Changes
We may update this policy. The date of the last update appears at the top.