Privacy Policy

Last updated: [date]

This document is a courtesy translation. The Spanish version is the only legally binding version. For any legal matter, please refer to the Spanish text or contact us at hola@athyrahealth.com.

1. Data controller

The controller responsible for processing your personal data is [Company legal name], with Tax ID [NIF/CIF] and registered address at [registered address]. You can contact us regarding the privacy of your data at hola@athyrahealth.com.

2. Data we collect

We collect the data you voluntarily provide through the contact form or the information request form: name, email address, and the content of your message or query. We also record, in aggregate form and without linking it to your identity, the category of lab test you show interest in, for internal statistical purposes.

We do not request or process health data through this website. However, if you voluntarily include information relating to your health in the message field (for example, when asking about a specific test), such information is considered a special category of data under Article 9 of the GDPR, and we will only process it with your explicit consent, given by checking the consent box on the form and voluntarily sending us that information.

3. Purpose and legal basis

We process your data to respond to your inquiry, inform you about our services, and, if you authorize it, contact you regarding the lab test you have shown interest in. The legal basis for this processing is your express consent, given by checking the corresponding box before submitting the form. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

4. Data retention

We will retain your data for as long as necessary to handle your request, and for a maximum of 12 months from the last contact, unless applicable law requires a different retention period or you withdraw your consent earlier, in which case we will proceed to delete it.

5. Recipients and data transfers

We do not share your data with third parties except where legally required. If you decide to proceed with a test request, your data may be shared with the healthcare professional and accredited laboratory strictly necessary to provide the service, who will act as independent controllers regarding the clinical processing of the samples.

Certain technology providers we use to operate this website (for example, web hosting or communication tools) may involve a transfer of data outside the European Economic Area. In such cases, we will ensure that the transfer has adequate safeguards under Chapter V of the GDPR (such as standard contractual clauses).

6. Your rights

You have the right to access, rectify, and delete your data, as well as to request the restriction of or objection to its processing and its portability, by writing to hola@athyrahealth.com. You also have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe the processing of your data does not comply with current regulations.

7. Minors

This website is not directed at minors. We do not knowingly collect data from persons under 18 years of age without the consent of their legal guardians.

8. Security

We apply reasonable technical and organizational measures to protect your data against unauthorized access, loss, or alteration, appropriate to the risk of the processing.

We may update this policy to reflect regulatory changes or changes to our services. The date of the last update is shown at the beginning of this document.