Privacy Policy

1. Data controller

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we inform you that:

• Controller: VisioBlu S.L.
• Tax ID (NIF/CIF): [To be determined]
• Address: Puerto Banús, Marbella, Spain
• Email: privacidad@visioblu.com
• Data Protection Officer: dpd@visioblu.com

2. Personal data we collect

We collect the following types of personal data:

• Identification data: first name, surname, identity document.
• Contact data: email address, phone number, postal address.
• Health data: ophthalmological information relevant to assessing your suitability for treatment (only when you provide it to us voluntarily).
• Browsing data: IP address, browser type, pages visited, time spent on the site.

3. Purposes of processing

We process your personal data for the following purposes:

• To manage information requests and enquiries you send us.
• To assess your suitability for refractive surgery treatments.
• To manage appointments and medical consultations.
• To send commercial communications about our services (subject to prior consent).
• To improve our services and the user experience on the website.
• To comply with applicable legal obligations.

4. Legal basis for processing

The legal basis for processing your data is:

• Consent: when you provide your data through forms or request information.
• Performance of a contract: for the management of contracted medical services.
• Legitimate interest: to improve our services and carry out statistical analysis.
• Legal obligation: to comply with applicable healthcare and tax regulations.

5. Retention period

We will retain your personal data for the following periods:

• Enquiry data: for the duration of the commercial relationship and, thereafter, for the applicable statutory limitation periods.
• Medical data: at least 5 years from the last care provided, in accordance with healthcare regulations.
• Marketing data: until you withdraw your consent.

6. Data recipients

Your data may be disclosed to:

• Partner clinics within the VisioBlu network for the provision of services.
• Technology service providers acting as data processors.
• Public authorities where there is a legal obligation.

We do not carry out international data transfers outside the European Economic Area without appropriate safeguards.

7. Your rights

You have the right to:

• Access: find out what personal data we process about you.
• Rectification: request the correction of inaccurate data.
• Erasure: request the deletion of your data when it is no longer necessary.
• Restriction: request the restriction of processing in certain circumstances.
• Portability: receive your data in a structured, commonly used format.
• Objection: object to the processing of your data on grounds relating to your particular situation.
• Withdraw consent: at any time, without affecting the lawfulness of prior processing.

To exercise these rights, you can contact us at: privacidad@visioblu.com

You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Security measures

We have adopted the technical and organisational measures necessary to ensure the security of your personal data and prevent its alteration, loss, unauthorised processing or access, taking into account the state of technology, the nature of the stored data and the risks to which it is exposed.

9. Amendments

We reserve the right to amend this Privacy Policy to adapt it to legislative or case-law developments. In the event of significant changes, we will inform you via our website or by email.