Cellortho Marbella
    Book free consultation
    |

    Privacy Policy

    Last updated: October 2026

    1. Data Controller

    The data controller responsible for processing personal data collected through this website is:

    ARVYA MEDICAL INSTITUTE S.L. is responsible for the processing of personal data collected through this website in accordance with the EU General Data Protection Regulation (GDPR), Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), and the Spanish Law on Information Society Services (LSSI-CE).

    2. Personal Data Collected

    Through this website, we may collect the following categories of personal data:

    • Name
    • Email address
    • Phone number
    • Information submitted through contact forms
    • Appointment requests
    • Technical data such as IP address, browser type, and device information

    Where you contact us through an advertisement on Facebook or Instagram, we receive the information you enter in Meta's lead form: your name, email address, phone number and the area of the body you would like assessed. This information reaches us through Meta and is then held in our own systems.

    Health Information

    The area of the body you tell us about, and anything you choose to write in a free text field, is health data under Article 9 of the GDPR. We process it only where you have given your explicit consent at the point you send it, and only to prepare and carry out your free video consultation. You can withdraw that consent at any time by writing to info@cellortho.com, and we will delete the information.

    3. Purpose of Data Processing

    Personal data may be used for the following purposes:

    • Responding to inquiries submitted through the website
    • Scheduling consultations and appointments
    • Providing requested information about treatments and services
    • Improving the quality and functionality of our website
    • Ensuring the security and integrity of the website

    4. Legal Basis for Processing

    We process your personal data under the following legal bases:

    • Consent: When you voluntarily submit your data through a contact form or appointment request.
    • Pre-contractual steps: Steps taken at your request prior to entering a contract, such as preparing a consultation you have asked for.
    • Legal obligation: When processing is necessary to comply with applicable laws and regulations.

    5. Data Retention

    We keep enquiry and consultation-request details for 24 months from our last contact with you, after which they are deleted. Where you become a patient, clinical records are kept for a minimum of five years from the date of discharge for each care episode, as required by Article 17 of Ley 41/2002. Marketing consent records are kept for as long as the consent is active and for 3 years after it is withdrawn, so that we can show the consent was given.

    6. Data Sharing

    Your personal data may be shared with trusted third-party service providers who assist in the operation of our website and services, including:

    • Website hosting providers
    • Analytics providers
    • Booking and communication systems

    These providers are contractually obligated to process your data only in accordance with our instructions and under strict confidentiality obligations. We do not sell or rent personal data to third parties.

    Where you contact us through a Facebook or Instagram advertisement, Meta Platforms Ireland Limited collects your details in its own lead form and transmits them to us. Meta's role and responsibilities for that collection are set out in Meta's own terms and in its privacy policy at https://www.facebook.com/privacy/policy. Once the information reaches our systems we are the sole controller. We also use service providers for website hosting, appointment booking and email, who act on our instructions under written contracts.

    International Transfers

    Where you contact us through a Facebook or Instagram advertisement, your details are collected by Meta Platforms Ireland Limited inside Meta's own form and may be processed by Meta outside the European Economic Area, mainly in the United States, under the European Commission's standard contractual clauses and Meta's certification under the EU-US Data Privacy Framework. Some of our own providers, such as website hosting and appointment booking, may also process data outside the European Economic Area under the same safeguards. You can ask us for a copy of the safeguards in place by writing to info@cellortho.com.

    7. Your Rights (GDPR)

    Under the GDPR and LOPDGDD, you have the following rights regarding your personal data:

    • Right of access: to request a copy of your personal data
    • Right to rectification: to correct inaccurate or incomplete data
    • Right to erasure: to request deletion of your data
    • Right to restriction: to request that processing be limited
    • Right to data portability: to receive your data in a structured format
    • Right to withdraw consent: at any time, without affecting the lawfulness of prior processing

    To exercise any of these rights, please contact us at info@cellortho.com.

    You also have the right to lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es, if you believe we have handled your data incorrectly.

    8. Data Security

    Cellortho implements appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or loss. While no method of electronic transmission or storage is completely secure, we are committed to safeguarding the data entrusted to us.

    9. Changes to This Policy

    This Privacy Policy may be updated periodically to reflect changes in our practices or applicable legislation. Any updates will be published on this page. We encourage you to review this policy regularly.