Privacy policy

1. DATA CONTROLLER

Daniel Cortada Hortalà, as the party responsible for the website and the professional activity, is committed to protecting the privacy of users and to processing their personal data in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR), Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), and any other applicable data protection regulations.

PURPOSE OF PROCESSING

The personal data provided by users may be processed for the following purposes:

• To handle and respond to enquiries and requests for information made through the website, e-mail or WhatsApp.
• To manage appointment requests and communications related to psychological services.
• To provide the professional psychology services requested or contracted.
• To manage the professional, administrative, accounting and tax relationship with clients.
• To manage appointments or services requested through external platforms used by the practice, such as Doctoralia.
• To maintain the necessary communications with users in relation to the services requested.
• To send commercial communications when the data subject has given the corresponding consent or when there is another legal basis that permits it.
• To manage the operation and security of the website.
• To analyse the use of the website through cookies when the user has given the necessary consent.
• To comply with the legal obligations applicable to the data controller.

Given the nature of the services provided, in certain cases data relating to health or other special categories of personal data may be processed. Such data will only be processed when there is a legal basis that permits it and with the safeguards established by applicable regulations.

3. DATA THAT MAY BE COLLECTED

Depending on the service or the interaction with Cortada Psicòlegs, data such as the following may be processed:

• Identification and contact details.
• Data necessary to manage an appointment or request for information.
• Data related to the provision of psychological services.
• Data necessary for administrative, accounting and tax management.
• Data provided voluntarily via e-mail, WhatsApp, web forms or other available channels.
• Data obtained through cookies, in accordance with the provisions of the Cookie Policy.

Users undertake to provide accurate, up-to-date and truthful data.

4. LEGAL BASIS FOR PROCESSING

Personal data will be processed in accordance with the legal basis applicable in each case, which may include:

• The consent of the data subject, where required.
• The performance of a contract or the application of pre-contractual measures, where processing is necessary to provide the requested service.
• Compliance with legal obligations, where the controller is required by law to process the data.
• Legitimate interest, where applicable and in accordance with the requirements established by regulations.
• Other legal bases provided for by law.

Where processing is based on consent, the data subject may withdraw it at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before its withdrawal.

5. DATA RECIPIENTS

Personal data may be processed by the controller and by the professionals and staff of Cortada Psicòlegs where necessary for the performance of their duties.

Depending on their responsibilities, this may include psychology professionals and the staff in charge of reception or administrative tasks, always according to their duties and the needs of the service.

Data may also be disclosed to external providers where necessary for the provision of services or the operation of the activity, always in accordance with applicable regulations.

The external platforms used by the practice include Doctoralia, which may be involved in managing appointments and services when the user uses this platform.

Data may also be disclosed where there is a legal obligation, a court order or a request from the competent authorities.

Data will not be sold or transferred to third parties for commercial purposes.

6. INTERNATIONAL TRANSFERS

Where any of the providers or services used involves an international transfer of data, this will be carried out in accordance with the safeguards and requirements established by the GDPR and applicable regulations.

7. DATA RETENTION

Personal data will be kept for as long as necessary to fulfil the purposes for which it was collected.

Where there is a professional or contractual relationship, data will be kept while that relationship is in force and for the periods required by applicable legal obligations.

Data related to enquiries or requests for information will be kept for the time necessary to handle them and, where appropriate, for the periods necessary to address any potential liabilities.

Documentation related to the provision of psychological services will be kept for the periods established by applicable regulations.

Once the corresponding periods have elapsed, data will be deleted or, where appropriate, blocked or anonymised.

8. RIGHTS OF DATA SUBJECTS

Data subjects may exercise the following rights:

• Right of access: to know which personal data is being processed.
• Right to rectification: to request the correction of inaccurate or incomplete data.
• Right to erasure: to request the deletion of data when the legal requirements are met.
• Right to object: to object to certain processing.
• Right to restriction of processing: to request that the processing of data be temporarily restricted.
• Right to data portability: to receive data in a structured format where applicable.
• Right to withdraw consent: to withdraw consent at any time where processing is based on it.
• Right not to be subject to automated individual decisions: not to be subject to a decision based solely on automated processing, including profiling, where applicable.

To exercise these rights, a request may be sent to:

A written request may also be sent to the postal address indicated in this document.

The controller may request additional information to verify the identity of the applicant where necessary.

9. COMPLAINTS

If the data subject considers that the processing of their personal data infringes applicable regulations, they may lodge a complaint with the Spanish Data Protection Agency (AEPD) or with the competent supervisory authority.

10. COOKIES

The website may use cookies and similar technologies.

Detailed information on the cookies used, their purposes, their providers and how to manage consent is available in the Cookie Policy.

Cookies requiring consent will only be used when such consent has been validly obtained.

11. SOCIAL MEDIA

Cortada Psicòlegs may have professional profiles on various social networks.

The processing of data arising from users' interaction with these profiles will be subject to the terms of use and privacy policies of the respective platforms, as well as applicable regulations.

Data voluntarily provided by users through social networks may be processed to manage communication and interaction with those persons, in accordance with the corresponding purpose and applicable regulations.

12. SECURITY

Cortada Psicòlegs applies appropriate technical and organisational measures to protect personal data against destruction, loss, alteration, disclosure or unauthorised access, taking into account the nature of the data and the risks associated with processing.

13. UPDATES

This Privacy Policy may be amended when necessary to adapt it to legislative, case-law, technical or operational changes to the website.

The version in force will be the one published on the website at any given time.

Last updated: September 2026