Privacy Policy
This Privacy Policy explains which personal data are processed when you visit www.gran-canaria-osteopathie.com and when you contact us.
1. Data Controller
Claudia Hartwig
Consulta de Osteopatia y Fisioterapia
Phone: +34 618 772 691
E-Mail: info@gran-canaria-osteopathie.com
Further provider information can be found in our Imprint.
2. Website Access and Server Log Data
When you access this website, the web server processes technically necessary connection data. This may include, in particular, the IP address, date and time of access, the requested page or file, amount of data transferred, browser type, operating system and referrer information. This processing is necessary to deliver the website, ensure its stability and security and detect technical errors or misuse.
The legal basis is Article 6(1)(f) GDPR (legitimate interest in providing a secure and technically functional website). Server log data are retained only for as long as necessary for operation and security. The specific technical retention period depends on the server and hosting configuration.
3. Technically Necessary Session Cookie
On the contact page, the server may set a technically necessary session cookie (PHP session). It is used exclusively for security functions of the contact form, in particular protection against abusive form submissions (CSRF protection and form validation). The cookie is not used for analytics, advertising or profiling and generally expires at the end of the browser session.
No prior consent is required for technically necessary cookies. Based on the technical configuration reviewed here, this website does not use analytics or marketing cookies.
4. Contact and Contact Form
If you contact us by phone, e-mail or contact form, we process the data you provide in order to handle and answer your enquiry. The contact form processes your name, e-mail address and message.
The legal basis is Article 6(1)(b) GDPR where your enquiry concerns the initiation or performance of a treatment or other contractual relationship. In other cases, processing is based on Article 6(1)(f) GDPR (legitimate interest in responding to enquiries).
Please do not send detailed diagnoses, medical reports or other sensitive health data through the general contact form. If medical information is required for your treatment, please arrange an appropriate communication method with us.
Data submitted through the contact form are sent to the practice by e-mail. We retain them only for as long as necessary to process your enquiry and to comply with statutory retention obligations.
5. Spam and Abuse Protection
The contact form uses only our own technical protection measures, including an invisible control field (honeypot), a minimum completion time, CSRF protection and a simple limitation on repeated requests. No external CAPTCHA or tracking service is used for this purpose.
6. Google Maps
Google Maps is not loaded automatically on the contact page. Initially, only a local notice is displayed. The Google map is embedded only after you actively click “Load Google Maps”. At that point, a connection to Google servers is established and, in particular, your IP address as well as technical browser and device information may be transmitted to and processed by Google. Google may also use its own cookies or similar technologies.
The map is therefore loaded only after your deliberate activation. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing by other Google companies, including outside the EU/EEA, cannot be ruled out. Further information is available in Google's privacy policy: Google Privacy Policy.
7. External Links
This website contains links to external websites. A connection to the respective external website is established only when you click such a link. The respective provider is responsible for its content and data protection practices.
8. Recipients and Processors
Personal data may be processed to the technically necessary extent by service providers used for operating the website, server or e-mail communication. Where required, this processing is carried out in accordance with the legal requirements governing data processing on behalf of the controller.
9. Retention Period
Personal data are generally processed only for as long as the respective purpose continues to exist. Statutory retention obligations may require longer storage.
10. Your Rights
Under the conditions of the GDPR, you have in particular the right of access, rectification, erasure, restriction of processing, data portability and the right to object to processing based on Article 6(1)(f) GDPR.
You also have the right to lodge a complaint with a data protection supervisory authority. In Spain, this is in particular the Agencia Española de Protección de Datos (AEPD).
11. Data Protection Contact
Claudia Hartwig
Phone: +34 618 772 691
E-Mail: info@gran-canaria-osteopathie.com
Last updated: September 2026