GALATZÓ HEALTH · PRIVATE MEDICINE · MALLORCA
Privacy Policy
Last updated: October 2026
1. Data Controller
The data controller for personal data collected through this website is:
Galatzó Health S.L.
NIF: B44888725
Camí dels Reis, 308, Edif. 3 B, 1ª planta, Norte
07010 Palma, Balearic Islands
Spain
For privacy-related enquiries or to exercise your data protection rights, please contact Galatzó Health through the contact details provided on this website.
2. Purpose of This Privacy Policy
This Privacy Policy explains how Galatzó Health S.L. processes personal data submitted through this website.
The website provides information about private medical services and allows users to request information or a medical consultation.
Information submitted through the website does not itself constitute medical advice, diagnosis or treatment.
3. Personal Data We May Collect
Depending on how you use this website, we may process information such as:
name and surname
email address
telephone or WhatsApp number
whether you live in, are visiting or plan to visit Mallorca
information voluntarily selected or submitted through the initial health assessment or consultation request
technical information necessary for the operation and security of the website
Please do not submit detailed medical records, diagnostic reports, laboratory reports, medication lists or other medical documentation through the initial website assessment unless Galatzó Health specifically provides an appropriate secure channel for this purpose.
4. Health-Related Information
Certain information voluntarily provided through the initial health assessment may reveal information concerning your health and may therefore constitute special-category personal data under applicable data protection legislation.
Such information will only be processed where an appropriate legal basis and an applicable condition for processing special-category data exist.
The initial website assessment is intended to help organise a consultation request. It does not provide automated medical advice, diagnosis or treatment recommendations.
5. Purposes of Processing
Personal data submitted through the website may be processed for the following purposes:
responding to enquiries
managing requests for private medical consultations
contacting users regarding appointment availability
organising the initial administrative handling of a consultation request
complying with applicable legal obligations
maintaining the security and proper operation of the website
Information collected through the initial assessment will not be used to generate automated diagnoses or automated treatment recommendations.
6. Legal Basis
The legal basis applicable to the processing depends on the purpose and circumstances of the interaction.
Processing of ordinary personal data submitted when requesting information or a consultation may be based, as applicable, on the user’s request for pre-contractual measures, consent, compliance with legal obligations or other lawful bases recognised by applicable data protection legislation.
Where information constitutes data concerning health or another special category of personal data, such information will only be processed where an applicable condition under Article 9 of the General Data Protection Regulation is satisfied.
Once a healthcare relationship exists, personal data, including health data, may also be processed where necessary for preventive or occupational medicine, medical diagnosis, the provision of healthcare or treatment, or the management of healthcare services, subject to the requirements and safeguards established by applicable law.
7. No Automated Medical Decision-Making
The website assessment does not make automated medical decisions.
Answers provided through the website are not used to automatically diagnose a medical condition, determine medical suitability, prescribe treatment or recommend a specific medical intervention.
Medical decisions require appropriate individual assessment by a qualified healthcare professional.
8. Data Recipients and Service Providers
Personal data may be processed by authorised personnel of Galatzó Health and, where necessary, by service providers acting on behalf of Galatzó Health for purposes such as website hosting, technical infrastructure, communications or other services required for the operation of the website.
Where a third party processes personal data on behalf of Galatzó Health, appropriate data-processing arrangements will be implemented where legally required.
Personal data will not be sold.
9. International Data Transfers
Where a service provider processes personal data outside the European Economic Area, Galatzó Health will require an appropriate transfer mechanism or safeguard where required by applicable data protection legislation.
10. Data Retention
Personal data will be retained only for as long as reasonably necessary for the purposes for which it was collected and for any additional period required by applicable legal obligations.
Different retention periods may apply where information subsequently forms part of a healthcare relationship or medical record.
11. Your Data Protection Rights
Subject to the requirements and limitations established by applicable legislation, you may have the right to request:
access to your personal data
rectification of inaccurate personal data
erasure of personal data
restriction of processing
objection to processing
data portability where applicable
Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
You may also lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) where appropriate.
12. Data Security
Galatzó Health takes appropriate technical and organisational measures intended to protect personal data against unauthorised access, alteration, disclosure, loss or destruction, taking into account the nature of the information and the risks associated with its processing.
No method of electronic transmission or storage can be guaranteed to be completely risk-free.
13. Medical Information and Secure Communication
This website should not be used to submit urgent medical information.
Do not use the initial website assessment for emergencies.
Detailed medical documentation should only be submitted through communication channels specifically designated by Galatzó Health for that purpose.
14. Changes to This Privacy Policy
This Privacy Policy may be updated where necessary to reflect changes in legal requirements, website functionality or data-processing practices.
The current version will be made available on this page.
15. Contact
For questions concerning this Privacy Policy or the processing of personal data, please contact Galatzó Health using the contact information provided on this website.