Privacy policy

Data controller

• Holder: Jorge Pastor Ruiz de la Fuente (self-employed professional)
• Professional address: Calle Alonso de Castro 3, Of. 303, Edif. Cinelandia, La Cuesta, 38205 San Cristóbal de La Laguna
• Email: jpastor90@gmail.com
• Phone / WhatsApp: 629 485 957

What data is processed and why

This website has no forms and does not ask you for personal data. The data you give when you book (Google Calendar) or pay (SumUp) is received by that service, and I access it to manage your appointment. Only the data needed in each case is processed:

• If you message me on WhatsApp: your number, your profile name and the content of your message, to reply and agree an appointment. Legal basis: your consent when you write to me.
• If you book an appointment: your name, contact details and the date and time of the appointment, to manage it. If you pay by card, SumUp handles the payment; I do not have access to your full card number. Billing data is processed to issue the invoice and meet tax obligations. Legal basis: performance of the contract and legal obligation.
• During therapy: health data and clinical records, to provide psychological care. Legal basis: your explicit consent and the legal obligation to keep clinical documentation. This data is not collected through this website.
• When you visit the website: the hosting service may record your IP address and technical browser data for security and operation. If you accept analytics cookies, Google Analytics collects aggregated usage data (pages viewed, device type, approximate country) to improve the website; it includes no health data and is not used for advertising. Legal basis: your consent, which you can withdraw at any time (see the cookie policy).

A recommendation

Before your first session, avoid sending detailed clinical information over WhatsApp. It is better to discuss it in the consultation, where confidentiality safeguards apply.

Who may receive your data

I do not share your data with third parties unless required by law. Providers involved in delivering the service act on the owner's behalf or under their own terms:

• Web hosting: Amazon Web Services.
• Messaging: WhatsApp (Meta).
• Video calls: Google Meet, Zoom or Microsoft Teams, depending on the platform used in your online session.
• Payments and online store: SumUp.
• Bookings: Google Calendar (appointment scheduling).
• Analytics (only if you accept analytics cookies): Google Analytics (Google).

International transfers

Some of these providers may process data outside the European Economic Area with the safeguards required by the GDPR details to be verified with each provider.

How long data is kept

• Contact messages: kept for as long as the professional relationship lasts and for legal periods; you can ask for them to be deleted at any time specific period to be set with the advisor.
• Billing data: the period required by tax and commercial law.
• Clinical records: at least five years from the end of each care process, under Spanish Law 41/2002 to be verified with a legal advisor.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to jpastor90@gmail.com and proving your identity. You can also withdraw your consent at any time.

If you believe your data has not been handled properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).

Minors

I see teenagers from age 13. For psychological care and the processing of their data I ask for the consent of their parents or legal guardians, who sign the informed consent and the data protection documents. They need to come to sign, but they do not have to be present in the first session.

Confidentiality and security

Data is handled under the duty of professional secrecy and with appropriate technical and organisational measures to protect it. Sessions are not recorded, whether in person or online.

Changes to this policy

If this policy changes, the new version will be published here with its date.