Privacy Policy

Last updated: September 2026

In accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), this policy explains how we process your personal data.

1. Data Controller

Clínica 3 de Mayo S.L.

CIF: B83091363

Registered address: Calle Real 47, 28450 Collado Mediano, Spain

Representative: Dr. Jesús Lago Oliver

Contact: administracion@institutojesuslago.com

2. Data We Collect

You can browse this site without providing any personal data. When you submit the consultation request form, we collect:

  • Your full name.
  • Your email address.
  • Your phone number.
  • The reason for your inquiry and, if you choose, a free-text message.

3. Purposes

We use your data only to:

  • Respond to your request for information or for a first consultation.
  • Handle communications before your consultation, including a quote if you ask for one.

4. Lawful Basis

We process your data on the basis of:

  • Your explicit consent, given when you submit the form.
  • Steps taken at your request before entering into a contract, where your request concerns a quote or a procedure.

5. If You Are a Patient at the Clinic

Patient data forms part of your medical records, for which Clínica 3 de Mayo S.L. is responsible, and is processed to provide the medical and surgical care you have requested. Under Article 17.1 of Spanish Law 41/2002, it is kept for the period that this law requires.

6. Retention Periods

Outside the medical record:

  • Contact details submitted through the form: for as long as our relationship lasts and as needed to deal with your request.
  • Technical connection data: one year.

7. Processors

We do not sell your data or pass it on to third parties, and no disclosure is planned unless required by law. The following providers process data on our behalf, strictly for the purposes described:

  • Vercel Inc. (United States): website hosting and delivery.
  • Resend Inc. (United States): delivering the emails generated by the form to the clinic.

These providers are based outside the European Economic Area. Transfers are safeguarded by the European Commission's standard contractual clauses.

8. Cookies

This website does not use analytics, advertising or tracking cookies. We do not set any cookies that require your consent.

9. Social Media

The clinic has accounts on Instagram, Facebook, YouTube and TikTok. If you follow one of them, the public data on your profile is processed only within that platform and under its own policies, over which we have no control.

10. Your Rights

You can exercise the following rights at any time:

  • Access to your data.
  • Rectification of inaccurate or incomplete data.
  • Erasure.
  • Restriction of processing.
  • Data portability.
  • Objection to processing.
  • Withdrawal of consent, without affecting the lawfulness of processing carried out before you withdrew it.

To exercise any of these rights, write to us stating which right you wish to exercise and enclosing a copy of a photo ID (passport or national ID card), at administracion@institutojesuslago.com.

We will respond within one month of receiving your request. This may be extended by two further months depending on its complexity, in which case we will let you know.

If you feel your rights have not been properly respected, you can lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid.

11. Changes

Clínica 3 de Mayo S.L. may update this policy. Any changes will be published on this page with the date of the update.

12. Contact

If you have any questions about this policy or how we process your data, please write to the address above. Full identification details are given in our legal notice.