Dra. Josie Salloum
Legal information

Privacy policy

Last updated: 3 October 2026

This policy explains how the personal data collected through https://josiesalloum.com/ is processed, in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (Ley Orgánica 3/2018, LOPDGDD).

1. Data controller

2. What data is processed and where it comes from

The data is provided by the user when using the contact form or writing by email:

We ask you not to include health data or other sensitive information in the form: it is not necessary for an initial enquiry. If you decide to include it anyway, it will be processed only to reply to your message and on the basis of your explicit consent.

In addition, only if you accept analytics cookies, browsing data is collected through Google Analytics: pages visited, type of device and browser, approximate location and cookie identifiers. This website does not use advertising or build profiles.

3. Purpose

The form data is used exclusively to handle and reply to the enquiries or requests sent by the user and, where applicable, to manage the appointment request. No commercial communications are sent. Browsing data is used to compile website usage statistics and to improve the site.

4. Legal basis

The legal basis for processing is the user's consent (Article 6.1(a) of the GDPR), given by ticking the acceptance box and submitting the form. For any health data that the user voluntarily chooses to include, the basis is their explicit consent (Article 9.2(a) of the GDPR). The use of analytics cookies is based on the consent given in the cookie banner. Consent may be withdrawn at any time, without affecting the lawfulness of the processing carried out beforehand.

5. Retention

Messages are kept for as long as necessary to handle the enquiry and, at most, one year from the last communication, unless a patient relationship with the clinic begins, in which case the retention periods applicable to clinical records apply. Afterwards, the data is deleted or kept blocked for the statutory limitation periods for possible liabilities.

6. Recipients

Data is not disclosed to third parties, except where legally required. It is accessed, as processors and under contract, by the providers of hosting, email and website maintenance services, whose servers are located in the European Union.

The typefaces on this site are loaded from Google Fonts. When they load, the browser connects to Google servers (Google Ireland Limited and Google LLC), which receive the visitor's IP address. Google LLC is certified under the EU-US Data Privacy Framework. More information in the cookie policy.

If you accept analytics cookies, Google Ireland Limited processes the browsing data as a processor through Google Analytics, with possible transfers to Google LLC (USA) under the EU-US Data Privacy Framework.

7. Rights

You may exercise at any time your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent, by writing to info@biodentclinic.com or to the controller's postal address, stating the right you wish to exercise and proving your identity. A reply will be given within a maximum of one month.

If you consider that the processing does not comply with the regulations, you may lodge a complaint with the Agencia Española de Protección de Datos (Spanish Data Protection Agency) (www.aepd.es).

8. Security

Appropriate technical and organisational measures are applied to protect the data: the site runs over an encrypted connection (HTTPS), the form is submitted through an encrypted channel and access to messages is limited to the people who need to handle them.

9. Minors

The contact form is intended for people over 14. Enquiries concerning minor patients must be made by their parents or guardians.

10. Third-party sites

This site links to external platforms (Doctoralia, Top Doctors, COEA, biodentclinic.com, Amazon, El Corte Inglés, Instagram, TikTok, WhatsApp and Google Maps). When you access them, their own privacy policies apply.

11. Changes to this policy

This policy may be updated to reflect legal changes or changes to the website itself. The version in force is the one published on this page, with its update date.