Sonia López, online EMDR psychologist

Information for the user

Who is responsible for the processing of your personal data?
Sonia López Cano
It is the RESPONSIBLE for the processing of the USER’s personal data and informs them that these data will be treated in accordance with the provisions of Regulation (EU) 2016/679 of 27 April (GDPR), and Organic Law 3/2018 of 5 December (LOPDGDD).

Why do we process your personal data and why do we do it?
According to the form where we have obtained your personal data, we will treat it confidentially in order to achieve the following purposes:

Appointment requests and consultations (web form, email and WhatsApp)

  • To answer your query and manage your appointment request. (Legal basis: application of pre-contractual measures at your request, Art. 6.1.b GDPR.)
  • Treat the health data you choose to include in your message. (Legal basis: your explicit consent, Art. 9.2.a GDPR.)

Psychological care (if you start the therapy)

  • Provide the online therapy service and create and maintain your medical history. (Legal basis: execution of the contract, Art. 6.1.b GDPR, and provision of healthcare assistance, Art. 9.2.h GDPR.)
  • Issue invoices and comply with tax obligations. (Legal basis: legal obligation, Art. 6.1.c GDPR.)

I do not send commercial communications or create profiles using your data.

For how long will we keep your personal data?
Data from requests that do not lead to the initiation of therapy are deleted when they are no longer necessary to respond to you. The medical history is kept for at least five years from the completion of each care process, as required by Law 41/2002 on the autonomy of the patient. Invoices are kept for the periods stipulated by fiscal regulations. After those periods have passed, the data are securely deleted.

To whom do we provide your personal data?
No data is shared with third parties, except where required by law. To provide the service, the provider of the web hosting (Webempresa, in the European Union), the email service (Google), the WhatsApp messaging service (Meta), and the video conferencing platform for the sessions are involved as data processors. When any of them processes data outside the European Economic Area, the transfer is governed by the EU-US Privacy Shield Framework or standard contractual clauses approved by the European Commission.

What are your rights?
The rights that the USER has are:

  • Right to withdraw consent at any time.
  • Right of access, rectification, portability and deletion of your data, and the right to limit or oppose their processing.
  • Right to file a complaint with the supervisory authority (www.aepd.es) if you consider that the treatment does not comply with current regulations.

Contact details for exercising your rights:
Sonia López Cano -sonialopezemdr@gmail.com, Calle Tinte 13, 28770, Colmenar Viejo

  1. Obligatory or optional nature of the information provided by the user

The USERS, by checking the corresponding boxes and entering data in the fields marked with an asterisk (*) in the contact form or presented in download forms, expressly and freely and unequivocally accept that their data is necessary for the provider to respond to their request; the inclusion of data in the remaining fields is voluntary. The USER guarantees that the personal data provided to the RESPONSIBLE are truthful and is responsible for communicating any changes to them.

The RESPONSIBLE informs that all the data requested through the website are mandatory, as they are necessary for the provision of an optimal service to the USER. In the event that not all the data is provided, it cannot be guaranteed that the information and services provided will be completely tailored to your needs.

  1. Security measures

That in accordance with the provisions of the regulations in force for the protection of personal data, the RESPONSIBLE is complying with all the provisions of the GDPR and LOPDGDD regulations for the processing of personal data under its responsibility, and manifestly with the principles described in Article 5 of the GDPR, by which they are processed in a lawful, fair and transparent manner in relation to the data subject and adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

The RESPONSIBLE guarantees that it has implemented appropriate technical and organizational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect the rights and freedoms of the USERS and has communicated the appropriate information so that they can exercise them.
For more information about privacy guarantees, you can contact the RESPONSIBLE through
Sonia López Cano -sonialopezemdr@gmail.com, Calle Tinte 13, 28770, Colmenar Viejo