Privacy Policy

1. Data Controller

The personal data collected through this website or during the medical consultation will be processed by Dra. Maria Fernanda Ocampo, an aesthetic medicine specialist with collegiate number 291409735 at the Medical College of Malaga, with professional address at Clínica Vasari, Av. Federico García Lorca, 35, 29631 Benalmádena, Málaga.

2. Purpose of Data Processing

Your data is collected strictly for the following purposes:

• Management of medical appointments and the provision of specialized aesthetic medicine care.
• Creation, maintenance, and safeguarding of the clinical history (Mandatory under Law 41/2002 on Patient Autonomy).
• Direct communication with patients via WhatsApp or phone for immediate follow-ups, appointment reminders, and post-treatment guidance.
• Response to web contact forms and inquiries, including transient, anonymized processing of inputs by our Virtual Assistant Lucas AI.

3. Legal Basis

The legal bases for processing your data under the GDPR are:

• Explicit Consent (Art. 6.1.a GDPR): When using contact forms or WhatsApp to initiate communication.
• Execution of a Contract (Art. 6.1.b GDPR): Provision of requested aesthetic medical services.
• Legal Obligation (Art. 6.1.c GDPR): Maintaining medical records according to Spanish health laws.

4. Data Retention Periods

Clinical history data will be kept for a minimum of 5 years from the date of discharge of each health process, as required by law. Contact data for inquiries will be deleted once the request is resolved, unless it leads to a medical service.

5. Data Sharing and Third Parties

Your data is strictly confidential and will not be sold or shared with commercial entities. It may only be shared with competent Health Authorities if required by law, or with essential service providers bound by strict confidentiality agreements (e.g., medical software providers or Google Cloud's Gemini API processor for virtual assistant responses, which processes anonymized inputs without persistence of health data).

6. User Rights

You can exercise your rights of Access, Rectification, Deletion, Portability, Limitation, and Opposition by sending a formal request via email to the clinic, alongside proof of identity. If you feel your rights have not been respected, you can file a claim with the AEPD (Spanish Data Protection Agency).

7. Use of Artificial Intelligence (Chatbot Lucas)

Our virtual assistant Lucas is an automated Artificial Intelligence system powered by the Google Gemini API. By interacting with the chat, you acknowledge and agree that:

• Lucas is an AI assistant, not a doctor or medical professional. His answers are purely informational and orientative.
• The chat does not substitute a medical consultation, professional assessment, or diagnosis by Dr. Ocampo.
• The system automatically filters and attempts to anonymize personal data. Please do not share unnecessary clinical information, medical history, or sensitive personal data in the chat.
• No conversation history is stored in external databases. The data is processed transiently under a strict Data Processor Agreement with Google Ireland Limited.
• The virtual assistant does not install any cookies, create user profiles, or use your data for commercial or advertising purposes.