Privacy policy

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), users are informed of the following:

1. Data controller

• Controller: NG Servicios Médicos S.L. (trading as NG Clínicas)
• Tax ID (CIF): B53855409
• Address: Calle Beethoven, 20, 03203 Elche, Alicante, Spain
• Telephone: +34 965 425 372
• Email: info@ngclinicas.com

2. Personal data we process

This website has no forms of its own and does not use analytics tools. Personal data is only processed when the user chooses to get in touch or book an appointment through one of the available channels:

• Data provided by the user: name, telephone number, email address, reason for consultation or any other data the user voluntarily provides by telephone, email, the appointment assistant (SaluFile), the teleconsultation platform (SaluFirst), WhatsApp or Telegram.
• Health data: if the patient provides clinical information through those channels, it will be treated with the utmost confidentiality as a special category of data under Article 9 GDPR.
• Technical connection data: data automatically logged by the server hosting the website (IP address, browser, date and time), used solely for security and operational purposes.

3. Purposes of processing

• Managing appointment requests, in person or by teleconsultation, and patient enquiries.
• Communicating with the patient in connection with their healthcare.
• Providing healthcare and complying with the associated legal obligations.

4. Legal basis for processing

• Consent of the data subject (Art. 6.1.a GDPR): when getting in touch or booking through the available channels.
• Performance of a contract or pre-contractual steps (Art. 6.1.b GDPR): managing appointments and providing healthcare services.
• Legal obligation (Art. 6.1.c GDPR): compliance with healthcare regulations, including the retention of medical records.
• Medical diagnosis and the provision of healthcare (Art. 9.2.h GDPR): for the processing of health data.

5. Recipients and third-party services

Data will not be disclosed to third parties unless required by law. The following providers are involved:

• Google Maps (Google Ireland Ltd. / Google LLC): the map embedded in the page is loaded from Google's servers, which receive the visitor's IP address and may set their own cookies. More information in Google's privacy policy.
• SaluFirst (salufirst.com): appointment booking and teleconsultation platform, acting as data processor.
• SaluFile (salufile.com): healthcare management platform that runs the clinic's appointment assistant, acting as data processor.
• Telegram (Telegram Messenger Inc.): if the user chooses this channel, communication is also governed by Telegram's privacy policy.
• WhatsApp (WhatsApp Ireland Ltd.): if the user contacts the clinic via WhatsApp, communication is also governed by WhatsApp's privacy policy.
• Google Firebase Hosting (Google Ireland Ltd.): website hosting.
• Public authorities and health authorities: where there is a legal obligation.

6. Retention periods

• Contact details and appointment requests: for as long as necessary to manage the care relationship and, thereafter, for the applicable statutory limitation periods.
• Medical records: in accordance with Spanish Law 41/2002 of 14 November on patient autonomy and applicable regional legislation.

7. Your rights

Users may at any time exercise their rights of access, rectification, erasure, restriction of processing, objection and data portability, and may withdraw their consent, without affecting the lawfulness of processing carried out before its withdrawal.

To exercise these rights, please write to the controller at info@ngclinicas.com or by post to the address above, enclosing a copy of your identity document.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Security measures

The controller has adopted the technical and organisational measures necessary to ensure the security of personal data and to prevent its alteration, loss, or unauthorised processing or access, taking into account the state of the art, the nature of the data and the risks to which it is exposed.

9. Cookies

Full details are available in our Cookie policy.

10. Changes

The controller reserves the right to amend this policy to reflect new legislation or case law, as well as changes in professional practice.

This English version is provided for convenience. In the event of any discrepancy, the Spanish version (Política de privacidad) shall prevail.

Last updated: September 2026