Legal
Information about how Sangpanya Salud processes personal data.
Controller: Tanutcha Sangpanya, NIF Y1127662D, trading as Sangpanya Salud. Address: Calle Arriaza 10, local, 28008 Madrid, España. Email: sangpanyasalud33@gmail.com. Telephone: +34 622 912 478. No data protection officer is required or appointed for this activity.
We process the identification and contact data you provide when you call, email or use WhatsApp, together with the information needed to answer your enquiry, manage an appointment, provide the service and meet accounting, tax or legal obligations. The legal bases are steps requested before entering into a contract, performance of the service contract and compliance with legal obligations.
Marketing messages are sent only with consent and can be withdrawn at any time. Optional aggregated website analytics and campaign measurement are activated only with consent and can be disabled at any time through the cookie preferences in the footer.
If you voluntarily disclose health information or contraindications, it is used only to assess safety and adapt or decline a treatment. Where special-category health data is processed, the centre will rely on your explicit consent and apply data minimisation. Please do not send unnecessary medical details through WhatsApp or email.
Data may be accessed only where necessary by providers supporting hosting, aggregated analytics, campaign measurement, communications, appointment management, administration and professional advice, under appropriate contractual and confidentiality duties. Public authorities may receive data where legally required.
Vercel provides hosting and optional privacy-focused analytics. Google Tag Manager and Google Ads are contacted only after marketing consent; the locally hosted location illustration does not contact Google, and Google Maps opens only when you follow its external link. WhatsApp/Meta is contacted only when you choose that channel. Some providers may process data outside the EEA using applicable adequacy decisions, standard contractual clauses or other lawful safeguards.
Enquiries are kept only as long as necessary to answer and follow up, normally no longer than 12 months after closure unless they lead to a customer relationship. Appointment and customer records are retained while the relationship is active and afterwards for the limitation periods needed to address claims. Invoices and business documentation are retained for legally required tax and commercial periods. Marketing consent lasts until withdrawn, and evidence of consent or objection may be retained to demonstrate compliance.
You may request access, rectification, erasure, restriction, portability or objection, and withdraw consent without affecting previous lawful processing, by writing to sangpanyasalud33@gmail.com. We may ask for information needed to verify your identity. You may lodge a complaint with the Spanish Data Protection Agency.
Reasonable technical and organisational measures are used to protect personal data. The service is not directed at children and the website does not knowingly collect children's data. Material policy changes will be published on this page with an updated revision date. Last updated: 30 July 2026.
