Legal

Privacy policy

This policy explains how personal data is processed on the website and in the management of enquiries, pre-bookings and operational follow-up.

Review date:26 de marzo de 2026

Enhanced document for Andorran context (Llei 29/2021). It still requires corporate data closure and legal counsel validation before final irreversible version.

Pending legal closure fields

[PENDING_VALIDATION] Full controller identification (legal name and NRT).
[PENDING_VALIDATION] Data Protection Officer confirmation (if legally required).
[PENDING_VALIDATION] Final list of processors and active tools.

1. Data controller

Commercial controller: Centros Ideal Andorra.

General contact: info@andorraideal.com.

Privacy channel: info@andorraideal.com (until a specific channel is assigned if needed).

2. Categories of data processed

Identification and contact data: name, phone and email.
Agenda and appointment preferences (time window, professional, availability).
Consultation context data voluntarily provided by the user.
Minimum technical data for security, language and website operation.

3. Processing purposes

Answer enquiries and information requests.
Manage pre-bookings, agenda coordination and follow-up.
Maintain operational traceability and non-medical care continuity.
Improve web experience with optional analytics only when valid consent exists.

4. Legal basis

Execution of pre-contractual steps requested by the data subject.
Compliance with applicable legal obligations.
Legitimate interest in security, abuse prevention and internal organisation.
Consent for optional purposes (for example, non-essential analytics).

5. Data retention

Enquiries not converted into appointments are retained for limited, reviewable periods.
Service-linked data is retained according to legal, tax and liability obligations.
Technical and security logs are retained minimally and proportionately.

6. Recipients and processors

Data is not shared with third parties except legal obligation or operational necessity.
When providers are involved, processing clauses and confidentiality duties are established.
Data minimisation principle applies: access only when functionally necessary.

7. International transfers

As a general rule, no international transfers outside Andorra are expected without proper legal basis and safeguards.

If future tools require international processing, this policy will be updated and explicitly communicated.

8. Data subject rights

Rights of access, rectification, erasure, objection, restriction and portability when applicable.
Rights can be exercised in writing through the stated privacy channel.
If no satisfactory response is received, users can contact APDA as supervisory authority.
APDA reference contact: apda@apda.ad | +376 808 115.

9. Security and confidentiality

Access control, configuration reviews and data minimisation measures.
Security best practices on forms, storage and internal operations.
Confidentiality commitment for staff and authorised collaborators.

10. Policy updates

This policy may be updated to reflect legal, technical or operational changes.

The review date shown in the header indicates the latest published update.