Data controller
- Owner
- Isabel Rodríguez Mora
- Trading name
- Centro Veterinario Ondina
- Tax ID (NIF)
- 30237332Z
- Address
- Plaza Torrequevedo, Local 8A, 29688 Cancelada (Estepona), Málaga
- info@ondinavet.es
- Phone
- +34 951 568 850
For any data protection question, you can write to us at info@ondinavet.es.
What data we process
We only process the data you give us or that is essential for the website to work securely:
- Appointment form: name, phone number, email (optional), your pet’s name and species, reason for the visit, preferred day and time, and any comments you add.
- Emails and calls: the details you include when you write to or call us.
- Technical data: the IP address the form is sent from, stored in encrypted form (as a non-reversible fingerprint) only to prevent mass submissions and abuse. The hosting provider may also record technical access data (IP, browser, date and time) in server logs for security reasons.
Please do not include health data about people, or any information not needed for the appointment, in your comments.
Why we use it and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Managing your appointment request and contacting you to confirm or change it. | Your consent (art. 6.1.a) and steps taken at your request before entering into a contract (art. 6.1.b). |
| Answering your questions by email or phone. | Your consent (art. 6.1.a). |
| Protecting the form against spam, bots and abuse (limit on submissions per IP). | Legitimate interest in keeping the website secure (art. 6.1.f). |
We do not make automated decisions or create profiles with your data, and we do not use it to send you advertising.
If you become a client of the clinic, the data needed to care for your pet (records, clinical history, invoicing, etc.) is processed at the clinic in accordance with the information we will give you there, not through this website.
How long we keep it
- Appointment requests and enquiries: for as long as needed to deal with them. If you do not become a client, we delete them within one year at the latest.
- Encrypted IP fingerprint from the form: automatically deleted within 48 hours at the latest.
- Server logs: for the period set by the hosting provider for security reasons.
After these periods, the data is deleted or, where there is a legal obligation, kept blocked for the period required by law.
Who we share it with
We do not share your data with third parties unless required by law.
To run the website and email we use a hosting provider, OVH SAS (OVHcloud), with servers in the European Union, which acts as data processor under a contract that obliges it to protect the data and use it only on our instructions.
If you choose to load the map in the contact section, Google will receive data about your browsing in accordance with its own privacy policy. Google LLC participates in the EU-US Data Privacy Framework, which ensures an adequate level of protection for international transfers.
Your rights
You can exercise the following rights at any time:
- Access: find out what data about you we process.
- Rectification: correct inaccurate data.
- Erasure: ask us to delete your data.
- Objection and restriction of processing.
- Portability: receive your data in a structured format.
- Withdraw your consent at any time, without affecting processing carried out before.
To exercise them, write to info@ondinavet.es or by post to Plaza Torrequevedo, Local 8A, 29688 Cancelada (Estepona), Málaga, stating which right you wish to exercise. If we have reasonable doubts about your identity, we may ask you to prove it.
If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Minors
Children under 14 may not give us their data without the consent of their parents or legal guardians.
Security
We apply technical and organisational measures to protect your data: the website uses an encrypted connection (HTTPS), the form validates and cleans all information received, requests are sent straight to the clinic’s email without being stored in a website database, and access to that email is restricted to clinic staff.
Accuracy of data
By sending us your data you confirm that it is correct and that, if it belongs to someone else, you have their permission. Please let us know of any changes so we can keep it up to date.
Changes to this policy
We may update this policy to reflect legal changes or changes in how the website works. The date of the last update is shown at the top of the page.
Applicable law
Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD).