1. Data controller
The controller of personal data collected through this website is [PENDIENTE: NOMBRE Y APELLIDOS DEL TITULAR DEL NIF], operating under the trading name Kheralia Mind & Well, tax number (NIF) 45187379S.
Contact address: C/ Alexandre Rosselló, 15, Edificio Minaco, oficina 8F, 07002 Palma, Illes Balears, España. To enquire or exercise privacy rights, email info@kheralia.es.
2. What data we collect
If you complete the contact form we may process your name, organisation, phone number, email address, language preference and enquiry. We also receive contact details when you email or telephone us directly.
Website infrastructure providers may process connection information required for functionality and security, such as IP addresses, access dates and technical logs.
Do not submit health data, clinical reports or identifiable patient details through the general contact form. Sensitive information would require a separate, properly secured communication channel and applicable safeguards.
3. Purposes and legal grounds
- Responding to professional enquiries and evaluating potential collaboration: your request, the consent given when submitting the form and, where relevant, pre-contractual steps (GDPR Articles 6(1)(a) and 6(1)(b)).
- Managing communications related to an existing professional relationship: performance of a contract, where applicable (Article 6(1)(b)), or legitimate interests in relevant business communications (Article 6(1)(f)).
- Maintaining website security and preventing misuse: legitimate interests in safeguarding the service (Article 6(1)(f)).
- Meeting legal obligations: where required (Article 6(1)(c)).
We do not use contact form messages for email advertising without an appropriate lawful basis. This form does not involve solely automated decisions with legal effects or commercial profiling.
4. Recipients and international transfers
Data may be accessed by technology providers acting for the controller, including Vercel (website hosting and form infrastructure) and Resend (technical delivery of contact messages), as well as the provider of the business email mailbox.
These providers may process or transfer data outside the European Economic Area. Resend states that data is stored in the United States and provides safeguards for international transfers, including Standard Contractual Clauses. Kheralia must confirm that its provider agreements and settings are appropriate for its subscribed services.
Data will not be shared with third parties for their independent marketing purposes, except where legally required or validly authorised.
5. Retention periods
Professional enquiries that do not lead to a contract will, under the proposed operational policy, be kept for no longer than 12 months from the last communication, unless you request earlier erasure or retention is justified by a legal obligation or the defence of claims.
If a professional relationship is established, necessary information will be retained during that relationship and for applicable statutory periods. Technology providers may apply their own contractual retention schedules to technical logs and messages.
6. Your rights
You may request access, rectification, erasure, restriction of processing, objection and data portability where applicable. Where processing is based on consent, you can withdraw that consent at any time without affecting processing carried out lawfully beforehand.
Contact info@kheralia.es to exercise your rights. We may ask for information strictly necessary to confirm identity where appropriate.
You can lodge a complaint with the Spanish Data Protection Authority (AEPD) if you believe your rights have been infringed.
7. Security, correspondence and updates
Appropriate technical and organisational measures should protect personal data against unauthorised access, loss and misuse. No transmission system is entirely without risk, so the public form must not be used to transmit clinical information.
This policy may change when services, providers or legal requirements change. The revision date appears at the top of this page.
For details about the website provider, see the Legal notice.