Privacy Policy

CENTRE FISIOTERAPIA WOW SL (trade name PhysioWOW), with Tax ID B26643486 and registered office at Camí de Can Gatxet, 55, Local 1, 08173 Sant Cugat del Vallès (Barcelona), is responsible for processing the User's personal data and informs that this data will be processed in accordance with Regulation (EU) 2016/679 of April 27 (GDPR) and Organic Law 3/2018 of December 5 (LOPDGDD). Physiotherapy services are provided by the licensed physiotherapist Sergi Pueyo (license nº 12907) within the activity of CENTRE FISIOTERAPIA WOW SL. The personal data we process through this website comes directly from the User. The User warrants that the data provided is accurate and undertakes to notify us of any changes to it.

We process your data for the following purposes: • Management of appointments and provision of physiotherapy services • Preparation of medical records and treatment follow-up • Communications related to our services • Administrative and accounting management • Compliance with legal obligations • Sending commercial information (with prior consent)

The legal basis for processing your data is: • Contract execution: processing necessary for the provision of requested physiotherapy services • Legitimate interest: improvement of our services and non-commercial communications • User consent: for sending commercial communications and newsletters • Legal obligation: compliance with health, tax and accounting regulations

Personal data provided will be kept: • Clinical data: for the time established by health legislation (minimum 5 years from the last visit) • Billing data: 6 years according to tax regulations • Data for commercial communications: until you request unsubscription • Web browsing data: as established in our cookie policy

Your data may be communicated to: • Healthcare professionals involved in your treatment • Public administrations when there is a legal obligation We also use the following service providers under confidentiality agreements: • Holded (accounting): contacts (name, email, phone, ID number, address) and invoices • Doctoralia (in-clinic appointment management): bookings, patient data (name, email, phone) and schedules • Redsys / CaixaBank (payment processing): transaction data and payment amounts • SEUR and CTT Express (shipping): shipping addresses, package data and tracking • Resend (email communications): emails, names and rental, appointment or shipping data • Google Calendar (scheduling): calendar events and availability • Google (Google Analytics and Google Ads): browsing data, device identifiers and, where applicable, conversion data (email or phone in hashed form), for analytics and advertising purposes • Meta Platforms (Facebook, Instagram and WhatsApp): browsing and interaction data for advertising and measurement purposes, as well as the contact details you provide when you communicate with us via WhatsApp Some of these providers (Resend, Google and Meta) are based or have infrastructure outside the European Economic Area, mainly in the United States. International transfers are carried out with appropriate safeguards, including European Commission adequacy decisions (such as the EU-US Data Privacy Framework) and standard contractual clauses.

You have the right to: • Access: obtain information about what data we process about you • Rectification: correct inaccurate or incomplete data • Deletion: request the deletion of your data • Limitation: request limitation of processing • Portability: receive your data in structured format • Opposition: object to the processing of your data • Revocation of consent: withdraw consent at any time You can exercise these rights by sending an email to physiowow@gmail.com or in writing to our postal address, duly proving your identity. You also have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es).

Our services and web forms are intended for people over 14 years of age. Minors under 14 must not provide us with personal data without the consent of their parents or legal guardians. For physiotherapy services provided to minors, their data is always processed with the consent and under the supervision of their parents or legal guardians. If we detect that we have collected a minor's data without proper authorization, we will delete it.

On physiowow.com and on our WhatsApp number we offer an automated assistant based on artificial intelligence. It is an automated system, not a person, and the chat itself says so permanently. You can ask to be attended by a member of the team at any time. Purpose: answering questions about equipment rentals and clinic appointments, preparing a rental or an appointment and, if you request it, passing the conversation on to the team. Legal basis: pre-contractual measures or performance of the contract (art. 6.1.b GDPR) and our legitimate interest in handling enquiries and preventing abuse (art. 6.1.f GDPR). Data processed: the messages you write, the page from which you open the chat, technical data (conversation identifier, IP address, browser) and, only if you choose to verify your identity to check your rental or appointments, your email address and the verification code we send you. You do not need to describe your health: if you voluntarily tell us about an injury or condition so that we can guide you, we process it with your explicit consent (art. 9.2.a GDPR) and solely for that purpose. Please do not share medical details that are not needed. Processors involved in this service: Anthropic (generation of the assistant's replies), Vercel (hosting), Resend (sending the verification code by email), Chatwoot (inbox where the team reviews conversations), Cloudflare (bot protection) and Sentry (technical error diagnostics). Some of these providers are located outside the European Economic Area; transfers are made with the safeguards described in section 5. Retention: website chat conversations are deleted after 90 days. Data that leads to a rental or an appointment is kept for the periods in section 4. The assistant's replies are for guidance only: the valid terms are those published on the website and in your contract. You can exercise the rights in section 6 by quoting the conversation identifier shown at the bottom of the chat.

PhysioWOW has adopted the necessary technical and organizational measures to guarantee the security of personal data and prevent its alteration, loss, unauthorized processing or access, taking into account the state of technology, the nature of stored data and the risks to which they are exposed.

PhysioWOW reserves the right to modify this policy to adapt it to legislative or jurisprudential developments, as well as industry practices. In such cases, PhysioWOW will announce the changes introduced on this page in advance of their implementation.

For any questions about this privacy policy or about the processing of your personal data, you can contact us at: Email: physiowow@gmail.com Phone: 686 889 094 Address: Camí de Can Gatxet, 55, Local 1, 08173 Sant Cugat del Vallès (Barcelona)