Privacy Policy

Last updated: 22 September 2026

1. Data controller

• Controller: Sanitatum SL
• Spanish tax ID (NIF): B93643005
• Address: Calle Paco Clavijo, 100, 23250 Santisteban del Puerto, Jaén, Spain
• Contact and data-rights email: gestion@sanitatum.net

2. Data we process

Depending on the channel and your relationship with SANOW, we may process:

• identification and contact details;
• language, locality or operational address and care preferences;
• the service requested, availability and information needed to coordinate it;
• administrative payment, billing and communication information;
• the locality or operational area needed to coordinate the service, where applicable;
• for professional applications, training, registration, experience, availability, professional insurance and submitted documents.

Public forms are not medical records. Do not use them to send reports, images, diagnostic tests, extensive medical history or other health documents. If care requires clinical information, a specific and suitable channel will be provided.

3. Purposes and legal bases

• Handling and coordinating requests: taking pre-contractual steps requested by you and, if the service is activated, performing the contract.
• Managing appointments, professionals, payments and billing: performing the service and complying with legal, accounting, tax and healthcare duties.
• Contact via WhatsApp: when you have requested or expressly authorized this channel; you may stop using it at any time.
• Assessing professional applications: taking pre-contractual steps requested by the candidate and checking necessary professional requirements.
• Protecting the service and handling claims: complying with legal duties and pursuing the legitimate interest in security and the defence of rights.

If health data must be processed during care, it will be handled with the required safeguards and under the responsibility of professionals bound by confidentiality, pursuant to Article 9(2)(h) of the General Data Protection Regulation and applicable healthcare law.

4. Recipients and providers

We do not sell personal data. Assigned healthcare professionals and providers of necessary hosting, communications, office, calendar, video-call, support or payment services may access data only within their roles and under the required contractual safeguards. Data may also be disclosed to public authorities or courts where legally required.

If you choose WhatsApp, Google Meet, Google Calendar or another external service, your data will also be processed by that provider under its own policy. Where a provider processes data outside the European Economic Area, an adequacy decision, standard contractual clauses or another legally recognized safeguard will be used.

5. Retention

• Requests that do not become a service are retained for no more than 90 days unless needed to handle an incident or claim.
• Contractual, payment and billing data are retained for applicable statutory periods.
• Unsuccessful professional applications are retained for no more than 12 months unless withdrawn earlier or another period is authorized.
• Clinical documentation, where it exists, is managed separately for the periods required by healthcare law; it is not stored as a medical record in this public portal.

6. Your rights

You may request access, rectification, erasure, objection, restriction or portability, withdraw consent where it is the legal basis, and not be subject to solely automated decisions with legal effects. To exercise these rights, email gestion@sanitatum.net stating the right you wish to exercise. We may request additional information only where needed to verify your identity.

If you believe processing is unlawful, you may complain to the Spanish Data Protection Agency.

7. Children

Requests concerning children must be managed by a parent, guardian or duly authorized person. Healthcare and data processing will follow the representation and consent requirements of applicable law.

8. Security and updates

We apply technical and organizational measures proportionate to risk and limit access to those who need it to provide the service. This policy may be updated when processing, providers or legal requirements change; the date of the current version appears at the top.