Privacy policy

Personal data collected

Only the data needed to respond to the enquiry is collected through the contact form:

• Name.
• Email address.
• Subject of the enquiry.
• Message sent by the user.

Please avoid sending sensitive medical information if it is not necessary for an initial general enquiry. If the message includes health data, it will be processed only to manage the enquiry received.

Purpose of processing

The data is used only to respond to the enquiry sent and, where appropriate, coordinate the professional enquiry with the external clinics where Marta López Matllo works. It is not used for marketing or profiling.

Legal basis

The legal basis for processing is the user’s consent, given by accepting the Privacy Policy and voluntarily submitting the contact form.

Data processors

Limited technical providers are used to operate the site and receive enquiries:

• Netlify, as hosting and deployment provider for the website.
• Resend, as technical provider for sending emails generated by the contact form.

The website does not store enquiries in its own database; the message is transmitted by email through Resend.

International transfers

Some technical providers may process data outside the European Economic Area. Where this occurs, processing must rely on appropriate safeguards under the GDPR, such as standard contractual clauses or other mechanisms recognised by applicable law.

Data retention

The website does not store these enquiries in its own database. Messages are kept only for the time necessary to respond and manage reasonable professional follow-up, unless an applicable legal obligation requires otherwise.

User rights

The user may exercise the rights recognised by the GDPR, including:

• Access to their personal data.
• Correction of inaccurate data.
• Erasure of their data where applicable.
• Objection to processing.
• Restriction of processing.
• Data portability, where applicable.
• Withdrawal of consent, without affecting the lawfulness of previous processing.

How to exercise rights

The user may exercise their rights through the contact form available on the website. The request must allow the applicant and the right they wish to exercise to be reasonably identified.

If the user considers that the processing of their data does not comply with the rules, they may lodge a complaint with the Autoriteit Persoonsgegevens, the Dutch data protection authority.

Security

Basic technical and organisational measures are applied to protect data sent through the form, including secure transmission via HTTPS, limitation of the data requested and the use of specialised technical providers for hosting and email delivery.

Cookies and tracking

This site does not use tracking cookies, analytics or user profiling. For this reason, no cookie banner is shown and no separate cookie policy is published.

Last updated

5 May 2026.