Last updated: October 2026. This translation is for information only; in case of discrepancy, the Spanish version prevails.

1. Who is the data controller

OLIN CHIROPRACTIC, S.L. · Tax ID (NIF) B25916487 · registered in the Barcelona Commercial Registry, volume/IRUS 1000464633051, folio 1, sheet B-648435, 1st entry
C/ Casp 151, Principal 1, 08013 Barcelona, Spain · info@olin-chiropractic.com

Centres:
Barcelona: C/ Casp 151, Principal 1, 08013 Barcelona · +34 686 168 532
Malgrat de Mar: C/ Sant Esteve 32, 08380 Malgrat de Mar · +34 660 249 672

2. What data we process and where it comes from

• Data you give us (forms on this website, forms in our Facebook and Instagram ads, online booking, WhatsApp, phone or email): name, phone, email, chosen centre and reason for your enquiry.
• If you become a patient: health data (questionnaires, records, assessments, postural scan photos, results reports), processed with your explicit consent, signed before your first visit.
• Browsing data: only if you accept it in the cookie banner (see the Cookie Policy).

3. Why we use it and on what legal basis

• Answering your request and managing your appointment (confirmations and reminders by email, SMS or WhatsApp): pre-contractual steps and performance of the service (art. 6.1.b GDPR).
• Providing chiropractic care and keeping your records: your explicit consent for health data (art. 9.2.a) and performance of the service (art. 6.1.b).
• Invoicing and legal obligations: legal obligation (art. 6.1.c).
• Defending the centre’s rights in case of a claim: legitimate interest (art. 6.1.f and 9.2.f).
• Sending you tips, news, workshops and offers: your consent (art. 6.1.a), which you can withdraw at any time.
• Measuring our ads (Meta Pixel): your consent in the cookie banner (art. 6.1.a).

We do not make automated decisions or create profiles with legal effects on you.

4. How long we keep it

• Requests that do not become an appointment: 12 months at most.
• Patient records: 15 years from the last visit (criterion of Catalan Law 21/2000).
• Invoicing data: 6 years.
• Marketing communications: until you unsubscribe.

5. Who has access to your data

We do not sell your data. It is accessed by the Ôlin team and by these providers, under a data processing agreement (art. 28 GDPR):

• PracticeHub (appointments and records)
• QuiroHiro / WhatsApp (appointment messages)
• Meta Platforms (ad forms and ad measurement)
• Google Workspace (email)
• GoCardless (membership payments)
• IONOS (web hosting)
• Our accounting firm

Also our insurers and legal advisers, only in case of a claim, and public authorities when required by law.

6. Transfers outside the EU

Some providers are in the United Kingdom (a country with an EU adequacy decision) or may process data in the United States (Google and Meta/WhatsApp, certified under the EU-US Data Privacy Framework). Appropriate safeguards apply in all cases.

7. Your rights

You can request access, rectification, erasure, objection, restriction and portability of your data, and withdraw your consent at any time. Write to info@olin-chiropractic.com or by post to C/ Casp 151, Principal 1, 08013 Barcelona, with a copy of your ID. We reply within 30 days at most. Erasure of patient records may be limited during the legal retention period.

If you are not satisfied, you can complain to the Spanish Data Protection Agency (www.aepd.es).

8. Security

We apply appropriate technical and organisational measures (restricted access, passwords, providers with guarantees), and the whole team is bound by confidentiality.

9. Minors

Children under 14 may not give us their data without the consent of a parent or legal guardian.