Data Protection and Cookie Policy

Privacy Policy

1.- Responsible and description

1.1.- Responsible

The person in charge of the treatment of this site is AUREO CLINIC PUERTO PORTALS SL with CIF B16591956. (hereinafter the “Service”), a Spanish commercial company with registered office at Puerto Punta Portals, Edificio D4, Planta 1, 07181 Portals Nous, Calvia.


1.2.- Description

This Privacy Policy governs the collection, processing and use of your personal and non-personal information as a User of the Service.

The Service does not sell your personal information to third parties and will always ask for your consent before using your data for any purposes other than those described in this clause.

In processing your personal data, the Service complies with current local and European legislation, as well as its implementing regulations, and more specifically with the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.

It therefore adopts the necessary technical and organisational measures to prevent the loss, misuse, alteration, unauthorised access and theft of the personal data provided. Always according to the state of technology, the nature of the data and the risks to which they are exposed.

2.- Information gathered

The personal and non-personal information collected by the Service will change depending on your use of the website and its features.

Personal and non-personal information collected by the Service will come to us in three ways:

1) automatically collected

2) that which you voluntarily provide to us and

3) that provided by third parties.

2.1.- Automatically collected data

This information shall consist of:

– Collected through cookies or similar mechanisms stored on your device, always with your consent. Please see our cookie policy below for more information.

– The IP from which the connection is made, the type of device used and its characteristics, the operating system version, the type of browser, the language, the date, the country, the time of the request, the referrer URL or the mobile network used, among others.

– Data on the use of the Service and possible errors detected during use, such as pages not found or incorrect displays.

2.2.- Data provided voluntarily

This information will consist of the information contained in messages sent through the Service’s contact channels or when you subscribe to our newsletter. For example your email, alias or name, subject or message.

2.3.- Those provided by third parties

This information shall consist of information provided by social networks or similar services.

3.- Rights

We inform you that the completion of the forms is voluntary. However, if you do not fill in the mandatory fields (marked with an asterisk), the use of some functions of the Service will not be possible or will be limited.

The personal data you provide will be included and processed in the files owned by the Service, in order to attend to your requests, provide the requested service and keep you informed on matters relating to the activity of the company and its services.

You may at any time exercise your rights of access, rectification, deletion, limitation of processing, opposition and portability of your personal data by sending an e-mail to or to the postal address Puerto Punta Portals, Edificio D4, Planta 1, 07181 Portals Nous, Calvia.

In both cases you must identify yourself with your name and surname, as well as a copy of your ID card or national ID.

Here you can find the different models for exercising these rights.

Where you have given consent for a specific purpose, you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on your consent prior to its withdrawal.

In addition, if as a User you consider that there is a problem with the way in which the Service is handling your data, you can address your complaints to the DPD or the corresponding data protection authority, being the Spanish Data Protection Agency the one indicated in the case of Spain.

4- Use of the Data

The data provided to the Service will be used for:

– To respond to your requests (the legal basis being our legitimate interest in responding to our users’ queries).

– If contracted, provide the service (the legal basis being the contract).

– If you have consented to this, to send you our newsletter by email (the legal basis being your consent).

4.1.- In mails and contact forms

The Site Service website is SSL-encrypted to allow users to securely submit their personal data through standard contact forms.

The personal data collected will be automatically processed and incorporated into the corresponding files of the activity register and of which the Service is the owner.

In this sense:

We will receive your IP address, which will be used to check the origin of the message in order to provide you with appropriate recommendations (e.g. to present the information in the correct language) and to detect possible irregularities (e.g. possible attempts to cyber-attack the Service), as well as data relating to your ISP.

You may also provide us with your details by telephone, e-mail and other means of communication as indicated.

On the other hand, certain services provided through the Website (for example, the possibility of participating in a competition or prize draw) may contain special conditions regarding the protection of personal data. They will need to be accepted before participating in these services.

Finally, and as already indicated, the purpose of the processing of this data will be solely to provide the information or services requested.

4.2.- In social networks

The Service has profiles on some of the main social networks on the Internet and acknowledges that it is the data controller in relation to the data published on these profiles (for example, photos uploaded by the Service showing people’s faces).

The processing that the Service will carry out with the data within each of the aforementioned networks will be, at most, that which the social network allows for the corporate profiles. Thus, the Service may, where not prohibited by law, inform our followers by any means permitted by the social network about its activities or offers, as well as provide a personalised customer service.

Under no circumstances will the Service extract data from social networks, unless the user’s consent to do so is expressly and promptly obtained.

Where, due to the very nature of social networks, the effective exercise of the follower’s data protection rights is subject to the modification of the follower’s personal profile, the Service will assist and advise you to the best of its ability to do so.

4.3.- In draws

When you participate in promotional actions organised exclusively by the Service, the data you provide will only be processed by us for the purpose indicated in the statement of the action.

4.4.- In job offers

Only job or internship applications submitted by the candidate through the means indicated on the employment page or through those available in the employment and internship areas of university websites where the Service has published a specific offer will be evaluated by the Service.

All other applications will be rejected.

The applicant authorises the Service to analyse the documents sent to him/her, all content directly accessible through search engines, the profiles he/she maintains on professional social networks, the data obtained in the admission tests and the information he/she discloses in the job interview, in order to assess his/her candidature and to be able, if necessary, to offer him/her a position.

The Service may use appropriately anonymised data to produce statistics on the type of person who applies, with a view to publishing reports on this.

5.- Data retention

The following is an indication of how long the data processed by the Service is retained:

– Disaggregated data will be retained without time limit for deletion.

– Customer data will be kept as little as necessary and may be kept for up to:

5 years, according to Art. 1964 of the Civil Code (personal actions without special time limit).

6 years, according to Art. 30 of the Commercial Code (e.g. accounting books or invoice).

– The data of newsletter subscribers will be retained from the time the user subscribes until the user unsubscribes.

User data uploaded by the Service to pages and profiles on social networks will be retained from the time the user gives consent until the user withdraws it.

The data of candidates for a job offer, if the candidate is not selected, will be kept for a maximum of two years for incorporation in future vacancies, unless the candidate expresses his or her objection.

6.- Security measures

The Service takes all necessary technical and organisational measures to protect the security and integrity of personal and non-personal information collected. Both against unauthorised access and against accidental alteration, loss or destruction.

In any case, the Service cannot guarantee the absolute security of the information collected, so you should cooperate and use common sense about the information shared at all times.

You understand and acknowledge that, even after deletion, personal and non-personal information may remain visible in cache or if other users have copied or stored it.

7.- Cookies Policy

Aureo Clinic will be able to collect information through files like cookies or log files about the navigation of the users through the Web Site of its ownership. These devices are associated exclusively with a single user and their own access device. Cookies are files sent by the website and stored in the user’s browser by means of a web server for the maintenance of the browsing session, storing your IP address (of your computer) and other possible browsing data.

Aureo Clinic uses web analytics cookies to measure and analyse user browsing on the Websites. Analytical cookies are those that allow the party responsible for them to monitor and analyse the behaviour of the users of the websites to which they are linked. Aureo Clinic uses the data obtained in order to make improvements based on the analysis of the usage data provided by users. Web analytics does not allow us to obtain information about the user’s name, surname, e-mail address or postal address. The information obtained relates to the number of users accessing the website, the number of pages viewed, the frequency and repetition of visits, their duration, the browser used, the operator providing the service, the language, the terminal used or the city to which the IP address is assigned.

In the following table you can consult the cookies used on Aureo Clinic websites, the information obtained by them and their purpose:

Cookies Information processed Purpose
Strictly necessary User session, registration details. User session management and maintenance, personalisation of navigation, load balancing.

Google Analytics (Google, Inc.)

Crazy Egg (Crazy Egg, Inc.)

Websites visited, frequency, number and repetition of visits, browsing time, searches performed, links accessed, browser used, operator providing the service, location linked to the IP address. Measuring and analysing user browsing, monitoring and analysing user behaviour, drawing up anonymous user browsing profiles, introducing improvements based on the analysis of user usage data.

To revoke the consent granted, the user has the possibility of disabling cookies by modifying the configuration of their browser. In the links below, the user will find more information about which cookies are installed, how to allow their installation, block them or delete them from your computer. Depending on the browser used, the following links are available to the user:


8.- Contact

If you have any questions about this Privacy Policy, please contact us at:


Address: Puerto Punta Portals, Edificio D4, Planta 1, 07181 Portals Nous, Calvia.