Privacy policy

In short

This site has no forms, creates no accounts, sends no newsletters and uses no analytics or advertising cookies. We do not collect your name, your email or your phone number, unless you decide to write to us yourself.

Data controller

• Controller: the founder of CLINIC SYSTEM, an independent professional
• Contact: clientes@clinicsystem.io
• Place of establishment: Spain (GDPR and LOPDGDD)

If you write to us by email

We process whatever you decide to tell us: your email address, your name if you sign with it and whatever you explain about your clinic. The purpose is to answer you and keep the conversation going. The legal basis is the taking of steps at your request prior to entering into a contract (art. 6.1.b GDPR): you write to us so that we tell you something, and for that we have to read you.

That email lives in our inbox, not in a database on this site. It is kept for as long as the conversation makes commercial sense and, after that, for as long as a legal obligation requires it to be stored.

If you use the analyzer

The analyzer asks for no personal data and does not store the result. Two things happen that are worth knowing:

• The domain you type is sent to Google's PageSpeed Insights API to measure speed. The call is made by our server, so Google receives that domain and our server's address, not yours.
• To prevent abuse, a rate limiter counts how many analyses are requested from the same IP address. Your IP is stored as part of a key in a temporary database (Upstash Redis) that deletes itself after sixty seconds. It is not cross-referenced with anything and is not used for anything else. The legal basis is the legitimate interest in keeping the service available (art. 6.1.f GDPR).

Server logs

The site is hosted on Vercel which, like any hosting provider, logs the requests it receives, including the IP address, in order to serve the pages and detect incidents. This processing is necessary for the site to work, is grounded in legitimate interest, and is governed by that provider's terms, acting as a processor.

Processors and transfers

The providers involved are Vercel (hosting), Upstash (rate limiting) and Google (speed measurement). Some of them may process data outside the European Economic Area under the safeguards set out in Chapter V of the GDPR. We do not sell data and we do not disclose it to anyone else.

Minors

This site is aimed at clinic professionals and managers. It is not intended for minors and no data about them is collected.

Your rights

You may request access, rectification, erasure, restriction of processing, objection and data portability by writing to clientes@clinicsystem.io. If you believe the processing does not comply with the regulations, you may lodge a complaint with the Agencia Española de Protección de Datos, the Spanish data protection authority (aepd.es).