Privacy policy

• Identity: Isaac Hernández Negrín
• Address: Calle Fernández Navarro 15, 38003, Santa Cruz de Tenerife, Santa Cruz de Tenerife
• Email: info@tenerfisio.com

Due to your relationship with us, we may process different categories of personal data, always depending on the service or product contracted with us. This data may be collected by any of the means that Isaac Hernández Negrín offers, both online and in person. The categories of data processed may be the following:

• Corporate data of associated entities and contact details of their representatives or contacts.
• Identification of natural persons: name and surname, ID/identification document, date of birth, place / city / country of birth, telephone, email, address, signature, electronic signature, social security affiliation number, voice, image, IP address, cookie ID, location data, social media profile ID/links, mobile device ID.
• Academic and professional data: training and qualifications, professional experience, membership of professional associations.
• Special category data: health-related data.
• Banking data: bank account number, credit card number.

Isaac Hernández Negrín informs you that personal data may be processed for the purposes indicated below, to the extent that there is a legal basis for each processing.

The GDPR and the LOPDGDD establish that information about a person (their «personal data») can only be processed if one of the legitimising bases expressly provided for in those rules concurs. More specifically, Article 6 of the GDPR establishes a closed list of legitimising bases that may apply to justify and legitimise the processing of personal data:

• Consent.
• Contractual relationship.
• Vital interests of the data subject or other persons.
• Compliance with a legal obligation by the controller.
• Public interest or exercise of public authority.
• Overriding legitimate interest of the controller or third parties to whom the data is communicated.

Isaac Hernández Negrín will carry out processing of your data, in some cases, under the legitimate interest provided for in Article 6.1.f) of the GDPR, considering that it does not harm clients' right to the protection of their personal data. This provision authorises the processing necessary for the satisfaction of legitimate interests pursued by the controller or by a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject that require the protection of personal data, in particular when the data subject is a child.

Regarding such processing, you have the right to:

• Obtain more information on what that «legitimate interest» consists of.
• Know how Isaac Hernández Negrín has reached the conclusion that it does not harm the protection of your personal data.
• Or directly object to it. You may do so through the channels available in section 6 - RIGHTS YOU CAN EXERCISE, indicating the specific processing to which you object and the reasons for your request.

For all processing carried out on the basis of legitimate interest, Isaac Hernández Negrín has carried out what is known as a «balancing test». This is an internal analysis to confirm that the legitimate interest of Isaac Hernández Negrín does not harm the interests of its clients in the protection of their personal data. You can obtain information on the relevant test by request to info@tenerfisio.com.

The main purposes for which your personal data may be used and the legitimising bases for each processing are as follows:

Compliance with legal obligations

Purpose: compliance with accounting, legal, fiscal and administrative obligations.
Legitimation: contractual performance, compliance with legal obligation.

Performance of the sale or services contract you have entered into through the website/platform

Purpose: This purpose includes the processing of your data to, mainly: manage payment for products purchased, regardless of the means of payment used; manage the shipment of the product or provision of services; manage possible returns once a purchase has been made; contact you regarding updates or informational communications related to the contracted features, products or services, including sending quality surveys.
Legitimation: Contractual performance. The processing of your data is necessary for the performance of the sale or service contract that links us. Some processing associated with the purchase process may be activated only if you request or authorise it, such as storing payment data (card) for future purchases. In these cases, the basis on which we process your data is your own consent.

Appointment management

Purpose: Manage appointments and rescheduling.
Legitimation: Performance of a contract or pre-contractual measures.

Appointment reminders

Purpose: Appointment reminders by SMS and/or email.
Legitimation: Legitimate interest of the Data Controller. You have the right to object to the processing of your personal data for sending appointment reminders by SMS or email without affecting the provision of services. If you do not wish to receive these reminders, you may exercise your right of objection at any time, using one of the channels detailed in section 6 - RIGHTS YOU CAN EXERCISE of this Privacy Policy.

Purpose: Appointment reminders via WhatsApp. WhatsApp is a messaging platform owned by Meta Platforms, Inc., whose use may involve sharing personal data (such as phone number or communication dates) with the platform. In addition, data could be processed outside the European Economic Area (EEA), which may involve different levels of personal data protection.
Legitimation: Explicit consent of the data subject.

Physiotherapy consultation

Purpose: Carry out evaluations, diagnoses, physiotherapy treatments, clinical reports and patient follow-up.
Legitimation: Processing is necessary for the provision of healthcare or medical treatment, under the management of a professional subject to professional secrecy.

Clinical record management

Purpose: Recording, archiving and preserving clinical records.
Legitimation: Compliance with legal obligations such as health regulations governing the archiving and access to clinical records.

Training services

Purpose: Designing personalised or group training plans, performance monitoring and goal control.
Legitimation: Contractual performance.

Use of image

Purpose: Capture, management, reproduction and/or publication of audiovisual files (photographs, videos…) in which natural persons appear, on websites, social networks, physical publications or any other medium.
Legitimation: Your consent.

Video surveillance

Purpose: Internal and external surveillance of the premises in order to comply with security operations and prevent risks affecting the safety and protection of persons, premises and assets, as well as to report — when necessary — facts to the competent authorities or attend to their requirements.
Legitimation: Public interest, given that its purpose is to ensure the safety of persons, goods and facilities. When the legal basis for processing is «Public Interest», this processing must have a basis in EU or Member State law. In this regard, Spanish Law 5/2014, of 4 April, on Private Security applies.

Contests, draws and events

Purpose: Management of your participation in contests, draws and other activities you have requested to participate in.
Legitimation: Your consent.

Quality surveys

Purpose: In order to assess user satisfaction with the contracted products and/or services, Isaac Hernández Negrín will send quality surveys to obtain your opinion and continuously improve the provision of services.
Legitimation: Legitimate interest of Isaac Hernández Negrín.

Commercial communications (not expressly requested)

Purpose: In order to offer the user products and services that may be of interest, offers will be sent on products and services related to those already contracted or contracted in the past with Isaac Hernández Negrín. You may opt out of receiving these communications in each communication you receive.
Legitimation: Legitimate interest of Isaac Hernández Negrín.

Commercial communications

Purpose: Sending commercial communications about offers unrelated to the services and/or products contracted. You may opt out of receiving these communications in each communication you receive.
Legitimation: Your consent.

Queries, requests or suggestions

Purpose: Management of the query, request or suggestion submitted by the data subject.
Legitimation: Where you submit a query, request or suggestion without being registered with Isaac Hernández Negrín, we will use the data provided to respond on the basis of your consent and our legitimate interest. When a registered user submits a query, request or suggestion we use their data to respond on the basis of contractual performance. In the case of a request to exercise rights as set out in section 6, RIGHTS YOU CAN EXERCISE, we will use your data on the basis of a legal obligation.

CV submission

Purpose: Inclusion in current personnel selection processes or future processes for which the candidate may be suitable, not being used for any other purposes.
Legitimation: Performance of pre-contractual measures.

By providing your data through any of the available means, you guarantee the truthfulness of the data provided and undertake to communicate any changes that may occur.

Please remember that, when we ask you to fill in your personal data to give you access to a function or service, we will mark some fields as mandatory, since this is data we need in order to provide the service in question. Please note that if you decide not to provide such data, you may not be able to enjoy these services or features or send us your request.

The personal data provided will be kept for the time necessary to fulfil the purpose for which it was collected. Once this period has ended, we will keep your data duly stored and protected during the legal limitation periods required. Once the possible actions of each case have expired, we will proceed to delete the personal data.

To fulfil the purposes indicated in this Privacy Policy, we need to give access to your personal data to entities that support us in the services we offer, namely:

• Financial institutions.
• Technology service providers. Among others, WeAppFit and Reasoning Physios for centre management. You can consult their data protection policies at the following links: WeAppFit · Reasoning Physios.
• Business advisory entities.
• Social Security.
• Tax Agency.

Apart from those indicated, Isaac Hernández Negrín will not transfer personal data to third parties, except by legal obligation. However, in the event of being transferred to a third party, the user will be informed in advance, requesting express consent for such transfer. The entity responsible for the database, as well as those involved in any phase of the processing and/or the entities to whom they have been communicated — in any case always with the corresponding authorisation granted by the user — are obliged to observe professional secrecy and to adopt the levels of protection and the technical and organisational measures necessary within their reach to guarantee the security of personal data, avoiding, as far as possible, unauthorised access, unlawful modifications, theft and/or loss of data, in order to ensure the corresponding level of file security, according to the nature and sensitivity of the data provided by users of this website.

You can exercise any of the rights explained below, simply indicating the reason for your request and the right you wish to exercise. If we consider it necessary in order to identify you, we may request a copy of an identity document.

In general you will always have the right to:

• Request access to your personal data, to find out what data we hold about you.
• Request rectification of your data: please bear in mind that, by actively providing your personal data through any means, you guarantee that it is true and exact and undertake to notify us of any change or modification.
• Request that we delete your data to the extent that it is no longer necessary for the purposes for which we need to process it as informed above, or where we no longer have legitimation to do so.
• Request that we limit the processing of your data, which means that in certain cases you may ask us to temporarily suspend the processing of the data or to keep it longer than necessary when you may need it.
• Request the portability of your personal data. This means that you have the right to receive the personal data you have provided in a structured, commonly used and machine-readable format, in order to transmit it to another entity directly, whenever technically possible.
• Request the right of objection to the processing of your data when the processing is based on our legitimate interest.

You can request the exercise of rights through the following means:

• Postal mail, sending your request or delivering it in person at: Calle Fernández Navarro 15, 38003, Santa Cruz de Tenerife, Santa Cruz de Tenerife.
• Via email: info@tenerfisio.com.

Isaac Hernández Negrín must reply to the request within one month from receipt. This period may be extended by another two months if necessary, taking into account the complexity and number of requests.

You have the right to withdraw the consent given at any time by sending an email to info@tenerfisio.com. The withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

If you consider that your right to the protection of your personal data has been violated, you may lodge a complaint before the Spanish Data Protection Agency, www.aepd.es.

There are occasions when you may provide third-party data, for example contact persons. If you provide us with personal data of third parties, you guarantee that you have informed them about the purposes and the way in which we need to process their personal data.

If a third party has provided us with your data, we will process it within the purposes set out in this Privacy Policy.

Isaac Hernández Negrín guarantees the adoption of appropriate measures to ensure the confidential treatment of your data given the reserved nature of the same and undertakes that such data shall remain secret, treating it with the utmost reserve, and declares that the security policies corresponding to the type of data handled are implemented in its information system in accordance with the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).

All data provided through our platform is collected by means of a secure protocol.

Our website:

• Has an SSL certificate that allows an encrypted connection to be established when a user visits our website and exchanges information with us.
• Is hosted on the servers of Amazon.com, INC. You can consult their Privacy Policy here.

We may modify the information contained in this Privacy Policy when we deem it appropriate, for example in compliance with legislative or jurisprudential changes. Should we do so, we will notify you by various means through changes on the website, or even communicate it to your email address when the change in question is significant for your privacy, so you can review the changes, evaluate them and, where appropriate, oppose or unsubscribe from a service or feature.

If you have any doubts or questions about the privacy policy or about how to manage any personal data you have provided us, you can contact us at info@tenerfisio.com.