Privacy Policy
Last updated: 5 October 2026
This policy explains how we process the personal data you provide to us through the website, in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).
1. Data controller
- LEADER CLINICS HEALTHCARE TALENT SOLUTIONS S.L. · Tax ID B56432800
- Address: Calle 203, 8, 46182 Paterna (Valencia)
- Data protection contact: ricardosegui@leaderclinics.com
2. What data we process
- Patient enquiries (‘Transfer a case’ form): name, country, email address, telephone number, language, reason for the enquiry and a description of your clinical situation, which you may choose to provide. The latter are health data, a special category of data.
- Enquiries from clinics and hospitals: name of the centre, contact person, job title, email address, telephone number and message.
Please provide only the information that is essential. Do not send reports or medical test results through this channel: if they are needed, we will request them via a secure method.
3. Purposes and legal basis
- Assess your case, direct you to the appropriate specialist and centre, prepare the proposal and coordinate the care process. Legal basis: your explicit consent (Articles 6.1.a and 9.2.a GDPR), which you give when you submit the form.
- Respond to enquiries from clinics and hospitals and, where applicable, manage the professional relationship. Legal basis: taking steps at the data subject’s request prior to entering into a contract and consent (Articles 6.1.b and 6.1.a GDPR).
We do not make automated decisions or create profiles using your data. We do not use it for advertising purposes.
4. Recipients
- Healthcare professionals and centres that will assess or treat your case, only with your knowledge and to the extent necessary.
- Technology providers acting as data processors: web hosting (Vercel Inc.), email delivery of forms (Web3Forms) and corporate email service.
- Public authorities and bodies where there is a legal obligation.
Some of these providers may process data outside the European Economic Area. In that case, transfers are covered by the EU–US Data Privacy Framework or standard contractual clauses approved by the European Commission.
5. Data retention
We will retain your data for as long as necessary to deal with your enquiry and, subsequently, for the statutory limitation periods applicable to liabilities. If your enquiry does not lead to a care process, we will delete your data within a maximum of 12 months.
6. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw your consent at any time, by writing to ricardosegui@leaderclinics.com and stating which right you wish to exercise. If you consider that we have not processed your data correctly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Security and confidentiality
We apply technical and organisational measures appropriate to the risk, particularly for health data: an encrypted connection (HTTPS), access restricted to authorised personnel and a duty of confidentiality.
8. Children
If the enquiry concerns a child under 14, it must be submitted by their father, mother or legal guardian, acting on their behalf.