Last updated: 5 October 2026
1. Data controller
- Controller: Synexia Healthcare S.L.
- Tax ID (NIF): B05683636
- Address: C/ Mar Rojo, 9, 4.º A, 28821 Coslada (Madrid), Spain
- Data protection contact: info@synexiahealthcare.com
2. The data we process
Through the contact form: name, organisation, role, email address and the content of your message. We also record the language of the page, the date of submission and your acceptance of this policy, as evidence of the enquiry and of your consent. If you arrive from a campaign link or from another website, we also record that origin (for example, the campaign name or the referring site) to know which channels bring enquiries; no cookies are used for this.
Please do not include health data or patient information in your message.
When you browse, we process the technical data needed to operate and secure the website, such as the IP address in server logs. We do not build profiles or take automated decisions.
If you use the self-assessment and tick the Observatory box, your answers are stored without any identifying data (no name, email or IP address) and used only in aggregate statistics. Because they cannot be linked to you, they are not personal data. If you also ask to receive your result, the details you enter in that form are processed as described for the contact form.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Replying to your enquiry and continuing the conversation you start | Your consent when you submit the form (Art. 6.1.a GDPR) and steps taken at your request prior to a contract (Art. 6.1.b GDPR) |
| Recording the enquiry in our customer management system (CRM) for follow-up | Legitimate interest in managing relationships with organisations that contact us (Art. 6.1.f GDPR) |
| Protecting the security of the website and preventing abuse | Legitimate interest (Art. 6.1.f GDPR) |
| Sending Synexia insights and sector news by email, if you subscribe to the newsletter (email, optional name, language, date and confirmation of the subscription) | Your consent, confirmed by email (art. 6.1.a GDPR and art. 21 LSSI-CE). You can withdraw it at any time with the unsubscribe link in every email |
| Sending you up to three emails related to the guide or self-assessment you requested, only if you tick that box in the form | Your consent (art. 6.1.a GDPR and art. 21 LSSI-CE). You can withdraw it at any time with the unsubscribe link in every email |
| Complying with legal obligations | Legal obligation (Art. 6.1.c GDPR) |
We will not send you commercial communications by electronic means without your prior express consent, in accordance with article 21 of the LSSI-CE.
4. How long we keep your data
We keep your data while we handle your enquiry and, if no professional relationship follows, for a maximum of 24 months from the last contact. If a relationship begins, we keep it for as long as it lasts and then for the periods required by the statute of limitations for legal liabilities. Server logs are kept for the minimum time needed for security.
Newsletter subscribers: until they unsubscribe. We keep the record of the consent while it may be needed to prove it.
5. Recipients
We do not share your data with third parties unless required by law. The providers that host our website and our customer management system have access to it as data processors, under a contract that complies with article 28 GDPR.
Newsletter emails are sent from our email marketing tool, part of the same customer management system, under the same data processing contract.
6. International transfers
Data is hosted on servers located in the European Economic Area. If a transfer outside it were ever necessary, it would be carried out with the safeguards set out in Chapter V GDPR.
7. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to info@synexiahealthcare.com and stating the right you wish to exercise. We may ask for additional information to confirm your identity. Withdrawing consent does not affect the lawfulness of earlier processing.
If you believe we have not handled your request correctly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Security
We apply technical and organisational measures appropriate to the risk: encrypted connections (HTTPS) between your browser and the website and between the website and our CRM, access limited to the people who need the data, and backups.
9. Minors
This website is aimed at professionals and organisations. We do not knowingly collect data from children under 14.
10. Changes to this policy
We may update this policy to reflect legal or service changes. The date of the last update is shown at the top of the page. In case of discrepancy between language versions, the Spanish version prevails.