top of page

Privacy Policy

Last updated: September 2026

1. Data Controller

The data controller responsible for the processing of personal data collected through this website is:

GENERA HEALTHCARE ADVISORY, S.L.
Tax Identification Number (NIF): B93779031
Registered office: C/ Manolo Morán 51, Esc. 1 - 2C, Sant Joan d'Alacant, Alicante, Spain
Commercial Registry: Alicante Commercial Registry, Section 8, Sheet A-207219, Entry 1
General email: info@generadvisory.com
Data Protection contact: dpo@generadvisory.com
Website: www.generadvisory.com

2. What Personal Data May We Collect?

GENERA may collect and process personal data voluntarily provided by users through the different communication channels available on the website.

This may include:

  • Name and surname.

  • Email address.

  • Telephone number.

  • Company, clinic or organisation.

  • Position or professional role.

  • Information included in contact forms.

  • Information provided when requesting information about our services.

  • Information necessary to manage a potential professional or commercial relationship.

  • Technical information relating to website browsing, where applicable and in accordance with our Cookie Policy.

We recommend that users do not include health data, patient information or other sensitive personal information in the website's general contact forms.

3. How Do We Use Your Personal Data?

GENERA may process personal data for the following purposes:

3.1. Managing Information Requests

To receive, manage and respond to enquiries submitted through contact forms, email or other communication channels available on the website.

3.2. Managing Commercial Enquiries

To provide information, proposals or quotations relating to GENERA's services when requested by the user.

3.3. Managing Professional and Commercial Relationships

To manage communications and relationships with clients, potential clients, collaborators, suppliers and other professional contacts.

3.4. Providing Services

Where a contractual relationship exists with GENERA, personal data may be processed to manage the provision of contracted services, including organisation, coordination, monitoring, administration and communications relating to those services.

3.5. Commercial Communications

Where the user has provided consent or where another lawful basis permits it, GENERA may send communications relating to its services, activities, events, webinars, professional content, news or initiatives.

Users may unsubscribe from these communications at any time.

3.6. Website Security and Operation

To ensure the security and proper functioning of the website, prevent fraudulent use and identify or resolve technical incidents.

4. What Is the Legal Basis for Processing?

GENERA will process personal data in accordance with the lawful bases established by applicable data protection legislation.

Depending on the specific purpose, processing may be based on:

  • The user's consent, where consent has been requested.

  • The performance of a contract or the implementation of pre-contractual measures.

  • Compliance with legal obligations applicable to GENERA.

  • GENERA's legitimate interests, where applicable and provided that the rights and freedoms of the user are respected.

Where processing is based on consent, users may withdraw their consent at any time.

Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

5. How Long Do We Keep Your Data?

GENERA will retain personal data for as long as necessary to fulfil the purposes for which it was collected.

Where a contractual relationship exists, data may be retained for the duration of that relationship and subsequently for the periods required by applicable legislation.

Where data has been collected to respond to an enquiry or information request, it may be retained for as long as necessary to manage that request and, where applicable, for the period necessary to address potential legal liabilities.

Data processed for commercial communications will be retained until the user unsubscribes or withdraws consent, where consent is the applicable legal basis.

6. Who May Receive Your Data?

GENERA will not sell or disclose users' personal data to third parties for commercial purposes.

Personal data may be disclosed to third parties when:

  • It is necessary to provide a requested service.

  • There is a legal obligation to do so.

  • It is necessary to perform a contractual relationship.

  • The user has provided consent.

  • It is necessary to protect the legitimate rights or interests of GENERA or third parties, within the limits permitted by applicable legislation.

GENERA may engage external service providers acting as data processors, such as web hosting providers, technology providers, management tools, communication platforms, email service providers or analytics providers.

GENERA will select providers that offer appropriate data protection safeguards and will enter into the relevant agreements where required by applicable legislation.

7. International Data Transfers

Some of the technology providers used by GENERA may be established outside the European Economic Area or may involve international transfers of personal data.

Where this occurs, GENERA will implement the safeguards and mechanisms required under applicable data protection legislation.

These may include European Commission adequacy decisions, Standard Contractual Clauses or other legally recognised safeguards.

8. Patient Data and Health Information

The GENERA website is not intended for the collection of medical records, medical reports, test results, genetic data, treatment information, reproductive health information or other patient health information through general contact forms.

For security and data protection reasons, users are requested not to enter this type of information into the website's general forms.

However, as part of certain professional services provided to clinics or healthcare organisations, GENERA may have access to personal data managed by those organisations.

In such cases, processing will be carried out in accordance with the instructions of the relevant data controller and the applicable contractual documentation.

Where applicable, GENERA will act as a data processor, and the appropriate data processing agreement will be put in place in accordance with the General Data Protection Regulation (GDPR).

9. Confidentiality and Security

GENERA is committed to maintaining the confidentiality of personal data processed and to implementing appropriate technical and organisational measures to ensure a level of security appropriate to the risk.

These measures are designed to prevent, among other risks, the loss, destruction, alteration, unauthorised access to or improper disclosure of personal data.

10. Users' Rights

Where applicable, users may exercise the following rights:

  • Right of access: to obtain information about the personal data we process.

  • Right to rectification: to request correction of inaccurate or incomplete data.

  • Right to erasure: to request deletion of personal data where applicable.

  • Right to object: to object to certain processing activities.

  • Right to restriction of processing: to request that processing be restricted in certain circumstances.

  • Right to data portability: to receive certain personal data in a structured, commonly used format or request its transmission to another controller where technically feasible.

  • Right to withdraw consent: where processing is based on consent.

To exercise any of these rights, users may submit a request to:

dpo@generadvisory.com

The request should specify the right being exercised and may require additional information to verify the identity of the requester where necessary.

The exercise of these rights is free of charge, except where requests are manifestly unfounded or excessive, in which case the conditions provided by applicable law may apply.

11. Right to Lodge a Complaint

If a user believes that GENERA has not processed their personal data in accordance with applicable legislation, they may contact GENERA at dpo@generadvisory.com so that we can attempt to resolve the matter.

Users also have the right to lodge a complaint with the competent data protection supervisory authority.

In Spain, the competent authority is the:

Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD).

12. Personal Data of Minors

The GENERA website is not specifically directed at minors.

GENERA does not intentionally seek to collect personal data from minors through its contact forms.

If a legal representative believes that a minor has provided personal data to GENERA without the necessary authorisation, they may contact us at dpo@generadvisory.com.

13. Third-Party Links

The website may contain links to third-party websites or platforms.

GENERA is not responsible for the privacy policies, content or data protection practices of such third parties.

Users are advised to review the relevant privacy policies before providing personal information through external websites.

14. Cookies

The website uses cookies and similar technologies.

Information regarding the cookies used, their purposes and the options available to manage them is provided in our Cookie Policy.

15. Updates to This Privacy Policy

GENERA may update this Privacy Policy when necessary to reflect legislative, regulatory, technological or operational changes.

The version published on this page shall be the version applicable at any given time.

Last updated: September 2026.

16. Contact

For any questions regarding this Privacy Policy or the processing of personal data, please contact:

GENERA HEALTHCARE ADVISORY, S.L.
NIF: B93779031
C/ Manolo Morán 51, Esc. 1 - 2C
Sant Joan d'Alacant, Alicante, Spain

General email: info@generadvisory.com
Data Protection contact: dpo@generadvisory.com
Website: www.generadvisory.com

bottom of page