MedCare Iberia

Request a call

Leave your number and we'll call you back within one working day.

Preferred way to reach you

PRIVACY POLICY

Last updated: 21.07.2026

1. Data Controller

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation — GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we hereby inform you of the following details:

  • Data Controller: MEDCARE IBERIA, S.L.U.
  • Registration Number (NIF): ES B88943725
  • Registered Address: c. Pallars 193, of. 303, 08005 Barcelona, España
  • Email: info@medcareiberia.org
  • Telephone: +34 931593737

2. Purposes of Processing

We process personal data for the following purposes:

  • Processing inquiries received through our website;
  • Organising and coordinating medical treatment in Spain for international patients;
  • Functioning as an intermediary between patients (or their legal representatives), hospitals, clinics, physicians, and other healthcare providers;
  • Arranging medical cost estimates, booking consultations, managing hospital admissions, and providing administrative support throughout the treatment;
  • Coordinating translation and interpreting services, accommodation, transport arrangements, and other related services upon the patient’s request;
  • Processing payments and invoicing;
  • Complying with applicable legal obligations;
  • Handling requests, claims, and inquiries related to the exercise of data subjects' rights.

3. Categories of Personal Data Collected

We may process the following categories of personal data:

A) Identification Data

  • First name and surname;
  • Date of birth;
  • Nationality;
  • Passport number or other identity document details;
  • Postal address;
  • Telephone number;
  • Email address.

B) Health Data (Special Categories of Data)

If necessary for the organisation of medical treatment, we may process:

  • Medical history and records;
  • Medical reports and diagnoses;
  • Examination and test results;
  • Medical imaging (X-rays, MRI, CT scans, etc.);
  • Information regarding prescribed treatments and medications;
  • Details on allergic reactions;
  • Other medical information provided by the patient or their legal representative.

The aforementioned information falls under special categories of personal data in accordance with Article 9 of the GDPR.

C) Financial Data

  • Invoicing and billing details;
  • Information on payments made;
  • Bank details (where necessary).

4. Processing the Personal Data of Minors

Our corporate activities may involve organising medical treatment for minor patients. In such cases:

  • Personal data must be provided exclusively by a person holding parental rights or acting as the legal guardian of the minor;
  • We reserve the right to request documentation verifying such authority;
  • Only data strictly necessary for the organisation of the requested medical treatment will be processed;
  • Enhanced security measures will be applied to protect the minor’s personal data.

5. Legal Bases for Processing

Personal data is processed based on the following legal grounds:

  • Execution of pre-contractual measures upon the request of the data subject;
  • Performance of a service contract;
  • Explicit consent of the patient or, where applicable, their legal representative—especially regarding the processing of special categories of data (health data);
  • Compliance with legal obligations;
  • Legitimate interest associated with the administrative and organisational activities required to deliver our services.

6. Disclosure of Personal Data to Third Parties

We may disclose your personal data exclusively to the extent necessary to deliver the services, targeting the following categories of recipients:

  • Hospitals and clinics;
  • Specialist physicians and medical personnel;
  • Laboratories;
  • Medical transportation organisations;
  • Insurance companies (where necessary);
  • Companies providing translation and interpreting services;
  • Hotels, accommodation providers, and transport companies (if ordered by the patient);
  • Public authorities in cases prescribed by law.

Each recipient processes personal data strictly in compliance with applicable legislation and solely for the purposes for which the data was disclosed.

7. International Data Transfers

Since our patients are citizens of various countries, international transfers of personal data may be required in certain instances. Such transfers are carried out exclusively:

  • In compliance with GDPR requirements;
  • Based on Adequacy Decisions issued by the European Commission;
  • Using Standard Contractual Clauses (SCCs);
  • Or based on other appropriate safeguards provided by law.

8. Data Retention Period

We retain personal data:

  • For the period necessary to deliver the requested services;
  • For the durations established by applicable legislation;
  • For the timeframe required to defend our legitimate interests and handle potential legal claims.

Upon the expiration of these periods, the data will be securely deleted or anonymised.

9. Rights of Data Subjects

Data subjects have the right to exercise the following rights:

  • Right of access;
  • Right to rectification;
  • Right to erasure (Right to be forgotten);
  • Right to object to processing;
  • Right to restriction of processing;
  • Right to data portability;
  • Right to withdraw consent at any time (where processing is based on consent).

To exercise these rights, you may contact us via email at:

  • Email: info@medcareiberia.org

Please note that a copy of your identity document may be required to verify your identity.

Additionally, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD) if you believe that the processing of your personal data violates applicable legislation.

10. Security of Information

We implement appropriate technical and organisational measures to protect personal data against:

  • Unauthorized access;
  • Loss or destruction;
  • Alternation;
  • Unlawful disclosure.

However, no data transmission or storage system can be guaranteed to be absolutely secure.

11. Cookies

The use of cookies is governed by our Cookie Policy, which is permanently available on this website.

12. Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time to align it with changes in legislation, judicial precedents, or modifications to our corporate operations. The current version is always the one published on this website.

13. Additional Information for International Patients

Our company provides international coordination services for medical treatment. Unless explicitly stated otherwise, we do not provide medical care directly. We act solely as an intermediary and coordinating agency between the patient, medical institutions, doctors, and other entities involved in organising the treatment.

All decisions regarding diagnosis, choice of treatment method, prescription of therapy, and delivery of healthcare are made exclusively by the respective medical professionals and healthcare facilities responsible for the patient's treatment.