Privacy policy

In accordance with GDPR (EU) 2016/679 and Spanish LOPDGDD 3/2018:

Data controller

VetIbiza is the trading name under which María Reyes Martínez operates (natural person, not a company).

• ID (NIF): 47254440C
• Registered address: Avda España, 6, 2A — 07800 Eivissa (Illes Balears), Spain
• Phone: +34 619 243 729
• Email: legal@vetibiza.com
• Website: www.vetibiza.com

Data processed

• Contact data and any personal information you voluntarily share via WhatsApp (name, phone, address, photographs, etc.). VetIbiza does not control or request more data than strictly necessary to provide the service.
• Pet data (species, breed, clinical history).
• Invoicing data (name, fiscal address, tax ID where applicable).
• Browsing data via Google Analytics (consent only).

Purpose and legal basis

• Responding to enquiries and managing appointments: pre-contractual measures (Art. 6.1.b GDPR).
• Providing veterinary service: performance of contract (Art. 6.1.b GDPR).
• Clinical history: legal obligation (Art. 6.1.c GDPR).
• Invoicing and tax obligations: legal obligation (Art. 6.1.c GDPR).
• Web analytics (Google Analytics): consent (Art. 6.1.a GDPR).

Retention

• Clinical history: minimum 5 years (veterinary regulations).
• Invoicing data: 6 years (Art. 30 Spanish Commercial Code).
• Browsing data: maximum 26 months.

Recipients

No data shared with third parties except as required by law. The following act as data processors:

• Google Ireland Limited (Dublin, Ireland) — Google Analytics, consent only.
• Vercel Inc. (San Francisco, USA) — website hosting and anonymous performance metrics (Vercel Analytics and Speed Insights). Certified under the EU-US Data Privacy Framework. No cookies installed, no identifiable data collected.
• Cloudflare Inc. (San Francisco, USA) — bot protection and security proxy. Certified under the EU-US Data Privacy Framework.
• Meta Platforms Ireland Limited (Dublin, Ireland) — WhatsApp Business, used as a communication channel for enquiries and appointments. When you start a conversation via the WhatsApp link on this website, Meta processes your phone number and message content in accordance with its privacy policy. Certified under the EU-US Data Privacy Framework.

International transfers

Transfers to the USA are covered by each provider's certification under the EU-US Data Privacy Framework (DPF). As a fallback, should the DPF be invalidated, Standard Contractual Clauses (SCCs) approved by the European Commission will apply as an appropriate safeguard.

Rights

You have the right to:

• Access: know what personal data we process about you.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion of your data when no longer necessary.
• Restriction: request restriction of processing under certain circumstances.
• Portability: receive your data in a structured, commonly used format.
• Objection: object to the processing of your data in certain situations.
• Withdrawal of consent: withdraw consent at any time for processing based on it.

To exercise any of these rights, contact legal@vetibiza.com. If you believe your rights have not been properly addressed, you may file a complaint with the Spanish Data Protection Agency at www.aepd.es.

Last updated: 22 April 2026.