Privacy Policy
Last updated: 05/02/2025
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation - GDPR), KAYZEN MENTAL HEALTH, S.L. informs those registered on the KAYZEN website/app (hereinafter, KAYZEN) about the processing of personal data that they have voluntarily provided during the registration, access and use of the service.
1. IDENTIFICATION OF THE DATA CONTROLLER
KAYZEN MENTAL HEALTH, S.L., with CIF B19417823, address Pg. de la Bonanova, 97 B, Local Sótano B, 08017, Barcelona and contact email ines@kayzen.es, is the entity responsible for processing the data provided by users of the website/app. It shall be the Controller of the processing of data necessary to carry out the administrative, tax and accounting management required for the company under applicable legislation and the management and improvement of the website/app, as well as, where consent has been given, to send commercial communications.
In relation to the data of Users who request an appointment with the psychologist (Users) contained within the website/app, KAYZEN shall act as data processor when providing the appointment/consultation management platform service between user and psychologist. Between KAYZEN and the Psychologist there is a data processing agreement governed by the terms and conditions.
2. PURPOSE OF DATA PROCESSING
2.1 Data required to register, access and subsequently use the website/app.
The Registered User (User and Psychologist) must voluntarily provide the following personal data:
User: first and last name, email address, telephone number, image (optional).
Psychologist: first and last name, email address, telephone number, image.
2.2 Purposes and processing of data
All personal data shall be incorporated into automated systems owned by KAYZEN MENTAL HEALTH, S.L., with appropriate technical and organisational measures to ensure an optimal level of security. The collection, storage, modification, structuring and, where applicable, deletion of data provided by Registered Users shall constitute processing operations carried out by the Controller, for the purposes of: ensuring the proper functioning of the website/app; maintaining the service provision relationship; managing, administering, informing, providing and improving the service; where the Registered User has so requested, the personal data provided may be used to respond to enquiries submitted through the contact form.
2.3 Information on access to device resources or features
To access certain features of the website/app, you may be asked for permission to add the member's image to your profile. If you wish to upload a photograph, the website/app will ask for your permission to access the camera and your image gallery. You may always revoke your permission from your device settings.
3. LEGAL BASIS
The processing of Registered User data is based on the free, specific, informed and unambiguous consent of the Registered User, made available through this privacy policy, which must be accepted through a clear affirmative action by checking the corresponding box. If the Registered User does not provide their data to KAYZEN, or does so incorrectly or incompletely, it will not be possible to use the website/app. This legal basis legitimises the processing of data. Prior to requesting information and/or contracting the services of the website/app, the terms and conditions governing this website/app will be made available to the registered user.
4. RETENTION OF PERSONAL DATA
Personal data provided by Users and Psychologists shall be retained in KAYZEN's systems and databases for as long as they continue to use the website/app, and provided they do not request deletion. In order to clarify any liability arising from processing, data shall be retained for a minimum period of five years.
5. RECIPIENTS
Data shall not be disclosed to any third party outside KAYZEN, except where required by law or, in any case, with prior consent of the Registered User. Furthermore, KAYZEN may grant access to or transmit personal data provided by the Registered User to third-party service providers with whom it has entered into data processing agreements, who shall only access such information to provide a service on behalf of and for the account of the Controller.
6. DATA RETENTION
KAYZEN informs the Registered User that, as a data hosting service provider and pursuant to the provisions of Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI), it retains for a maximum period of 12 months the information essential to identify the origin of hosted data and the time when the service provision began. The retention of this data does not affect the confidentiality of communications and may only be used in the context of a criminal investigation or to safeguard public security, being made available to judges and/or courts or the Ministry that so requires. Communication of data to the State Security Forces and Corps shall be carried out pursuant to personal data protection regulations and with the utmost respect for the same.
7. PROTECTION OF INFORMATION
KAYZEN adopts the necessary measures to guarantee the security, integrity and confidentiality of data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
Although KAYZEN performs backups of content hosted on its servers, it is not responsible for the loss or accidental deletion of data by Registered Users. Likewise, it does not guarantee full restoration of data deleted by Registered Users, as such data may have been deleted and/or modified during the period elapsed since the last backup.
Services provided through the website/app, except specific backup services, do not include restoration of content stored in backups performed by KAYZEN where such loss is attributable to the Registered User; in this case, a fee commensurate with the complexity and volume of recovery shall be determined, always subject to acceptance by the Registered User. Restoration of deleted data is only included in the service price when the loss of content is due to causes attributable to KAYZEN.
8. RIGHTS OF REGISTERED USERS
KAYZEN informs the Registered User that they have the rights of access, rectification, restriction, erasure, objection and portability, which may be exercised by sending a request to the email address: ines@kayzen.es. Furthermore, the Registered User has the right to withdraw the consent initially given, and to lodge complaints regarding their rights with the Spanish Data Protection Agency (www.aepd.es).
9. COMMERCIAL COMMUNICATIONS BY ELECTRONIC MEANS
In application of the LSSI (Information Society Services Act), KAYZEN shall not send advertising or promotional communications by email or other equivalent electronic communication means that have not previously been requested or expressly authorised by the recipients thereof.
In the case of Registered Users with whom there is a prior contractual, legal or service relationship, KAYZEN is authorised to send commercial communications regarding products or services of the Controller that are similar to those initially contracted by the client.
If the Registered User wishes to unsubscribe from receiving such communications, they may do so by sending their request by email to: ines@kayzen.es.