Privacy Policy
Flora Muijzer Physiotherapy
Last updated: March 2026
This Privacy Policy explains how Flora Muijzer Fysiotherapie collects, uses, stores, and protects your personal data when you visit www.floramuijzer.com or use our physiotherapy services.
This policy has been drafted in accordance with:
-
EU General Data Protection Regulation (GDPR – Regulation (EU) 2016/679)
-
Spanish Organic Law 3/2018 on Data Protection and Digital Rights (LOPD-GDD)
-
Guidance from the Spanish Data Protection Agency (AEPD)
If you have questions, contact: info@floramuijzer.com
1. Data Controller
The data controller responsible for your personal data is:
Business name: Flora Muijzer Physiotherapy
Legal entity: Esther Flora Muijzer, autónoma
NIE/NIF: Z3204993V
Registered address: Calle Tesorillo de Torrenueva, puerta 7
29469 Mijas Costa, Malaga, Spain
Email: info@floramuijzer.com
Phone: +34 683 590 755
No Data Protection Officer has been appointed. All data protection enquiries should be directed to the email above.
2. Personal Data We Collect
We may collect the following categories of personal data:
Identity and contact data
-
Full name
-
Email address
-
Telephone number
-
Appointment information
Health data (Special Category – GDPR Article 9)
-
Injury or condition related to physiotherapy treatment
-
Assessment notes and treatment records
-
Exercise and rehabilitation plans
Payment data
Payments are processed through third-party providers.
We do not store full payment card details.
We retain only:
-
Transaction references
-
Amount paid
-
Billing information required by Spanish tax law
Technical and usage data
-
IP address
-
Browser type and device information
-
Website interaction data (only with consent)
3. Legal Basis for Processing
4. Data Processors and Third Parties
We use the following service providers who process personal data on our behalf under Data Processing Agreements.
Jane App (Canada)
Practice management system and clinical record storage.
Patient identity, contact details, appointment data and clinical notes are stored securely within Jane App.
Transfers outside the EEA are protected by Standard Contractual Clauses (SCCs).
Cliniko (Redguava Pty Ltd – Australia)
Practice management and scheduling platform.
Data stored includes:
-
Patient identity and contact details
-
Appointment records
-
Clinical notes
Cliniko data is hosted in Ireland (AWS EU region) and does not leave the EU at rest.
International transfers are governed by Standard Contractual Clauses.
Stripe Inc (USA)
Payment processor.
Stripe processes all card payment data.
Flora Muijzer Fysiotherapie receives only:
-
Transaction reference
-
Payment confirmation
Transfers are governed by Standard Contractual Clauses.
Wix.com Ltd (Israel / EU / USA)
Website hosting and infrastructure provider.
Wix may process technical website data such as IP addresses and browsing behaviour.
Israel benefits from an EU adequacy decision.
Google LLC (USA) – Analytics
Google Analytics 4 is used via Google Tag Manager to understand website usage.
This activates only after cookie consent.
Transfers governed by Standard Contractual Clauses.
Microsoft Corporation (USA) – Clarity Analytics
Microsoft Clarity provides:
-
Anonymised session recordings
-
Heatmaps
-
Behavioural analytics
Activated only after consent.
Transfers governed by Standard Contractual Clauses.
We do not sell personal data.
We do not perform automated decision-making or profiling under GDPR Article 22.
5. Data Retention
Data will be deleted or anonymised when no longer required.
6. Your Rights
Under GDPR and LOPD-GDD, you have the right to:
-
Access your personal data
-
Rectify inaccurate data
-
Request erasure
-
Restrict processing
-
Data portability
-
Object to processing
-
Withdraw consent at any time
To exercise your rights, email:
We will respond within one month.
Identity verification may be required.
7. Right to Lodge a Complaint
You have the right to lodge a complaint with:
Agencia Española de Protección de Datos (AEPD)
Website: www.aepd.es
Address: C/ Jorge Juan, 6, 28001 Madrid, Spain
Phone: +34 901 100 099
We encourage you to contact us first to resolve any concerns.
8. International Data Transfers
If any service providers are located outside the European Economic Area, transfers are carried out using:
-
Standard Contractual Clauses approved by the European Commission
-
Equivalent legal safeguards
You may request further details by contacting us.
9. Cookies
We use cookies to improve website functionality and user experience.
For full details, please see our Cookie Policy.
10. Changes to this Policy
We may update this Privacy Policy periodically.
The latest version will always be available on our website.
