This is a translation of the Spanish original. If there are any differences, the Spanish version prevails.
Version 2026-10-19. We explain what personal data we process when you visit this website or book or cancel an appointment on it, why, and what rights you have, under Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and Spanish Organic Law 3/2018 (Ley Orgánica de Protección de Datos Personales y garantía de los derechos digitales, LOPDGDD).
Data controller
- Controller: Antonia Marco Pérez
- Tax ID (NIF): 21473083F
- Address: Avda. Carrer La Mar, 19, 03560 El Campello (Alicante)
- Privacy contact email: optica.lamar@gmail.com
- Phone: 965 63 05 12
What data we process
When you book an appointment: your name, your phone number, your email address, the language of the website, the service and time you choose, a note if you write one and, if you arrive through a link from Google, Instagram or Facebook, that channel. Do not include health information in the note: we do not need it to give you an appointment.
The service you choose (for example, a hearing test or an eye examination) may reveal something about your eyesight or your hearing. We process it only to attend to you, under the duty of confidentiality of healthcare professionals (art. 9.2.h GDPR).
When you visit the website, as with any website, the servers receive your IP address and technical connection data (browser, page requested, time).
Mandatory and optional data
To book, your name, your phone number, your email address, the service and the time are mandatory: without them we cannot give you the appointment or notify you about it. The note is optional: you can leave it blank and the appointment is still booked.
Purposes and legal basis
- Managing your appointment (confirming it, attending to you, changing it or cancelling it) and sending you the confirmation and cancellation emails. Legal basis: taking pre-contractual steps at your request when you book (art. 6.1.b GDPR). The box you tick before booking only confirms that you have read this information.
- Keeping the appointment history of the business. Legal basis: our legitimate interest in organising the schedule (art. 6.1.f GDPR).
- Knowing which channel our appointments come from (internal statistics: how many appointments come from Google, Instagram or Facebook). Legal basis: our legitimate interest in knowing how customers find us (art. 6.1.f GDPR).
- Serving the website and protecting it from abuse and attacks, using the IP address and technical connection data. Legal basis: our legitimate interest in the website working properly and being secure (art. 6.1.f GDPR).
- Knowing how the website is used (our own cookie-free usage statistics; see the section “Website usage statistics”). Legal basis: our legitimate interest in improving the website (art. 6.1.f GDPR).
We do not use your data to send you advertising or to make automated decisions.
How long we keep it
Your appointment data, for as long as you have appointments with us and, after that, for 24 months from your last appointment. After that period, your data is automatically anonymised. You can ask us to delete it sooner.
The IP address and technical connection data remain only in the providers’ technical logs, for a few days.
Website usage statistics
To improve the website we measure how it is used ourselves: which pages are visited, where visitors come from (for example, from Google or from a link with campaign tags), which buttons are pressed, at which step a booking is left unfinished, the language, the type of device and browser, the country, the loading speed, how far you scroll on each page and how long it is visible, repeated clicks and form errors (only the error code and the field name, never what you type). To measure, we do not use cookies or store anything on your device.
To count visits without knowing who you are, every day we calculate a code from your IP address and your browser details, mixed with a random value that changes every day and is deleted the next day. We do not store your IP address or the full identification of your browser (user agent), anything you type in the forms, or the details of your appointment. We do not use that code to identify you, and it does not allow your visits on different days to be linked.
- Legal basis: our legitimate interest in knowing how the website is used in order to improve it (art. 6.1.f GDPR).
- Retention: the data of each visit is deleted after 13 months; the daily summaries, which no longer contain that code, after 25 months.
- No disclosure: the data is not shared with anyone or combined with other data; it is stored in our database (Supabase, in the European Union).
- Objection: if your browser sends the Global Privacy Control signal, we do not measure your visit. You can also write to us at optica.lamar@gmail.com.
- Access and erasure: since we do not know which code is yours, we cannot locate your visits to give you access to them or delete them (art. 11 GDPR); you can prevent the measurement by turning on Global Privacy Control in your browser.
Who processes the data on our behalf
We do not share your data with anyone, except where required by law. To provide the service we use these processors, under contract and with the safeguards of the GDPR:
- hybriqtech, which develops and maintains the booking platform;
- Supabase, database hosted in the European Union;
- Cloudflare, website hosting, cookie-free visitor statistics and receipt of the usage statistics;
- Resend, delivery of appointment emails.
Some of these providers may process data outside the European Economic Area; in that case they do so with the safeguards of the GDPR (an adequacy decision or the European Commission’s standard contractual clauses).
Your rights
You can request access to your data, its rectification or erasure, object to its processing, restrict it or have it transferred to another controller (portability), by writing to optica.lamar@gmail.com or to our address. If you believe we have not handled your data properly, you can lodge a complaint with the Agencia Española de Protección de Datos, the Spanish data protection authority (www.aepd.es).