GENERAL INFORMATION AND DATA CONTROLLER
This privacy policy explains how I, Sophia Litjens, collect and use personal data when you use the website or any of my services as a Dietitian-Nutritionist.

By accessing and using this website, as well as any of the services, such as nutritional consultations, you expressly accept this privacy policy. If you do not accept these conditions, you may not use any of the services.

DATA CONTROLLER:
Sophia Litjens
Email address: info@sophialitjens.com

NATURE OF THE PERSONAL DATA COLLECTED
- Data that you voluntarily provide (name, email address, phone number, health data relevant to the consultation, other necessary data).
- Data automatically generated when using the website (IP address, device type, browser, pages visited).
- Use of cookies and similar technologies to improve user experience and website analysis.

PURPOSE OF DATA PROCESSING
The information is necessary to carry out my services, including:
- Managing reservations and nutritional appointments.
- Sending confirmations, reminders, and communications related to consultations.
- Analyzing website usage and improving services.
- Providing a high-quality and personalized nutritional consultation.
- Complying with legal obligations arising from professional healthcare practice.

LEGAL BASIS
Data processing is based on the patient’s explicit and informed consent, granted when booking the consultation. By doing so, you agree to share the personal data necessary for the provision of the service.

Legal obligations are complied with, including at an international level the European General Data Protection Regulation (GDPR), and at a national level the Organic Law on Data Protection (LOPD). 

In addition, the Code of Ethics for Dietitians-Nutritionists is applied, ensuring discretion, confidentiality, and professional secrecy regarding all health-related information processed.

MINORS’ PRIVACY
If nutritional consultations are required for minors under 16 years of age, the corresponding authorization from parents or legal guardians is required. If such authorization is not obtained, the patient will not be treated.

RECIPIENTS OF PERSONAL DATA
Linked tools and platforms:

- Data is securely managed and stored using the Carepatron platform, which complies with GDPR requirements.
- Auxiliary tools are also used, such as Calendly (for bookings), email services, billing systems, and website technical providers.

Likewise, I am not responsible for the management of personal data by these third parties. 

I will not sell your personal data to third parties for advertising purposes without your explicit consent.

If there are international transfers (outside the European Economic Area), they will be carried out with appropriate safeguards (contractual clauses, recognized mechanisms).

RETENTION OF PERSONAL DATA
The data will be retained for a minimum of five (5) years from the last care or consultation, or for the period required by the applicable healthcare regulations in the autonomous community. 

After this period, the data will be securely deleted or anonymized, unless there is a legal obligation to retain them.

YOUR RIGHTS
You may exercise your rights to:
- Access your data.
- Rectify inaccurate data.
- Delete your data (“right to be forgotten”) when applicable.
- Restrict processing.
- Object to the processing of your data.
- Data portability (when applicable).
- Withdraw the consent given at any time.
- Lodge a complaint with the relevant supervisory authority (for example, the Spanish Data Protection Agency).

DATA SECURITY
I take the security of personal data very seriously and therefore adopt appropriate technical and organizational measures to protect the data against unauthorized access, loss, alteration, or destruction. 

Communications with patients are carried out through secure systems integrated into Carepatron or by telephone. 

Unencrypted applications (such as WhatsApp or SMS) will not be used to exchange medical information, unless the patient has given explicit consent.

POLICY CHANGES
I reserve the right to modify these policies at any time. Any changes will be published on the website and will take effect from the date of publication.

CONTACT
If you have any questions regarding this privacy policy, please do not hesitate to contact me at info@sophialitjens.com