Privacy policy
Last updated: 15 October 2026
This page explains what personal data is processed when you visit this website or write to me, why, and what rights you have. As a health psychologist, I treat any information you send me confidentially and under professional secrecy.
Data controller
Cristina Bueno Reyes, General Health Psychologist, registered with the Official College of Psychology of Eastern Andalusia under number AO14099.
Practice: Centro Salud Zen, Paseo Jesús Santos Rein, 2, 1.º E, 29640 Fuengirola (Málaga), Spain.
Email: cristinabuenopsicoterapeuta@gmail.com
Phone and WhatsApp: +34 634 43 10 14
If you write to me by email
I process your email address, your name and whatever you include in your message in order to reply and, if you ask, to arrange an appointment. The legal basis is your own request (Art. 6(1)(b) GDPR) and, for any health information you choose to share, your consent when sending it (Art. 9(2)(a) GDPR).
I recommend not including health details in your email: we can talk about them calmly in session. Messages are kept for as long as needed to deal with your request and then for the periods required by law. Email is handled with Gmail (Google).
If you call me or message me on WhatsApp
I process your phone number, your name and whatever you tell me in order to reply and, if you ask, to arrange an appointment, on the same legal basis as email: your own request (Art. 6(1)(b) GDPR) and, for any health information you choose to share, your consent (Art. 9(2)(a) GDPR).
WhatsApp messages are handled by WhatsApp Ireland Limited (Meta) under its own privacy policy. I recommend not sending health details over WhatsApp: we can talk about them calmly in session.
Bookings through Doctoralia
The booking buttons take you to Doctoralia. Any data you provide there is processed by Doctoralia under its own privacy policy; I receive the appointment details so that I can see you.
Visit statistics
To know how many people visit the website and which pages they find useful, I use Cloudflare Web Analytics. It does not use cookies or store anything on your device, and it does not build profiles or identify you: it records the page visited, the referring website, the approximate country, the type of device and browser, and loading times, which I only see as totals.
The legal basis is my legitimate interest in understanding, in aggregate, how the website is used (Art. 6(1)(f) GDPR). The provider is Cloudflare, Inc. (United States), certified under the EU-US Data Privacy Framework.
Hosting
The website is hosted on a Hostinger server and loads its fonts from that same server, without calling external services. Like any server, it may log technical data about each visit (IP address, date and page requested) in order to work and to protect itself from abuse.
Cookies
This website does not use cookies or store any information on your device, which is why it does not ask you to accept them.
Who your data is shared with
I do not share your data with anyone unless required by law. Only the providers mentioned on this page have access to it, and only as far as needed to provide their service.
Your rights
You can request access to, rectification or erasure of your data, object to or restrict its processing, ask for data portability, or withdraw your consent at any time. Write to me at cristinabuenopsicoterapeuta@gmail.com stating which right you wish to exercise.
If you feel your request has not been handled properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD).