Last updated: 28 September 2026
InHarmoni Rehab Marbella respects your privacy. Many people who contact us are going through a difficult time, or are reaching out on behalf of someone they care about. This policy explains, in plain language, what personal data we collect through inharmonirehab.com, why we collect it, who we share it with and what rights you have.
This policy covers our website, contact forms, brochure requests, chat, phone and messaging enquiries. Information about patients who are admitted to our programme is handled under a separate patient privacy notice, which you receive before admission.
1. Who is responsible for your data
- Data controller: INHARMONI REHAB MARBELLA SL
- Tax ID (NIF): B13884267
- Email for privacy matters: info@inharmonirehab.com
- Phone: +34 658 656 011
2. What data we collect
Information you give us:
- Contact form: your name, email address, phone number, who you are enquiring for (yourself, a family member or friend, or a client), what the enquiry is about, your preferred way of being contacted and any message you write.
- Brochure request: your name and email address.
- Chat, phone, email and WhatsApp: the details you choose to share with us.
Information about your health. If you tell us what your enquiry is about (for example alcohol, drugs, burnout or mental health) or describe your situation in a message, this is health data, which the law treats as a special category of personal data. We only process it with your explicit consent and only to respond to your enquiry. Please share only what you are comfortable with. You do not need to give clinical details to contact us.
Information collected automatically when you use the website:
- IP address, browser and device type, pages visited, time on site and how you arrived at the site (for example a search engine or an ad click identifier), collected through cookies and similar technologies, subject to your cookie choices.
- Security logs recorded by our website firewall to protect the site against attacks.
- Call and form tracking data that links an enquiry to the page or campaign it came from.
3. Why we use your data and our legal basis
- Responding to your enquiry and sending the brochure: your consent, and steps taken at your request before a possible agreement (GDPR article 6(1)(a) and (b)).
- Handling health information you share: your explicit consent (GDPR article 9(2)(a)).
- Sending you helpful information by email later on: your consent, given by ticking the optional box. You can unsubscribe at any time.
- Website analytics, advertising measurement and call tracking: your consent through our cookie banner.
- Keeping the website secure and preventing spam: our legitimate interest in protecting the site and its visitors (GDPR article 6(1)(f)).
- Meeting legal obligations: for example tax, accounting or requests from authorities (GDPR article 6(1)(c)).
You can withdraw consent at any time. This does not affect processing that took place before you withdrew it.
4. Cookies and similar technologies
We use a cookie banner (CookieYes) so you can choose which non-essential cookies to allow. Strictly necessary cookies are always active. Analytics and marketing tools are only loaded if you accept them. You can change your choice at any time via the cookie settings link on the website. The tools we use include:
- Google Tag Manager and Google Analytics 4: to understand how the website is used.
- Google Ads: to measure the results of our advertising.
- Microsoft Clarity: to see anonymised heatmaps and session recordings that help us improve the website.
- CallTrackingMetrics and WhatConverts: to see which pages and campaigns lead to calls and enquiries.
- Google reCAPTCHA: to protect our forms against spam.
- Chat widget (Weply), review widget (Trustindex), Bookimed badge and embedded YouTube videos: these third parties may set their own cookies when their content loads.
5. Who we share your data with
We never sell your personal data. We share it only with:
- Our own admissions team and, if you choose to proceed, the clinical team.
- Service providers who process data on our behalf under a data processing agreement: website hosting, email, chat, call tracking, analytics and advertising.
- Authorities, courts or advisers where the law requires it.
6. Transfers outside the EU/EEA
Some providers, such as Google and Microsoft, may process data in the United States. Where this happens, the transfer is covered by the EU–US Data Privacy Framework or by the European Commission’s standard contractual clauses.
7. How long we keep your data
- Enquiries that do not lead to admission: 12 months after our last contact, then deleted.
- Brochure requests and email marketing: until you unsubscribe or withdraw consent.
- Analytics and tracking data: according to each tool’s retention settings, for a maximum of 14 months.
- Security logs: up to 90 days.
- Patients: clinical records are kept for the periods required by Spanish health law, as described in the patient privacy notice.
8. Your rights
You have the right to access, correct or delete your data, to restrict or object to processing, to data portability and to withdraw consent at any time. To use your rights, email info@inharmonirehab.com. We reply within one month.
If you are unhappy with how we handle your data, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or to the data protection authority in the country where you live.
9. Security
We protect your data with encrypted connections (HTTPS), a website firewall, access controls and by limiting who in our team can see enquiries. No method of transmission over the internet is completely secure, which is why we ask you not to send detailed medical information through the website.
10. Changes to this policy
We may update this policy when our services or the law change. The latest version is always available on this page.
11. Contact
Questions about this policy or your data: info@inharmonirehab.com · +34 658 656 011 · INHARMONI REHAB MARBELLA SL, Marbella, Spain.
