1. Introduction

This Privacy Policy explains how ELIXAR, operated by Doctor 24H Balear, SLP ("we", "us", or "our"), collects, uses, stores, and protects personal data when you visit our website https://spain.elixar-iv.com/.We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), and other applicable laws.

2. Data Controller

Doctor 24H Balear, SLPCIF/VAT: B56783913Address: Av. Bartomeu Riutort, 4, Platja de Palma, 07610, Islas Baleares, Spain

Email: info@elixar-iv.com

3. Personal Data We Collect

When you use our website, we may collect:

• Full name
• Telephone number
• Information you voluntarily provide during communications with us
• Technical and usage data collected via Google Analytics and Google Ads, such as IP address, browser and device information, pages visited, approximate location and interactions with the Website and our advertising

We do not offer user accounts or online payments through our website.

4. Health Information

Our website allows users to view and select IV therapy programs, such as "Immunity", "Recovery", or "Energy". Selecting or viewing a program may indirectly indicate wellness goals or health-related interests. However:

• we do not collect medical information through website forms;
• we do not request information about symptoms, diagnoses, or medical history through the website;
• any medical information is collected only by qualified healthcare professionals during direct communication via telephone or WhatsApp, where applicable and in accordance with applicable healthcare regulations.

5. Purposes and Legal Basis for Processing

We process your personal data for the following purposes:

• responding to enquiries and appointment requests;
• communicating with you via telephone or WhatsApp;
• providing information about our services;
• analysing website traffic and measuring the performance of our advertising campaigns;
• complying with legal obligations.

The legal basis for processing is:

• your consent (in particular for Google Analytics and Google Ads);
• the performance of pre-contractual measures at your request;
• our legitimate interests in operating and improving our services;
• compliance with legal obligations.

6. Third-Party Services

Convertista and WhatsApp We use Convertista to facilitate and measure communication through WhatsApp.When you interact with our WhatsApp button or widget, technical information may be processed, including:

• IP address;
• browser information;
• device information;
• date and time of interaction.Once you continue communication through WhatsApp, your data is processed in accordance with WhatsApp's Privacy Policy.You can review WhatsApp's Privacy Policy here: https://www.whatsapp.com/legal/privacy-policy

Google Analytics and Google Ads We use Google Ads and Google Analytics to measure website traffic and advertising performance. Google may collect and process data such as IP addresses, browser information, and interactions with our website. Learn more about how Google uses information from sites and apps that use its services: https://policies.google.com/technologies/partner-sites Google Analytics and Google Ads cookies and similar technologies are non-essential and are only used with your consent, which you can give, refuse or withdraw at any time through the cookie banner or cookie settings available on the Website.

7. Data Sharing

We do not sell your personal data.We may share your data with service providers acting on our behalf, including providers of communication tools, analytics and advertising services, and website infrastructure, when necessary for the operation of our services.

8. International Data Transfers

Some of our service providers, including WhatsApp and Google, may process personal data outside the European Economic Area (EEA), including in the United States.Where such transfers occur, we rely on appropriate safeguards recognised under the GDPR, such as Standard Contractual Clauses, the EU-U.S. Data Privacy Framework (where applicable) or other lawful transfer mechanisms.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy. As a general rule:

• enquiry and contact data from users who do not become clients is retained for 12 months from the last contact, after which it is deleted;
• data relating to clients is retained for the duration of the service relationship and afterwards for the period required by applicable Spanish tax, health-record and consumer-protection legislation;
• data collected via Google Analytics and Google Ads is retained in accordance with the retention settings configured in our Google account, unless deleted earlier at your request.

10. Your Rights

Under the GDPR, you have the right to:

• access your personal data;
• rectify inaccurate data;
• request deletion of your data;
• restrict processing;
• object to processing;
• request data portability;
• withdraw consent at any time.

To exercise your rights, contact us at: info@elixar-iv.comYou also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).

11. Cookies

Our website uses technical and functional cookies necessary for its operation, as well as analytics cookies (Google Analytics) and advertising cookies (Google Ads), which are non-essential and only used with your consent.For more information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page.