Privacy policy

Data controller

Pablo Lozano Lominchar, MD, PhD, EBPSM. For anything concerning your data, write to contacto@drlozanolominchar.com.

This is a professional, informational website. It is not the website of Hospital General Universitario Gregorio Marañón or of any other institution, and the processing described here does not include any patient's medical record, which is governed by healthcare legislation and remains the responsibility of the treating centre.

What is collected, and why

Only what you choose to provide, and only in three situations:

• Contact form. Name, email address and the content of your message. Purpose: to read and answer your enquiry. Legal basis: your consent when submitting the form (Art. 6.1.a GDPR).
• OncoGuía assistant. The text of the questions you type. Purpose: to generate the answer. Legal basis: your consent when using it.
• Usage analytics. Aggregated browsing data — page views, approximate country, device type — with no cookies and without identifying you. Legal basis: legitimate interest in knowing which content is useful (Art. 6.1.f GDPR).

An important warning about health data

Do not send identifiable clinical information — reports, imaging, diagnoses — through the contact form or the assistant. Neither is an appropriate channel for health data.

If your case needs reviewing, you will be told the appropriate channel for sending clinical documentation. The OncoGuía assistant is not a doctor, does not issue diagnoses or second opinions, and must not be used to make decisions about your treatment.

Who it is shared with

Data is never sold or transferred to third parties for commercial purposes. The only recipients are the providers needed to run the site, acting as processors:

• Vercel Inc. — site hosting and usage analytics.
• Formspree Inc. — receiving and delivering contact form messages.
• Anthropic PBC — processing the questions typed into the OncoGuía assistant in order to generate an answer.

International transfers

All three providers are United States companies, so your data may be processed outside the European Economic Area. These transfers rely on the safeguards in Chapter V of the GDPR, in particular the European Commission's standard contractual clauses incorporated in those providers' terms of service.

How long it is kept

Contact form messages are kept for as long as the exchange lasts and, afterwards, for as long as needed to address any liability arising from it.

Conversations with the assistant are not stored on this site: they are sent to the provider to generate the answer and are not retained here. Analytics data is aggregated and cannot identify you.

Cookies and browser storage

This site sets no advertising, cross-site tracking or profiling cookies. The analytics used do not rely on cookies.

The only thing stored in your browser is your light or dark theme preference, held in local storage. It is strictly technical, is never sent to any server, and you can clear it from your browser settings.

Your rights

You may request access to your data, its rectification or erasure, as well as restriction of processing, portability and objection, by writing to contacto@drlozanolominchar.com. You will be asked to verify your identity.

If you believe your data has not been handled properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Changes to this policy

If the way data is handled changes — for instance if a new provider is added — this text will be updated and the date at the top will change with it.