Borrador — debe revisarlo un abogado
Draft — must be reviewed by a lawyer. Text prepared for legal review. It is not the final version and may change.
Legal documents
Short privacy notice
For online booking and the patient portal of the doctors who use Opifer.
Version 2026-10-01-borrador-2 • Last updated: October 1, 2026
English translation provided for convenience. The Spanish version prevails.
1. Controller
The doctor you request an appointment with, or who invited you to their portal, is the controller of your personal data. Their identity, address and contact details are on their profile and in their full privacy notice.
2. Data and purposes
When you book, the doctor uses your name, phone number, email and the reason for the visit you share to handle your request, contact you, remind you of your appointment by email or WhatsApp and, if they treat you, build your clinical record.
In the portal, they use your email to create your access and show you your information: appointments, medications, allergies, visits and results.
If the doctor wanted to use your data for secondary purposes, such as surveys, you can refuse at any time by telling them. Refusing does not affect your care.
3. Health data
The reason for the visit and the information in the portal may include health data, which is sensitive personal data. By ticking the acceptance box you give your express consent to its processing for these purposes. We keep the version of the notice you accepted and the date.
4. Opifer
Opifer is the platform the doctor uses. It processes your data only on the doctor’s behalf, as processor, on servers located in the United States of America, and does not use it for its own purposes. For WhatsApp reminders it uses Twilio and WhatsApp (Meta), which only receive your first name, your number and the appointment details.
5. Transfers
Your data is not shared with third parties except where the law allows it; for example, with other health professionals for your care or when an authority requires it.
6. Your rights
You can exercise your rights of access, rectification, cancellation and objection, and withdraw your consent, with the doctor. By law, the clinical record must be kept for at least 5 years from the last medical act (NOM-004-SSA3-2012).
7. Full privacy notice
Read the full privacy notice for patients, which covers how to exercise your rights and how long your data is kept. On each doctor’s booking page, the link leads to their notice with their details.