Legal Note and Privacy Policy


Legal Notice



According to article 10 of Law 34/2002, 11th July, “Society Services of Information and Electronic Commerce (LSSI), we inform you of the following information.

Doctomatic S.L.., [hereafter Doctomatic], is the owner of the web page, and will act exclusively as the manager of the contents of the present Web, addressed at: C. Espronceda, 183 local 2 08018 – Barcelona, Spain NIF B06840276

If you would like to contact us, you can do so by post at the previously mentioned address, or by e-mail at:



This Legal Notice regulates the use of this web page. Access on the web is free except for the cost of the connection through the telecommunications network provided by the access provider hired by users.



If you use the web you are considered a user, and this implies full acceptance without any reservation of every and each point in this Legal Notice, published by Doctomatic, from the moment the user accesses the web. In consequence, the user must read carefully the present Legal Notice every time he or she wishes to use the web, as these may be modified.



Doctomatic is only responsible for its own web and any access to webs by links or any information offered by third parties is not the responsibility of Doctomatic.

Any use of links or access to a web not owned by DOCTOMATICis at the users responsibility and DOCTOMATIC does not recommend nor guarantee any information obtained by a link through a third party which comes from a web that is not from, neither is it responsible for any loss, claims or damages derived from the use or bad use of a link or the information obtained through it, including other links or webs, interruption of service or in the access, or trying to use or the incorrect use of a link, even if the connection is via the Web or by accessing the information by other webs from the same Web page.



The information and the services included or availability by the Web could include errors or spelling mistakes. Periodically changes in the contents will be made. DOCTOMATIC can introduce improvements and or changes in its service or contents at any time.

We would like to inform you that the contents on this Web, are designed to inform, keep in contact with you, send information about our services, and are in accordance with what is envisaged in the present Legal Notice and the rest of legal text on this present Web Page.



DOCTOMATIC is not responsible if there are interruptions or if the services and contents offered on the internet do not work adequately, regardless of the cause.

Likewise, DOCTOMATIC is not responsible for, the internet going down, loss of business due to these failures and temporary electricity power cuts or any other types of cuts.

DOCTOMATIC does not declare nor guarantee that the services or contents will not be interrupted or free of errors, and that they will be repaired, or that the service or the provider will be free of viruses or any other damaging component, whilst DOCTOMATIC, will do its utmost to avoid these types of incidences. If the user takes some decisions or carries out actions based on information included on any “websites”, it is recommendable to check the information by consulting other sources.



The structure, design and way of presenting the elements (graphs, images, files, logotypes, colour combinations and any element susceptible to protection) are protected by intellectual property laws, owned by DOCTOMATIC.

It is prohibited to reproduce, transform, distribute, communicate in public, make publicly available and in generally exploit in any form partially or totally the elements referred to in the previous section. These acts of exploitation can only be carried out if authorized by DOCTOMATIC , and if this were to be the case, there must be explicit reference to the fact that DOCTOMATICis the intellectual owner of the material.

Only documental material produced by DOCTOMATICis authorized for private use, and in no case, can the material be deleted, changed, eluded or any of the security systems installed be manipulated.

It is forbidden to link to the final pages, the frame and any other similar manipulation. The links must always be to the principle page or homepage

Distinctive signs (brands, commercial names) belonging to DOCTOMATIC, are protected by industrial property rights and the use or manipulation of them is forbidden except if there is written authorization by DOCTOMATIC.



DOCTOMATIC will never send you an e-mail and neither call you by telephone to ask you for your password or to verify your password belonging to your account and likewise will never ask for your bank account number or credit card and neither any other personal information. If anybody should contact you or send you and e-mail that you have not asked for, you should never give them any of your personal data previously mentioned. Also, you should never respond and communicate to the appropriate authorities in order to proceed with investigating the incident.



Ignore all e-mails in which they demand personal information or ones which redirect you to another web page that does not belong to or any societies belonging to the group or in which they ask you to pay via a means which has not being authorized by DOCTOMATIC , as this could be an attempt at identity theft (“spoofing or phishing”) and must be considered as fraudulent.

DOCTOMATIC uses the “” domain for all its e-mails. If you receive an e-mail in a different format, for example:, you can be assured that it is a false mail.

Some e-mails that use phishing contain links to a web page that uses the word “DOCTOMATIC” at their URL, but they will direct you to a web page that is completely different. If you drag your mouse over the link, you will be able to see the associated URL, which will probably have a different format to the correct web pages authorized by DOCTOMATIC.

Even if you click an e-mail that uses phishing and are redirected to a page that resembles “your account” or to any page that asks you to verify or modify your personal information, ignore it and consider it as fraudulent.



Send an e-mail to and attach any e-mail that you consider to be false. By attaching these e-mails, you will be helping to locate their origin.

If you cannot attach the false mail, forward it to and include as much information as possible about it.

  1. Privacy Policy


According to the data protection act of General Regulation (UE) 2016/679 on data protection and Organic Law 3/2018 on data protection and digital rights guarantees, we inform you that personal data given via the forms, and likewise your e-mail address have been included in our file titled DOCTOMATIC SGEIC, S.L. [hereafter, DOCTOMATIC ], at the business address of: Sant Antoni Maria Claret 167 08025 Barcelona, Spain E-mail, with the objective of attending your consultations and sending you information related to the services offered by DOCTOMATIC.

We inform you that the data could be used to send you commercial communications, in any format, and this could be related to any other services offered by our business which might be of interest to you. If you should at any time oppose this type of communications, please send us an e-mail address to indicating the subject as “UNSUBSCRIBE FROM THE DISTRIBUTION LIST”.

Likewise, you can exercise the right to access, rectify, suppression, opposition, portability and limitation, according to the terms established by REGULATION (EU) 2016/679 by presenting or sending an application in writing to: Sant Antoni Maria Claret 167 08025 Barcelona, Spain, or by e-mail to: and with a photocopy of your ID or similar documentation indicating the subject as “DATA PROTECTION”.



DOCTOMATIC is especially sensitive to protecting the personal data of our users which has been obtained through the services offered on our Web. The present privacy policy informs all the users of, how the personal data collected from the through the additional information, in order that they decide, freely and voluntarily, if they wish to provide the requested information.



Finally it is reported that DOCTOMATIC , has adopted in the information system the appropriate technical and organizational measures, in order to guarantee the security and confidentiality of the stored data, thus avoiding its alteration, loss, treatment or unauthorized access; taking into account the state of the art, the costs of application, and the nature, scope, context and purposes of the treatment, as well as risks of probability and variable severity associated with each of the treatments.



The person interested in the personal data may exercise his / her rights, in accordance with the General Data Protection Regulation and Organic Law 3/2018 on the Protection of personal data and guarantees of digital rights, which are:

A – The right to access is to be exercised annually, except if the party interested shows legitimate accreditation. When exercising the right of access, the interested party can opt for the following systems in order to consult the file treatment: – sending an email to:– Writing a letter addressed to: DOCTOMATIC Sant Antoni Maria Claret 167 08025 Barcelona, Spain


DOCTOMATIC will proceed to notify its decisions within a timeframe of a month. If it were to be accepted, the interested party would be able to access the previously mentioned information within 10 days after its notification.


  1. B. – The right ofrectificationand suppression can be exercised, conforming to the following previsions, whenever the interested party considers that the data collected in our files is inexactincompleteinadequate or excessive. If this is the case, you can exercise these rights via one of the means previously anticipated.DOCTOMATIC will proceed with the rectification or cancellation within 10 days of receiving the application.
  2. C. – The right of oppositionmay be exercised, in accordance with the following provisions, provided that the interested party wishes to oppose the processing of their personal data, whether or not the data is lawfully treated as being of legitimate interest or relative consent for advertising purposes.
  3. D. – The right ofportabilitythey may be exercised, in accordance with the following provisions, provided that the interested party considers that the data collected in our treatments must be returned to the data holder or to another third party (Treatment Manager).
  4. E. – The right of limitation of treatmentmay be exercised, prior to opposition right for the treatment of their data, and that until the Opposition Law is not resolved, the treatment of them will be limited.



DOCTOMATIC reserves the right to modify the present policy with the objective of adapting it to the legislative or precedents changes. Such changes will be communicated within the necessary time on our Web page, and it can ask the affected parties for their consent if it is believed that it does not have the consent according to the present policy.

If you should have any doubt, question or comments referring to the present regulations, please do not hesitate to ask about them by sending a communication to:

  1. Cookies Policy
  • The domain uses automatic “Cookies” collection procedures to gather personal information such as the type of browser or operating system, reference page, route, ISSP domain, etc. All this in order to improve the services provided. “Cookies” help us adapt this website to your personal needs.

What are cookies?

A “Cookie” is a small file that is stored on the user’s computer and allows us to recognize him. The set of “Cookies” helps us improve the quality of our website, thus allowing us to personalize to a certain extent the navigation of each user on our website. “Cookies” are currently essential for the operation of the Internet, providing innumerable advantages in the provision of interactive services, facilitating the navigation and usability of our website.


  • Please note that “Cookies” cannot harm your equipment and, in return, that they are activated help us to identify and resolve errors and improve the navigability of our website by providing a better experience.

Cookies are used to:

Make sure that web pages work properly.

Store your preferences, like language or font size.

Find out about the user’s browsing experience.

Compile anonymous statistical information, like which pages the user has visited or how long they have spent on the website.


Type, purpose and operation

Depending on their permanence, Cookies can be divided into two categories: session cookies and persistent cookies. The former expires when the user closes the browser. Whereas the latter expire when their aim is achieved or when they are deleted manually.

In addition, depending on their aim, Cookies can be classified as follows:

Required: those that are strictly necessary and essential for the correct functioning of the Website. They are normally generated once the user visits the website or logs in and are used as a form of identification on the website with the following objectives:

They keep the user identified in such a way that, if they leave the website, exit the browser or device and then visit the page at a later time, they continued to be identified, which makes browsing easier as they do not have to identify themselves over again.

They confirm whether or not the User is authorized to access certain services or areas of the Website.

Preferred: These enable the Website to record information related to the way that it behaves and its appearance – such as the language or the region where it is located.

Statistical/analytical: These are used to analyses and improve the browsing experience, optimize the functioning of the website, and see how visitors interact, by collecting and reporting information – usually anonymously, but sometimes also uniquely and unmistakably identifying the user – in order to obtain reports on the interests of users in the services offered by the website.

Marketing:  These cookies collect information about adverts shown to website users. There are two types:

Anonymous: These collect information only about the advertising spaces shown on the Website, regardless of the user who browses without not expressly identifying him or herself.

Custom: They collect the user’s personal information from the website on behalf of a third party, in order to customize ad spaces.

Geolocation: These cookies are used to determine the country of the user when they visit a service on a website, in order to offer content and services suitable to their location.


Adequate privacy / Cookie management

For more information about the appropriate configuration of cookies and the activation, restriction and / or disabling options, you should go to the help section of your browser to learn more:

Google Chrome

Internet Explorer

Mozilla Firefox

Apple Safari


The user must know that, when disabling Cookies, some of the features and services may be disabled or have a different behaviour than expected, such as, for example, staying identified, keeping purchases in the cart, its location, etc. among others and that its navigation is notably degraded.


Privacy Policy

Last update: November 2023

Confidentiality and security are core values of DOCTOMATIC. This means that we are committed to ensuring the privacy of our customers’ personal data at all times, and to collect only the information we need, and no more.

Below you will find all the necessary information about the personal data we collect, how we process it and your rights.

  1. Who processes my personal data?

DOCTOMATIC, S.L.. (hereinafter, “DOCTOMATIC“), with NIF B06840276 and registered office at C/ Espronceda, 183, local 2, 08025, province of BARCELONA (SPAIN), may act in any of the following capacities:

  • Data controller: You will be responsible for the processing when you establish relations on your own behalf with the data subjects or natural persons who are the owners of the personal data, given that Doctomatic makes available to its patients or

users an application for remote monitoring of their health data, which it makes available to their doctor in an automated way.

  • Data Processor: A data processor is a person in charge of the processing when accessing the personal data of such data owners for the provision of the service contracted by a data controller.

For this purpose, DOCTOMATIC informs that it has an e-mail address ( available to all users, and also informs that Doctomatic has the following web domain:

DOCTOMATIC processes your data in accordance with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).

  1. Who monitors your personal data at DOCTOMATIC?

DOCTOMATIC’s Data Protection Officer, or DPD, is the guarantor of compliance with data protection regulations within DOCTOMATIC.

You may contact DOCTOMATIC’s Data Protection Officer at the following e-mail address:

You can consult the appointment of our Data Protection Delegate on the website of the Spanish Data Protection Agency at the following link.

  1. Who are the stakeholder groups?

The personal data collected and processed may come from the following parties:

    • Clients and Prospective Clients, users and/or patients in connection with the use of the DOCTOMATIC website:
      • People who provided us with their data in the different forms on the website to make inquiries or obtain information about our products and services.
      • People who purchased our license packs that are set out on the web.
      • Persons who requested communications about news, products and services and / or promotions DOCTOMATIC.
      • People who have downloaded our application via Google Play or Apple Store.
    • Suppliers:
      • Companies that share with us the personal data necessary to formalize a service contract (identification, contact, address, bank account…).
    • Candidates:
      • People who sent an application to enter into personnel selection processes.
    • DOCTOMATIC employees or collaborators
      • Current employees for the internal management of their employment relationship.
      • Current collaborators for the management of services (health care personnel, physiotherapists, or any other professional or collaborator that offers services through DOCTOMATIC).
    • Website visitors:
      • People who browse our website and have accepted analytical cookies.
      • Users of the chatbot incorporated in the DOCTOMATIC website.
  1. What personal data do we process?

The following information is requested through the DOCTOMATIC website:

    • Contact information: person in charge, position, health center, telephone number, country, city and number of patients.
  1. For what purposes and on what grounds do we use personal data?

In DOCTOMATIC process personal data to respond to requests for information, fulfill your requests or provide contracted services.

This personal data is processed for the legitimate purposes indicated below.

    1. DOCTOMATIC as Data Controller


Interested parties

Data categories

Basis of legitimization

Retention period

Formalization, development and execution of the contract

The processing of personal data of contact persons of our customers and suppliers        is

necessary for the execution of the contract between DOCTOMATIC

and our

customers and suppliers, as well as for the maintenance, development and execution of the contractual relationship.


treats the personal data of the contact persons of our customers and suppliers, among others, to manage the commercial and mercantile relationship with them.

  • Customers
  • Prospective customers
  • Providers / Medical centers.
  • Contact information.

Execution of the contract

Once the services listed in the       contract

have been completed, the data contained in the contract will be kept for 6 years,        duly

blocked, and without prejudice to the interested parties having duly exercised their rights of deletion or opposition prior to the end of this period.

Process payments, collections and invoicing

  • Customers
  • Suppliers / collaboratin g professiona
  • Identifying information (name and surname)
  • Contact

Execution of the contract

In accordance with Article 30 of the Spanish Commercial Code, billing



we will process the data of our customers to send         them

invoices     and

collect the compensation agreed in the service contract.

In the same way, DOCTOMATIC

will treat the data     of     its

suppliers to proceed to the payment of the agreed services.


information (address, corporate email)

  • Bank details.

data will be kept for 6 years after they have been issued.

Response     to

requests for information or contact         or

demo of



we use the contact information provided to respond to your requests and inquiries about products and services, whether made through the form available on the websites.

  • Customers
  • Prospective customers
  • Website users
  • Patients.
  • Contact information.

Express consent.

Once the

request has been resolved, the personal data will be kept, duly blocked, for one year.

Sending commercial communicatio ns


treats the contact information

  • Customers
  • Prospective customers
  • Identifying information (name and surname)
  • Contact information (address, corporate email)


The data will be processed for this purpose as long as the data subject does not duly revoke his/her consent.


provided to inform interested parties who consented to receive commercial information.

This information may be about products, services, activities, news, and/or any promotion that may be of

interest and related to the activity of DOCTOMATIC.

Website visit analysis


uses various techniques to collect information.

These techniques may be used to obtain analytical data about visits and navigation through the pages of our websites.

These analytics rely on the use of external services that have their own privacy policy. These companies may cross-reference browsing data with their internal records in order to use it for ad

  • Web users
  • Online identifiers, including identification cookies.
  • Internet Protocol (IP) addresses and device identifiers.
  • Customer identifiers.
  • Information contained in the HTTP headers of requests sent over the Internet, such as the type of

device, operating system and browser from which the pages are visited.


Data will be retained in accordance with the terms identified in our Cookie Policy and the privacy policies of analytics cookie providers.


personalization, even if you do not have a registered account with their services.

For more information, please see our Cookie Policy.

  • Information provided by the browser such as preferred language, time zone and others.
  • Website

navigation data: pages visited.

  1. How do we protect personal data?

At DOCTOMATIC, we take technical and organizational security measures to protect your personal data from loss, misuse, unauthorized access or disclosure. Some of the measures we take include data encryption, restricted access to personal data and regular training of our staff on data protection.

  1. How do we store personal data?

We store your personal data on secure cloud servers located in the European Union. We maintain technical and organizational measures to ensure the security of personal data and prevent its loss, misuse, unauthorized access or disclosure.

  1. Who has access to your personal data?

DOCTOMATIC will only share your personal data with third parties where it is necessary to provide you with our services, where you have requested something from us that we are required to respond to, or where we are legally obliged to do so.

We may also communicate data to companies that provide us with services necessary for the ordinary and administrative activity of the company as data processors, in the framework of the provision of services such as:

      • Payment and payment processing service providers.
      • Selection process management providers
      • Technology service providers, such as cloud hosting and data analytics service providers.
      • Legal and financial advisors.
      • Regulatory and governmental authorities, when necessary to comply with our legal obligations, or have been legally required by them.
    1. International data transfer

As data controllers, we will share personal data between the different subsidiaries of the group, in Brazil and Mexico, based on legitimate corporate interest. In the event that these activities take place between countries in the European Economic Area and our subsidiaries located outside the European Economic Area, international transfers are made under contract and by signing the Standard Contractual Clauses approved by the European Commission: https://eur-

  1. How do I exercise my rights regarding my personal data?

Any person has the right to obtain information about the data that DOCTOMATIC is processing of its ownership. These are your rights:

      • Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
      • In certain circumstances, the interested parties may request the limitation of the processing of their data, in which case they will only be kept for the exercise or defense of claims.
      • In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. DOCTOMATIC will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.
      • Portability: The data subject shall have the right to receive the personal data concerning him/her, which he/she has provided to DOCTOMATIC, in a structured, commonly used and machine-readable format when: a) the processing is based on consent or contract, and b) the processing is carried out by automated means.

We inform you of your right to file a complaint with the supervisory authority ( in the event that the exercise of your rights here indicated has not been satisfied.

To exercise the aforementioned rights, you may contact: When doing so, please provide the following information:

      • Name and surname
      • Contact e-mail address
      • Right you wish to exercise
      • Data on which your request is based

We will resolve your request within a maximum period of one month, notifying you by e-mail.

  1. How long will your personal data be kept?

We will retain your personal data for as long as necessary to provide you with our services or as long as necessary to comply with our legal obligations. When we no longer need your personal data, it will be securely deleted or anonymized.

For a specific retention period, please refer to the tables in Section 5 of this Privacy Policy.

  1. Changes to our Privacy Policy

We reserve the right to update this Privacy Policy at any time. If we make significant changes to this Privacy Policy, we will inform you by posting a notice on our app or website, or by other appropriate means.

  1. Contact information

If you have any questions or concerns about this privacy policy or how we treat your personal data, you may contact us via email at