Privacy policy
Last updated: 5 November 2026.
1. Controller
Golan Europe S.L., CIF B16546020, Av. Blai Bonet 8, Bl. 3, Apartamento 301, Santa Ponça, 07180 Calvià, Illes Balears, España. Privacy contact: info@ofertobra.es.
2. Data we process
What you enter in the form: service, answers to the service questions, province and postcode, description, photos if you attach any, timing and stage, name, phone and email. Plus technical data: date, IP address, browser, referring page and campaign parameters if any. Do not include health data, other people's data or ID documents.
The type of treatment or health service you are looking for is health data (special category, art. 9 GDPR). We process it only with your explicit consent for this request (art. 9.2.a GDPR), which you give when you send the form and can withdraw at any time. We only ask for the category and type of service, the province, the timing and the language; we do not ask for symptoms, diagnoses, medical history or photos, and we ask you not to write them in the description. Your request is only shared with at most 3 registered health centres or professionals of this site. These requests are kept for at most 6 months. After that period they are deleted automatically.
3. Purposes and legal bases
- Handling your request: confirming it by email and showing it, without your contact details, to registered professionals for that service in your province; and passing your contact details only to the professional you reply to on the platform (or share your phone with). At most 3 professionals can take your request. Basis: your consent (art. 6.1.a GDPR).
- Platform messages and notices about your request: performance of your request (art. 6.1.b GDPR).
- Fraud prevention and security: legitimate interest (art. 6.1.f GDPR).
- Marketing from OfertSalud: only if you tick the optional box (art. 6.1.a GDPR and art. 21 LSSI).
Your OfertSalud request is only shared with OfertSalud professionals. It is not passed to other Ofert network sites without a separate, unticked box that only you can tick.
4. Recipients
Registered OfertSalud professionals (at most 3 per request), who process your data as independent controllers once you reply to them. Processors under contract (art. 28 GDPR): hosting and e-mail (Hetzner Online GmbH (Alemania, UE)). We do not sell your data.
5. Retention
Up to 6 months from sending, unless you ask for deletion earlier; then blocked only for the legal limitation periods. You can delete your request from its link.
6. Your rights
Access, rectification, erasure, objection, restriction and portability at info@ofertobra.es. You may complain to the Spanish DPA (www.aepd.es).
7. Professionals
If you create a professional account we process your business and contact data, your registration numbers (Health authorisation/registration number of the centre (REGCESS / regional register), Professional association number of the health professional) and your platform activity to run the account, billing and fraud prevention (art. 6.1.b and 6.1.f GDPR). The Ofert account is shared across the network: the same e-mail and password work on every site, but each site keeps your requests and charges separately.