Privacy policy

Who is responsible for your data

The data controller is Madhu Prakash Khatnani Khatnani (hereinafter, “the centre”), tax ID 78.627.055-Z, address calle Aceviño 4 – unit 6C, 38400 Puerto de la Cruz, Santa Cruz de Tenerife, Spain. Phone +34 922 38 99 75. Email visualeyecenter@gmail.com.

If you have any question about how we handle your data, write to that address and we will reply.

Data protection officer. The centre has appointed a data protection officer: Data-Empresa, address Punto Fijo 2, 38400 Puerto de la Cruz, Santa Cruz de Tenerife, Spain, phone 691 664 951. You can contact them directly about any question regarding the handling of your data or to exercise your rights.

What data we handle

Depending on how you deal with us, we handle different data:

• If you fill in the form on this site: your name, phone number, email address, the speciality you select and whatever you write.
• If you come in for an appointment: besides your contact and billing details, the eye and hearing health data needed to treat you: test results, prescription, history and progress.
• If you write to us on WhatsApp or call us: the number you contact us from and whatever you tell us. We use WhatsApp only to remind you of an appointment or to let you know your order is ready: we do not give test results or deal with clinical questions through that channel.
• If an ophthalmologist or another professional refers you: the report they send us, which becomes part of your clinical record.

On the web form we expressly ask you not to give health details: that is what the consultation is for, which is a secure and confidential setting.

What we use it for and on what legal basis

Your health data

Health data is a special category and receives reinforced protection. Only the centre’s healthcare staff treating you have access to it, it is covered by professional secrecy, and it is never used for commercial or advertising purposes.

If the patient is a minor

We treat children and adolescents, mainly in myopia control and vision therapy. When the patient is under fourteen, consent to handle their data is given by their father, mother or legal guardian, who signs it at the first visit. From fourteen onwards the minor can give it themselves, except where the law still requires the parents’ authorisation.

A minor’s data is handled exactly like any other patient’s: only to treat them, with the same security measures and with no commercial use.

Security cameras

The premises have security cameras, signposted at the entrance. Their only purpose is the safety of people and premises, and the legal basis is our legitimate interest in protecting the centre.

The footage is not published, is not passed to third parties and is not used to monitor anyone. It is kept for a maximum of one month from recording and then deleted, unless it captures something that has to be reported to the police or a court. You can ask us for access to footage you appear in by writing to the contact address, giving the approximate day and time.

Photos and videos on this site

The people appearing in the photographs and videos on this site do so with their express authorisation for that use. Where a minor appears, the authorisation is given by their father, mother or legal guardian. It can be withdrawn at any time by writing to us, and we will take the image off the site.

How long we keep it

• Enquiries from the website: while we handle your enquiry and, afterwards, for as long as it is still useful for helping you if you write to us again. You can ask us to delete it whenever you like and we will.
• Clinical record: the period required by healthcare legislation, at least five years from the last appointment.
• Invoicing: six years, as required by commercial and tax law.
• Security camera footage: one month at most, unless it has to be kept for the police or a court.

Who we share it with

We do not sell or pass on your data. Only those who provide services we need in order to operate have access to it, and only in order to provide them:

• iData Ópticas — software for managing clinical records and appointments.
• Hergon Asesores — accountants: invoicing and tax obligations.
• Essilor, Cione, Hoya and Indo — the laboratories that make your lenses when you order glasses. They receive the prescription and fitting measurements, not your clinical record.
• Interton (GN ReSound) — hearing aid manufacturer when we fit one. It receives the audiometric data needed to programme it.
• IONOS — hosting for the website and email, on servers located in the European Union.

Data is also shared with public authorities where the law requires it, and with your doctor or ophthalmologist when you ask us to send them a report.

What rights you have

You can ask us at any time for:

• Access: to know what data of yours we hold.
• Rectification: to correct anything that is wrong.
• Erasure: to delete it, except what we are obliged to keep.
• Restriction and objection: to restrict or refuse certain uses.
• Portability: to receive it in a format you can take with you.
• To withdraw your consent where the processing is based on it, without affecting what was done beforehand.

To exercise them, write to us at visualeyecenter@gmail.com or come into the centre, in both cases proving your identity. We will reply within one month at most.

If you believe we have not dealt with your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es), C/ Jorge Juan 6, 28001 Madrid, Spain.

Changes to this policy

If we change the way we handle your data, we will update this page. Last updated: September 2026.