Legal documents
Legal notice Privacy policy Cookie policy
APPYWEB S.L.

Tax ID (CIF): B02720803

Calle Mestre Laporta, N 2, 1 piso, puerta 2

03801 Alcoy (Alicante)

Privacy Policy

Last updated: 15/11/2026

This translation is provided for information purposes only. In the event of any discrepancy, the Spanish version shall prevail.

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), and other data protection legislation in force, APPYWEB S.L. informs users of its Privacy Policy.

1. Data controller

Any personal data that may be collected directly from the data subject will be treated confidentially and will form part of a processing activity whose controller is:

  • Controller: APPYWEB S.L.
  • CIF (Tax ID): B02720803
  • Registered office: Calle Mestre Laporta, N 2, 1 piso, puerta 2, 03801, Alcoy (Alicante)
  • Contact email: info@appyweb.es
  • Telephone: +34 960 79 30 04

APPYWEB S.L. acts as data controller with regard to the data of users of this website and of the clinics that contract its services (contact, commercial and billing data). With regard to the data of the clients and animals that the clinics manage through the platform, APPYWEB S.L. acts as data processor on behalf of each clinic, under the terms described in section 3.

2. Purposes of processing

The purposes for which personal data are collected are:

  • To handle requests for information, enquiries or service contracts submitted through the website's contact forms.
  • To send commercial communications about our products and services, provided that the user has consented to this processing.
  • To analyse the use of the website in order to improve its quality and the user experience.
  • To manage the contracting and provision of the services offered through the website.
  • To handle and manage any incidents that may arise from the use of our services.
  • To provide the CRM software service, including the artificial intelligence assistants described in section 3, on behalf of the user clinics.

3. Processing by artificial intelligence assistants

Veternexa includes virtual assistants based on artificial intelligence — accessible through channels such as WhatsApp, telephone voice, web chat and the management dashboard — that allow clinics to automate appointment management and assist with documenting each animal's consultations.

With regard to the personal data of clients processed through these assistants (name, contact details, appointment history and communications) and the clinical data of their animals, APPYWEB S.L. acts as data processor on behalf of the clinic, which is the controller. This processing is governed by the corresponding data processing agreement (Article 28 GDPR) and by the clinic's instructions.

The legal basis for the processing is the performance of the contract for veterinary services between the client and their clinic (Article 6(1)(b) GDPR) and, where applicable, the consent given for communications and reminders. The clinical data of the animal itself do not constitute a special category of personal data under Article 9 GDPR — that category protects health data of natural persons — although the clinic and APPYWEB S.L. process them with the same level of confidentiality and security because they are linked to an identifiable client.

The artificial intelligence assistants always operate under human oversight: they can hand the conversation over to the clinic's staff at any time, and they do not make clinical decisions or replace the professional judgement of the veterinary team. In accordance with the applicable legislation, users are informed that they are interacting with an artificial intelligence system and are always offered the option of being attended to by a person.

4. Legal basis for processing

The legal basis for the processing of personal data is, as the case may be:

  • The consent given by the user when providing their data through our forms for the stated purposes.
  • The performance of a contract to which the data subject is party, or the taking of pre-contractual steps at the data subject's request.
  • The legitimate interest of the controller in sending commercial communications about products or services similar to those previously contracted.
  • For client and animal data processed on behalf of the clinics, the bases indicated in section 3 (Article 6(1)(b) GDPR).

5. Recipients of the data and data processors

The personal data collected will not be disclosed to third parties except where there is a legal obligation or where it is necessary for the performance of the contractual relationship.

To provide the service, APPYWEB S.L. relies on technology providers that may have access to personal data as processors or sub-processors, with which it has entered into the corresponding processing agreements in accordance with Article 28 GDPR. These providers include, in particular:

  • OpenAI — natural language processing and audio transcription for the AI assistants (United States).
  • Retell AI — orchestration of the telephone voice assistant (United States).
  • Meta Platforms — WhatsApp Business messaging channel (United States).
  • Google — appointment calendar synchronisation (United States / European Union).
  • Stripe — payment processing for the software subscription.
  • Hosting and email delivery providers necessary for the operation of the service.

In all cases, APPYWEB S.L. ensures that these providers comply with data protection legislation and have assumed the required confidentiality and security obligations.

6. International data transfers

Some of the providers listed in section 5 are located outside the European Economic Area, mainly in the United States. Consequently, the provision of the service may involve international data transfers.

In such cases, APPYWEB S.L. ensures that these transfers are carried out with the appropriate safeguards provided for in Chapter V GDPR, in particular through:

  • The provider's participation in the EU-U.S. Data Privacy Framework, where applicable; and/or
  • The signing of Standard Contractual Clauses (SCCs) approved by the European Commission, supplemented, where appropriate, by any additional measures required.

Users may request further information about these safeguards and obtain a copy of them by writing to info@appyweb.es.

7. Data retention period

The personal data of website users and client clinics will be kept for as long as the business relationship is maintained or for the number of years necessary to comply with legal obligations. Once this period has elapsed, the data will be erased in accordance with data protection legislation, which entails their blocking, being available only at the request of Judges and Courts, the Public Prosecutor's Office or the competent Public Administrations during the limitation period for any actions that may arise, after which they will be completely deleted.

With regard to client data and the clinical history of their animals processed on behalf of the clinics, retention periods are governed by the instructions of the controller clinic, in line with the principles of data minimisation and storage limitation of the GDPR and the LOPDGDD, as well as the tax, commercial and veterinary sector legislation applicable in each case.

8. Data subjects' rights

Users may exercise the following rights in relation to their personal data:

  • Right of access: to find out which personal data we process and for what purposes.
  • Right to rectification: to request the correction of inaccurate or incomplete data.
  • Right to erasure: to request the deletion of data where, among other reasons, they are no longer necessary for the purposes for which they were collected.
  • Right to object: to object to the processing of their personal data.
  • Right to restriction of processing: to request the restriction of the processing of their personal data in certain circumstances.
  • Right to data portability: to receive their personal data in a structured, commonly used and machine-readable format and to transmit them to another controller.
  • Right to withdraw consent: to withdraw at any time the consent given for the processing of their data.

These rights may be exercised by writing to APPYWEB S.L., Calle Mestre Laporta, N 2, 1 piso, puerta 2, 03801, Alcoy (Alicante), or by email to info@appyweb.es, enclosing a copy of your DNI (Spanish national ID) or equivalent identity document. Where the data subject is a client of a clinic that uses the software, they may address their request to the clinic itself, as data controller, or to APPYWEB S.L., which will forward it to the clinic.

We also inform you that you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es) if you consider that the processing of your data does not comply with the legislation in force.

9. Security measures

APPYWEB S.L. has adopted all the technical and organisational measures necessary to guarantee the security and integrity of the personal data it processes, and to prevent their loss, alteration and/or access by unauthorised third parties. These measures include encryption of communications in transit, role-based access control and the signing of confidentiality and data processing agreements with the providers involved in the service.

10. Updates to the privacy policy

APPYWEB S.L. reserves the right to amend this privacy policy to adapt it to legislative or case-law developments, as well as to industry practices. In such cases, it will announce the changes introduced on this page or through other means of communication, reasonably in advance of their implementation.

11. Contact

For any queries relating to this Privacy Policy, you can contact us via:

  • Email: info@appyweb.es
  • Telephone: +34 960 79 30 04
  • Postal address: Calle Mestre Laporta, N 2, 1 piso, puerta 2, 03801, Alcoy (Alicante)