Skip to content
Keishal
en
IntegrationsHow it worksBlogAboutBook a call
← Home

Privacy policy

Last updated June 25, 2026

Who we are and our role

Artifex One Technologies, S.L. ("Artifex One", "Keishal", "we") handles personal data in two different roles depending on the data:

  • Patient data processed through Keishal: we act as a data processor (Art. 28 GDPR), following the instructions of the clinic, which is the data controller. We do not use patient data for our own purposes. If you are a patient, please send your requests to your clinic; we assist the clinic in handling them.
  • Data of website visitors, contacts and platform users: we are the data controller. The rest of this policy refers to this data.

Contact: privacy@keishal.com · Calle de l'Electricitat, 6, pta. 6, 08960 Sant Just Desvern (Barcelona), Spain.

What we process and why

We process personal data to: (a) respond to enquiries and contact requests — pre-contractual measures / legitimate interest; (b) provide and manage the service for clients and meet our accounting and tax obligations — performance of a contract and legal obligation; (c) send communications to clients and professional contacts, with an opt-out in every message — consent or legitimate interest; and (d) keep the service secure — legitimate interest. We do not make automated decisions producing legal effects on website visitors.

Recipients and international transfers

We do not sell or share your data. To run the service we rely on technology providers (categories: hosting and infrastructure, messaging, artificial intelligence, and email) acting as processors under contract. Some are located outside the EEA; where that is the case, transfers are covered by Standard Contractual Clauses and/or recognised adequacy frameworks. The list of processors is available to clients in the data processing agreement (DPA).

Retention

We keep data for as long as the relationship lasts and, afterwards, blocked for the applicable statutory limitation periods.

Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent, by writing to privacy@keishal.com. We respond within one month. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es) or, in Catalonia, the Catalan Data Protection Authority (APDCAT). To delete your data, see our Data deletion instructions.

Security

We apply appropriate technical and organisational measures (encryption, access control, data minimisation) and notify breaches in accordance with Arts. 33-34 GDPR.