Legal Information

Privacy Notice

This notice details how personal data provided by patients, relatives, or users of Dr. Karla Sanz's website is collected, used, protected, and, if applicable, shared.

Last updated: June 22, 2026.

1. Data Controller for Personal Data

The data controller for your personal data is Dr. Karla Sanz, specialist in Otolaryngology and Head and Neck Surgery.

For contact, requests, and exercising rights related to personal data, you can communicate via:

  • Administrative WhatsApp: 33 3807 4837
  • Contact Page: /en/contact/
  • Justo Sierra Office: 2292 Justo Sierra St, Col. Moderna, Guadalajara, Jalisco.
  • Hospital Ángeles Andares Office: Floor 16, Suite 1600, Zapopan, Jalisco.

2. Personal Data That May Be Collected

Depending on the contact method and the service requested, the following categories of data may be collected:

  • Identification data: name, age, gender, and similar information provided by you.
  • Contact data: phone number, WhatsApp, email, and preferred method of communication.
  • Administrative data: appointment date, chosen office, general reason for consultation, billing, or receipts when applicable.
  • Health data voluntarily provided: symptoms, medical history, previous studies, previous diagnoses, or clinical information necessary to guide medical care.
  • Technical navigation data: IP address, device, browser, traffic source, and general navigation behavior when analytics or measurement tools are used.

3. Purposes of Processing

Primary Purposes

  • Schedule, confirm, modify, or follow up on medical appointments.
  • Provide administrative information about offices, schedules, consultation costs, preparation, or general requirements.
  • Integrate or update the clinical file when a doctor-patient relationship exists.
  • Perform medical evaluation, diagnosis, treatment, follow-up, or referral when clinically necessary.
  • Issue receipts, invoices, or administrative documentation requested by the patient.
  • Comply with legal, sanitary, tax, contractual, or clinical record retention obligations.

Secondary Purposes

  • Measure service quality and improve the care experience.
  • Send reminders, general health information, operational notices, or communication related to medical services, when relevant.
  • Analyze in aggregate the performance of the website and digital channels.

If you do not wish for your data to be processed for secondary purposes, you may request this through the contact channels indicated in this notice.

4. Sensitive Personal Data and Health Data

Data related to your health is considered sensitive personal data. This data will be processed only when necessary for medical care, clinical follow-up, record integration, referral, diagnosis, treatment, or compliance with applicable legal obligations.

Sending medical information via WhatsApp, phone, forms, or any digital channel should be limited to data necessary for scheduling or administrative guidance. Medical diagnosis requires professional evaluation.

5. Transfers of Personal Data

Your personal data may be shared only when necessary to fulfill the described purposes or when there is a legal obligation. This may include:

  • Hospitals, laboratories, diagnostic centers, anesthesiologists, or other health professionals related to your care.
  • Administrative, technological, accounting, or communication providers supporting office operations.
  • Sanitary, judicial, tax, or administrative authorities when a legal obligation exists.
  • Insurance companies or other institutions only when requested or authorized by the patient and applicable.

Your personal data will not be sold to third parties.

6. ARCO Rights and Revocation of Consent

You can request access, rectification, cancellation, or opposition to the processing of your personal data, as well as revoke your consent when applicable.

To exercise these rights, send a written request through the contact page, administrative WhatsApp, or directly at the office. The request must include:

  • Full name of the data owner.
  • Means to receive a response.
  • Document proving identity or legal representation, when applicable.
  • Clear description of the right you wish to exercise and the personal data involved.

The request will be addressed in accordance with the timelines and conditions established by applicable Mexican legislation on personal data protection.

7. Use of Technologies, Cookies, and Third-Party Services

This website may use technologies necessary for its operation, loading fonts, maps, WhatsApp widgets, traffic measurement, security, and user experience improvement. These technologies may collect technical data such as browser type, device, IP address, traffic source, or general site interaction.

Certain third-party services, such as maps, chat tools, WhatsApp, analytics, or advertising measurement, may process information in accordance with their own privacy policies.

8. Changes to the Privacy Notice

This privacy notice may be updated due to legal, regulatory, operational, technological, or medical services changes. Modifications will be available on this page.

For additional information on personal data protection in Mexico, you can consult the National Institute for Transparency, Access to Information and Personal Data Protection: INAI.

Legal validation note

This notice was prepared to cover the website and digital channels of the office using clear language. It must be validated with the legal or administrative representative of the physician before its final publication, especially if there is an official privacy email, administrative manager, internal record formats, or hospital-specific guidelines.