This English version is provided for convenience. In case of any discrepancy, the French version prevails.
Who is responsible for your data
Gabriel Hammadi, founder of Mon Sourire à Madrid, sole trader, 75 route de Saint-Leu, 95600 Eaubonne, France. Contact: gabriel.hammadi@gmail.com.
What data
Through the contact form: your first name, your preferred way of being contacted, your phone number or email address, the treatment you have in mind if you mention it, and your message if you write one.
If you decide to go further: your panoramic X-ray, the clinic’s health questionnaire and your quote. These are health data, which the GDPR protects with particular care (Article 9).
The form is not designed for sending X-rays or medical documents: please don’t attach them there. We deal with them after our first conversation, with your agreement.
Why, and on what legal basis
Your data is used only to organise your project: replying to you, passing your file to the clinic, translating, booking appointments and aftercare. It is used for nothing else.
For your health data, the legal basis is your explicit consent (Article 9(2)(a) GDPR): you give it by ticking the box on the form, and I ask for your agreement again before sending your file to a clinic. For everything else: steps taken at your request before a possible contract, then the contract itself (Article 6(1)(b) GDPR).
Who receives it
Gabriel Hammadi, and only him. Your enquiry arrives by email in his mailbox (Gmail, Google). It is not stored on the website.
The partner clinic you choose, in Madrid, receives what it needs to study your case and draw up the quote (X-ray, questionnaire, your contact details). It is in Spain, so within the European Union: your data is protected there by the same GDPR. Nothing is passed to a clinic without your agreement.
If you write to me on WhatsApp, the conversation goes through WhatsApp (Meta), under its own terms.
How long it is kept
For no more than three years after our last exchange, if you don’t take things further. Your X-rays and health documents can be deleted sooner, as soon as you ask. If you become a client, documents relating to your support are kept for as long as needed for aftercare and legal obligations.
Security
Your data only travels through the website form and by email (or WhatsApp, if you choose to write to me there). It is never sold or used for advertising.
The website is served over HTTPS. To prevent abuse, the sender’s IP address is used, in encrypted (hashed) form, to count the number of messages sent over 24 hours; this counter is then deleted. The hosting provider (OVH) also keeps technical connection logs.
Cookies and analytics
This website sets no cookies and uses no analytics or advertising tools. Fonts are hosted on the website itself. Your language choice is not stored: the language switcher is a simple link.
Your rights
You can ask to access, correct or delete your data, restrict its processing, object to it, or ask for it to be ported. You can also withdraw your consent at any time: what has already been done remains valid, but I stop passing anything on and delete the health documents I hold. For any of this, write to gabriel.hammadi@gmail.com. I will reply within one month at most. If you believe your rights have not been respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr), or with the data protection authority of the country where you live.
Last updated: October 2026.