Privacy policy

Last revision: 20 de junio de 2025

1. Who is responsible for the processing of data?

Theraup Solutions SL is responsible for the processing of your personal data for the purposes of providing the services identified in this Privacy Policy. As a communication platform between users and psychologists, Theraup will not be responsible for the processing of data that are shared in the framework of the psychologist-user relationship, but that processing will be carried out by the psychologist acting as the sole responsible for the processing. The User is informed that, once the provision of psychological services is started, the Psychologist, in his professional capacity, will be the sole responsible for the User's data that are collected and generated during the provision of the service.In relation to the above, the processing of health data will be carried out solely by the psychologist, who will determine the data necessary to provide the service, the legal basis, security measures and all elements related to such data processing. Theraup will only process data associated with your health with your express consent and for the purpose of recommending a professional that we believe may meet your needs; this data processing is completely voluntary, and the user may access the rest of the services provided by Theraup without the need to provide us with such data.Theraup Solutions SL is a company domiciled at Avenida Alcalde Barnils, 63, Sant Cugat del Valles, 08174, Barcelona, and its NIF number is B21842166 (hereinafter, "THERAUP").At THERAUP we are committed to the fundamental right to the protection of your personal data and this Privacy Policy aims to inform you about your rights under the General Data Protection Regulation ("GDPR").

2. What information do we process?

a) Data you provide directly:

We collect information about you when you contact us through the channels enabled for this purpose, such as contact forms to work with us, to request additional information or to register on Theraup as a user or psychologist.When you contact us through these channels, we will request your name and surname, contact details, professional data and other data necessary depending on the specific request you have made.In addition, if you register as a psychologist, we will process your identification and professional data to verify that you meet the legal requirements to offer your services through our platform; for example, in case of working with minors, the laws on legal protection of minors require certifying that you have not been previously convicted of a crime against sexual freedom and integrity.All fields marked with an asterisk (*) in the forms provided to you in the channels will be mandatory, so that the omission of any of them could result in the impossibility of providing you with the requested services. You must provide truthful information, and identity theft or the use of aliases or anonymous names is prohibited.You may not, when providing any data that may be requested in the channels, choose expressions that are offensive, coinciding with trademarks, trade names, names or pseudonyms of public figures or celebrities for whose use you are not authorized.In order for the information provided to always be up to date and free of errors, you must notify Theraup, as soon as possible, of any modifications to your personal data that occur.Likewise, by clicking on the "I Accept" (or equivalent) button incorporated in the aforementioned forms, you declare that the information and data you have provided in them are accurate and truthful.

b) Data obtained indirectly:

When you browse, various cookies and other tracking devices may be installed on your device, as we explain in our Cookie Policy.

3. What is the origin of the data?

We consider that all data processed by Theraup have been provided to us freely by you.In the event that the personal data provided belong to a third party, you guarantee that you have informed them of this Privacy Policy and have obtained their authorization to provide the data to Theraup for the purposes indicated above. Likewise, you guarantee that the data provided are accurate and up to date, and you are responsible for any damage or harm, direct or indirect, that may be caused as a result of non-compliance with such obligation.

4. For what purpose and on what legal basis do we process the data?

Theraup acts as the data controller for personal data for the following purposes and in accordance with the following legal bases:

Based on the management of the contractual or pre-contractual relationship:

To provide you with the services you have requested and attend to your information requests, as well as to facilitate the exercise of your rights.
To evaluate the resumes received and manage the selection processes.
To manage the collection of contracted services.
To verify the suitability of psychologists to provide their services through our platform.

Based on compliance with Theraup's legal obligations:

To allow users to exercise their rights recognized in the GDPR (access, rectification, erasure, opposition, limitation of processing and portability), as well as in other national or European data protection regulations.
To comply with the obligations provided for in tax, accounting and tax regulations, as well as in legislation on consumer and user protection, information society services and electronic commerce, and any other sectoral or general regulations applicable to the activity carried out by Theraup.

Based on the explicit, free and unequivocal consent that, where applicable, you grant us at the time of collecting your data:

Where applicable, to keep you informed about our own or third-party products and services, always sent through Theraup by electronic means.
In the case of Theraup users, to know your preferences regarding the search for a psychological professional, solely for the purpose of recommending professionals that we believe may fit your profile. Such consent will legitimize the processing of health data as an exception provided for in art. 9.2.a) of the GDPR.
To know your assessments of the platform.

Based on the existence of a legitimate interest on the part of Theraup:

To keep you informed about Theraup products and services, related to those previously contracted and that may be of interest to you.
To carry out periodic reviews of our services and conduct satisfaction surveys in order to evaluate and improve the quality of the service we provide.
To carry out internal reviews and, where applicable, contact the client in the event that well-founded suspicions are detected or exist in relation to possible fraud or identity theft.

However, if you do not want your data to be processed for these purposes, you can object at any time by contacting us through the emails provided for this purpose, as indicated in the Exercise of Rights section of this Privacy Policy.

5. To whom are the data communicated?

All transfers of personal data that we make are necessary for the fulfillment of the indicated purposes, or are made to comply with a legal obligation:

To Public Administrations, judges and courts and to State Security Forces and Corps in compliance with the legal obligations that apply to us.
Companies providing IT services, tools or IT infrastructure on which the services provided by Theraup are based, such as hosting providers, CRMs, mailing service companies, etc.
In the case of Theraup users, we will provide your profile data to psychologists registered on our platform only when you have given us permission to do so. Once your data is received, the data processing carried out by the psychologist will be subject to their own Privacy Policy, which they must provide to you at the beginning of the relationship.

In this regard, we inform you that any transfer that occurs will be made taking into account all necessary legal safeguards. Likewise, we guarantee that we sign specific contracts with all our service providers as established by the regulations.Similarly, Theraup guarantees that in the event that there are providers located in countries outside the European Union or others not considered adequate in accordance with data protection regulations, the necessary precautions are taken to ensure that data can be transferred safely, either because the provider offers adequate guarantees, through, among others, the signing of European Commission Standard Contractual Clauses, or one of the exceptions set forth in Chapter V of the GDPR is met.

6. Exercise of your rights

We inform you that you may exercise the following rights:

Right of access to your personal data to know which ones are being processed and the processing operations carried out with them.
Right to rectification of any inaccurate personal data.
Right to erasure of your personal data, when this is possible.
Right to request the limitation of the processing of your personal data when the accuracy, legality or necessity of the data processing is doubtful, in which case, we may retain the data for the exercise or defense of claims.
Right to object to automated decision-making, including profiling.
Right to object to the processing of your personal data when the legal basis that enables us to process it, in accordance with section 4 above, is legitimate interest.
Right to the portability of your data, when the legal basis that enables us to process it from those indicated in section 4 above is the existence of a contractual relationship or your consent.
Right to revoke the consent granted to Theraup.

You may exercise your rights at any time and free of charge in the following ways:

By sending a written request to Theraup at the address Avenida Alcalde Barnils, 63, Sant Cugat del Valles, 08174, Barcelona or to the email info@aurela.health indicating the right you wish to exercise.
In addition, when you receive any communication from us, by clicking on the unsubscribe section that will be contained in that communication, you can unsubscribe from all previously accepted commercial communications.

When you exercise your rights, and only in the event that we have doubts about your identity, we may request additional information to verify your identity.Likewise, we inform you that you have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider that we have committed an infringement of data protection legislation regarding the processing of your personal data.In addition, we inform you that you can register on the Robinson List at www.listarobinson.es: the advertising exclusion system managed by the Spanish Digital Economy Association (ADIGITAL); or on the StopPublicidad List of the Spanish Association for Digital Privacy at https://listastoppublicidad.com/es/home; where you can register in order to show your opposition to the use of your data for the purpose of sending you commercial communications.The exercise of rights regarding data that you have shared with your psychologist must be exercised in accordance with the provisions of the psychologist's Privacy Policy.

7. Data retention period

We will only keep your data for as long as necessary to provide you with these services. Any data you provide to us through the channels will be blocked once they are no longer necessary to manage the service and will only be available in the event that there is a legal obligation (derived from a request from State Security Forces and Corps or from courts and tribunals) as well as when you exercise your rights.

8. Security and confidentiality

In order to prevent unauthorized access or unauthorized disclosure of personal data, we have taken appropriate technical and physical measures, as well as management processes to safeguard and secure the information we collect from you.

9. Minors

Minors under 14 years of age may not use the services available through our website without the prior authorization of their parents, guardians or legal representatives, who will be solely responsible for all acts carried out through the site by the minors under their care, including the completion of forms with the personal data of such minors and the marking, where applicable, of the boxes that accompany them. In this regard, and to the extent that Theraup does not have the capacity to control whether users are minors or not, parents and guardians must enable the necessary mechanisms to prevent them from accessing the website and/or providing personal data without their supervision, with Theraup not accepting any responsibility in this regard.

10. Privacy policy update

We make our best efforts to keep our Privacy Policy fully up to date. If we make changes, they will be clearly identifiable in a clear and specific manner, as far as possible in the relationship we have established with you (for example: we may communicate the changes to you by email).This Privacy Policy has been reviewed and published as of 20 de junio de 2025.