Privacy Notice

1. Data controller identity and address

Carlos Alfonso Gómez Rochín (the "Controller"), physician with professional license 7373850, with address for the purposes of this notice at CORE Hospital, 2nd floor, office 228, Blvd. Padre Kino 10014, Zona Urbana Río, ZIP 22010, Tijuana, Baja California, Mexico, is responsible for the processing of your personal data under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations and other applicable rules.

2. Personal data we collect

Through this website, WhatsApp, phone or directly at the office, we may collect:

• Identification and contact data: full name, phone number and email address.
• Sensitive health data: reason for consultation, medical history, clinical information and test results, when you provide them for your care.

Health data is considered sensitive personal data under the LFPDPPP, so its processing requires your express consent, which is collected in writing or by electronic means before or during your first consultation.

3. Purposes of processing

Primary purposes (necessary for the doctor–patient relationship):

• Schedule, confirm and, where applicable, reschedule medical appointments.
• Provide medical care, create your clinical record and follow up on your treatment.
• Send instructions and communications related to your care.
• Issue prescriptions, receipts and, where applicable, invoices.

Secondary purposes (you may object without affecting your care):

• Send appointment and follow-up reminders.
• Send health information of general interest.

If you do not want your data processed for secondary purposes, you may say so at any time by writing to administracion@drrochin.com.

4. Data transfers

Your personal data will not be transferred to third parties without your consent, except in the cases set out in Article 37 of the LFPDPPP, such as: medical referrals to other health professionals necessary for your care (with your knowledge), requests from competent authorities and emergencies that put your health at risk.

5. ARCO rights and withdrawal of consent

You have the right to Access your data, Rectify it when inaccurate, Cancel it and Object to its processing (ARCO rights), and to withdraw your consent.

To exercise these rights, send a request to administracion@drrochin.com, including: (i) your full name and a means to reply to you; (ii) a copy of official ID proving your identity (or your legal representative's); (iii) a clear description of the data concerned; and (iv) any document that helps locate your data.

A response will be issued within a maximum of 20 business days from receipt of the complete request, under the LFPDPPP.

6. Cookies and measurement technologies

This site may use cookies and analytics tools (such as Google Analytics) to measure visits and improve the browsing experience. These tools collect aggregated data (pages visited, device type, source of the visit) and do not identify your name or your health information. You can disable cookies from your browser settings.

7. Security measures

The Controller has implemented reasonable administrative, technical and physical security measures to protect your personal data against damage, loss, alteration, destruction or unauthorized use.

8. Changes to this notice

This notice may be amended to address legislative changes or changes in the practice. Any change will be posted on this page, indicating the date of last update.

9. Competent authority

If you believe your right to the protection of personal data has been violated, you may turn to the competent data-protection authority in Mexico.