Palma de Mallorca, Spain
Bonaire Bespoke Recovery
DiscretionOne client per residence
LROAS 1.0.0, edition 2026-10-01
3 of 10 clinics
1st of 10 in Spain
Palma de Mallorca, Spain
DiscretionOne client per residence
7th of 10 in Spain
Vélez-Málaga, Spain
DiscretionShared setting
10th of 10 in Spain
Marbella, Spain
DiscretionOne-to-one therapy, shared site
Showing 1 to 3 of 3 clinics
LROAS 1.0.0, edition 2026-10-01
As of 2026-10-05.
Anyone who creates or sees clinical records must keep them confidential (Ley 41/2002, Arts. 2.7 and 7) [1]. A professional who reveals a patient's secrets commits a crime: one to four years in prison, a fine and a two-to-six-year professional ban (Criminal Code Art. 199.2) [2][3].
The GDPR allows health data to be processed only under narrow exceptions, with fines up to EUR 20 million or 4% of worldwide turnover [4]. Ley Orgánica 3/2018 adds a confidentiality duty for everyone handling it [5]. Patients can complain to the regulator, the AEPD [6].
The Constitution protects privacy and one's own image (Art. 18.1) [7]. Photographing or publishing a person without consent is unlawful unless an exception applies; the main one covers public officials and public-facing professionals at public events or in places open to the public (Ley Orgánica 1/1982, Arts. 7.5 and 8.2.a) [8]. Clinic grounds are neither. Private persons get stronger protection than public figures [9].
Prior censorship is banned, and only a judge can seize a publication (Art. 20.2 and 20.5) [7]. Courts can order an intrusion stopped, act against imminent ones and award damages, presumed once intrusion is proven (Ley Orgánica 1/1982, Art. 9) [8]. Inaccurate facts can be corrected by sending a rectification to the editor within seven days (Ley Orgánica 2/1984) [10]. Courts weigh truthfulness, public relevance and whether private details were necessary [9].
Paparazzi photos from Ibiza sell to magazines for thousands of euros [11]. The law punishes leaks and intrusions mostly after the fact; it does not keep photographers away. A clinic's setup, such as one client per residence and a private arrival, matters as much as the statute.