Data protection
How Sana Protect handles your personal data, under the EU General Data Protection Regulation (2016/679) and Spanish organic law 3/2018.
Data controller
- Company
- Sana Protect SL
- Registered office
- Calle Marva 14 - 6, 46007 Valencia, Spain
- Tax ID (CIF)
- B66589292
- VAT number
- ESB66589292
- Telephone
- +34 626 375 567
- hola@sana-protect.com
- Activity
- Insurance brokerage
What we collect
Identification and contact details (name, email, telephone, town); the information you give us so that we can find the right cover (age, family situation, whether you own or rent, details of your home, species, breed and age of your pet); and the exchanges we have with you by email, telephone or WhatsApp. When you request health cover, we may also process health data — a special category — strictly limited to what the insurer requires in order to quote.
Why we use it, and on what legal basis
To answer your request and prepare a quote, and to arrange and administer your policy, including at claim time — pre-contractual steps and performance of a contract (Art. 6.1.b GDPR). To comply with our obligations as an insurance intermediary, including the distribution, tax and anti-money-laundering rules (Art. 6.1.c). To send you information about our services, where you have asked for it (Art. 6.1.a). To keep the site and our systems secure (Art. 6.1.f). Health data is processed only with your explicit consent (Art. 9.2.a), which you can withdraw at any time.
Who receives it
The insurance companies from whom we request a quote on your behalf, and only for that purpose. Our technical service providers — hosting, email, CRM — who act as processors under a written agreement. Public authorities where the law requires it (DGSFP, tax administration, SEPBLAC). We never sell your data and we do not share it with advertisers.
Transfers outside the EU
Our providers are chosen in the European Economic Area wherever possible. If a transfer outside it becomes necessary, it is covered by an adequacy decision or by the European Commission's standard contractual clauses, and we will tell you on request which providers are concerned.
How long we keep it
A request that does not lead to a policy: up to one year, then deleted. An active policy: for as long as the relationship lasts, and afterwards for the legal limitation periods — six years under the Commercial Code, ten years under the anti-money-laundering rules. Health data is kept no longer than the insurance file requires.
Your rights
You may request access to your data, its rectification or erasure, the restriction of its processing, or its portability, and you may object to processing based on our legitimate interest. You may withdraw your consent at any time without affecting what was done before. Write to hola@sana-protect.com with proof of identity; we reply within one month. If you are not satisfied, you may complain to the Agencia Española de Protección de Datos (C/ Jorge Juan 6, 28001 Madrid — www.aepd.es).
Security
Access to your file is limited to the people who need it. Our connections are encrypted, our providers are bound by confidentiality, and we review who has access when someone joins or leaves.
Cookies
Strictly necessary cookies keep the site working and your language choice — these do not require consent. Measurement cookies, which tell us anonymously which pages are read, are only placed if you accept them in the banner. You can change your mind at any time from the "Cookie settings" link in the footer, or by clearing the cookies in your browser. We use no advertising or profiling cookies.
Minors
Our services are addressed to adults. We do not knowingly collect data from anyone under 18 except as part of a family policy requested by a parent or guardian.
Changes
If this policy changes, the new version is published on this page with its date. Significant changes affecting your rights will be notified to you directly.
Last updated: September 2026.