Nos services
Effective Date: MARCH 23nd, 2026
This Privacy Notice shall apply to the provision of the General Medicine consultation service (“the Service”). It also applies to the processing of personal data carried out through the technical integration established between Teladoc and the Client via API (“the Integration”) for the purpose of enabling the provision of the Service.
The Service and the Integration are provided by Teladoc Health International, S.A.U. with registered offices at 252-260 Via Augusta 08017 Barcelona Spain (“Teladoc”, “We”, “Us” and “Our”).
In order to provide the Service to You, We are required to collect and process Your Personal Data. This Notice describes the kinds of Personal Data We collect about You, why We collect it, how it is collected, how We use it, how We protect it and under what circumstances We share it with third parties. This Notice also describes how You may access Your Personal Data and exercise the rights You have concerning Your Personal Data. Please review it carefully.
At Teladoc We are committed to protecting and respecting Your privacy. Teladoc operates globally and is committed to full compliance with all applicable data privacy laws and regulations relating to any jurisdiction, including (but not limited to) the General Data Protection Regulation (EU) 2016/679 (“the GDPR”) (collectively “the Data Protection Laws”).
The data controller is Teladoc.
Teladoc's privacy practices comply with the Data Protection Laws. This means that Our privacy practices include (but are not limited to) adherence with the following protections:
“Personal Data” means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Due to the nature of the Service, the Personal Data that we require to collect and process about You may contain Health Data about You.
“Health Data” means Personal Data related to the physical or mental health of a natural person, including that person’s medical condition(s), medical history and / or the provision of health care services to that person, all or any of which may reveal information about that person’s health status.
Teladoc collects only that Personal Data which is relevant and necessary for the provision of the Service including the operation of software.
Which Personal Data we process about You and why, as well as who that Personal Data may be shared with is determined by the Service you receive from Us as described in this Notice.
It is not mandatory for You to provide Your Personal Data to Us. However, should You not provide this information, Teladoc will not be able to provide You with Our Service via the Integration.
For the purposes of the Service, when You register and log in to the Portal/ mobile app (if applicable), Teladoc Health automatically collects all the information/ Personal Data noted below. Because the Service is provided through an API-based integration with the Client, Teladoc must be able to link certain requests and transactions to a specific user in order to process the consultation and manage updates within our systems. For this purpose, the following information might be collected and associated to You:
During Your use of the Service, You will provide and Teladoc will collect Your personal data.
Personal data collected during phone calls, emails, medical reports You provide, and other communications (collectively, "Communications") between You and Teladoc service providers and/or Teladoc will be recorded. Therefore, we will collect and retain all such information from these communications, including Your identity, the date and time of the communication, and the content of such communications.
In connection with the Service, and always upon Your prior authorization, We may collect Your medical records from Your past or current health care providers.
Teladoc may also obtain Personal Data about You from Your insurer and/or from Your authorized representatives, if any, where necessary and relevant to the provision of the Service.
In the course of providing the Service, telephone calls may be recorded for the purposes of service quality, case management, regulatory compliance, and legal defense.
Recordings may include personal data, including data concerning health, which will be processed as a special category of personal data in accordance with the GDPR.
We will first use the Personal Data to fulfill any contractual obligation between Us and You, that is, the Teladoc Terms and Conditions. When We request that Personal Data be provided to fulfill the terms of such contract, You will be required to provide the corresponding Personal Data, or We will not be able to provide the Service. In such cases, the legal basis for Our processing of the Personal Data is that it is necessary for the performance of a contract, as stated above.
We may also process Your Personal Data in accordance with Our legitimate business interests; this is on the considered measure that We need the Personal Data to achieve reasonable various purposes.
Our data processing activities conducted on the lawful basis of legitimate interests are:
We may also process Your Personal Data in order for Teladoc to comply with Our various legal obligations; this might include:
Finally, We may process Your Personal Data for the purposes of providing You with the Service subject to Your informed consent.
You can withdraw Your consent at any time as foreseen in section 9 below and consequently, We will then cease processing Your Personal Data based on Your consent. However, You should be aware that this does not affect our ability to keep processing your Personal Data where that is based on a different legal basis as foreseen in this section, as applicable.
Where We process Your Health Data, other than where We have Your consent to do so We will only process if one of the following apply:
Teladoc may create de-identified information defined as data that does not include Your name, address, birth date, or any other information that could be used to directly or indirectly identify You (the “Anonymized data”) for the purposes of reviewing or evaluating the performance of Our systems in providing the Service, improving the quality or timeliness of Our Service, medical research or demonstration of the reliability of Our information management.
Teladoc will retain Your Personal Data for as long as it is needed for the provision of the Service to You and after that, for the statutory periods for the only purpose of attending any statutory responsibilities that might arise from the provisions of the Service and to comply with the Data Protection Laws.
At the end of the relevant retention period, Your Personal Data will be securely destroyed or permanently de-identified in accordance with Data Protection Laws and any applicable regulations. Anonymized data is no longer Personal Data and is retained by Teladoc indefinitely for the purposes set out in section 4, above.
Except as set out below, We will never share Your Personal Data for any purposes other than those strictly necessary for rendering the Service to You for Your benefit (e.g.: with healthcare professionals or hosting vendors).
You need to be aware that Teladoc may be called upon to disclose Your Personal Data, including Your Health Data, by a duly empowered branch of Government or Court in any country in which Our patients are citizen. Unless prohibited by law, We will inform You as soon as reasonably possible about this disclosure of Your Personal Data that will always take place in accordance with the Data Protection Laws.
No international transfers of your Personal Data are foreseen.
Where you travel overseas it may be necessary for us to transfer your Personal Data to healthcare professionals located in the country or the region where you are temporarily located for provision of the Services required. You are hereby informed, and you agree, that the local data protection regulation applicable to the processing of Your Personal Data in that country or region may not provide a level of protection similar to that afforded by the Data Protection Laws in your home country.
However, we emphasize that the healthcare professionals we engage to provide our services are required to adhere to our Privacy Policy and Principles as well as all applicable local Data Protection Laws and Regulations.
We safeguard Your Personal Data with tested and certified technical and organisational security controls which are consistent with Data Protection Laws. We educate Our staff and external partners (e.g.: healthcare professionals and hosting company) on Our Privacy Policy as well as all Data Protection Laws.
We strive to keep Your Personal Data accurate and current; and We will update or disclose it to You whenever You request Us to do so. You are responsible for communicating modifications, rectifications or additions to Your Personal Data in order that Teladoc may change it accordingly and keep it current.
You are able to access Personal Data held about You and if it is inaccurate, You can request that it be corrected or deleted.
When the GDPR is applicable, You have rights including:
Note that data subject rights would not be applicable to de-identified data as defined section 4 above.
You may exercise Your data subject rights as may be applicable at any time by emailing Us at lopd@teladochealth.com, indicating Your name, what Service was used and Your telephone number, and identifying yourself.
If You have any questions regarding this Notice, or would like a copy of it, or otherwise You want to file a complaint or You believe Your privacy rights have been violated or for any other purpose relating to Our processing of Your Personal Data, You may contact the Data Protection Officer at dataprotectionofficer@teladochealth.com. There will be no retaliation for filing any complaint or exercising any subject rights.
You also have the right to lodge a complaint with Your local data protection authority.
