Draft pending review by a lawyer. This text describes what the product does today; it is not legal advice and may change before final publication.
The short version for forms, online booking and the patient portal: who is responsible, what data is used, for what, and how to say no.
1 · 1. Choose your case
Soluciones para Doctores is a platform used by private clinics. There are two cases: “If you are a patient” (sections 2 to 4) and “If you are a professional or a visitor” (section 5).
Legal basis: LFPDPPP (DOF 20-mar-2025), art. 16
2 · 2. If you are a patient: who is responsible
The controller of your data is the clinic you are booking with. Its name and address are in your confirmation message and on its profile.
Tsunami Automation Global LLC operates the platform. It handles your data on behalf of the clinic and on its instructions, as processor. Its address is 5900 Balcones Drive STE 100, Austin, TX 78731, United States.
Legal basis: LFPDPPP (DOF 20-mar-2025), art. 15, fr. I; LFPDPPP (DOF 20-mar-2025), art. 16
3 · 3. If you are a patient: what data is used
- Contact and appointment data: name, phone, email, service and time, and the messages you exchange with the clinic.
- Health data: only if you give it in the intake form and tick the express-authorisation box. This is sensitive data.
- If you write health information in a chat or say it on a call, that information also goes through the platform. Write it only if you want the clinic to know it. In an emergency, call the emergency services.
You can read the text of the authorisation box in the form. Without that authorisation, the clinic should not ask you for health data through the form.
Legal basis: LFPDPPP (DOF 20-mar-2025), art. 15, fr. II; LFPDPPP (DOF 20-mar-2025), art. 8
4 · 4. If you are a patient: what for, and how to say no
Necessary purposes: manage your appointment, send you reminders and prepare your care.
Purpose that needs your consent: receiving promotions and commercial information from the clinic. We only do it if you tick the separate box. If you do not tick it, you get no promotions and your care does not change.
- To say no: do not tick the promotions box.
- To stop commercial messages later: reply BAJA to the WhatsApp message, or ask the clinic.
- To exercise your ARCO rights over your patient data: use your clinic's ARCO page (/arco/<your clinic code>), or write to privacy@tsunamiautomation.com. We answer within 20 business days.
Legal basis: LFPDPPP (DOF 20-mar-2025), art. 15, fr. III y IV; LFPDPPP (DOF 20-mar-2025), art. 16; Reglamento de la LFPDPPP (2011), art. 14
5 · 5. If you are a professional or a visitor
If you use the platform as clinic staff, visit the site, ask for a demo, write to us, or appear in the directory of professionals, the controller of your data is Tsunami Automation Global LLC, 5900 Balcones Drive STE 100, Austin, TX 78731, United States.
Data: name, email, phone, clinic name, messages you write to us, account access data and, only if you accept analytics cookies, browsing data. This is not sensitive data.
Necessary purposes: create your account, give the service and support, invoice, protect security, answer your requests and show the directory. Purposes that need your consent: sending you commercial news and measuring visits with Google Analytics. To refuse, choose “Solo necesarias” (necessary only) in the cookie banner or write to us.
Legal basis: LFPDPPP (DOF 20-mar-2025), art. 15, fr. I a IV; LFPDPPP (DOF 20-mar-2025), art. 16
6 · 6. Who the data is shared with
Data is shared with providers that make the service possible, such as hosting, email, WhatsApp, voice, the language models of the AI receptionist and payments. Some are in Germany and the United States. We do not sell data. If you do not accept this transfer, say so before you use the service and the clinic or we will tell you what options there are. The list is at /legal/subencargados.
Legal basis: LFPDPPP (DOF 20-mar-2025), art. 35; LFPDPPP (DOF 20-mar-2025), art. 36
7 · 7. Where the full notice is
This notice is a short version. The full notice is at /privacidad and covers ARCO, withdrawal of consent, cookies, retention periods and changes to the notice. For questions or ARCO rights: privacy@tsunamiautomation.com. Version 2026-10.
- Full notice: /privacidad
- Cookies: /cookies
- Retention and deletion: /legal/conservacion-eliminacion
This text cites the 2011 Regulation of the LFPDPPP and the 2013 Privacy Notice Guidelines. A lawyer must confirm how they apply after the 2025 law.
Legal basis: LFPDPPP (DOF 20-mar-2025), art. 16; Lineamientos del Aviso de Privacidad (2013), lineamiento decimoctavo