1. USER INFORMATION
Who is responsible for processing your personal data?
Clínica Belmed, S.L. is the Data Controller responsible for processing the USER’S personal data and informs you that such data will be processed in accordance with Regulation (EU) 2016/679 of 27 April (GDPR) and Organic Law 3/2018 of 5 December on Data Protection and Guarantee of Digital Rights (LOPDGDD).
Why do we process your personal data?
We process your personal data in order to maintain a commercial relationship with you. The processing activities may include:
-Sending commercial and promotional communications by email, fax, SMS, MMS, social media or any other present or future electronic or physical means that enables commercial communications to be sent. These communications will be sent by the CONTROLLER and will relate to its products and services, or those of its collaborators or suppliers with whom it has entered into promotional agreements. In such cases, third parties will never have access to personal data.
-Conducting market research and statistical analysis.
-Processing orders, requests, enquiries or any type of request submitted by the USER through any of the contact methods made available on the CONTROLLER’S website.
-Sending online newsletters containing updates, offers and promotions relating to our activities.
What is the legal basis for processing your personal data?
The processing of your personal data is lawful under Article 6 of the GDPR on the following grounds:
User consent: for the sending of commercial communications and newsletters.
The legitimate interests of the CONTROLLER: for conducting market research, statistical analysis and managing orders, requests and enquiries submitted by the USER.
How long will we retain your personal data?
Your personal data will be retained only for as long as necessary to fulfil the purposes of the processing or as required by applicable legal obligations. Once the data is no longer required, it will be securely deleted or anonymised using appropriate security measures.
Who do we share your personal data with?
Personal data will not be disclosed to third parties unless necessary for the development and fulfilment of the processing purposes. In such cases, data may be shared with service providers related to communications services, with whom the CONTROLLER has entered into the confidentiality and data processing agreements required under applicable data protection legislation.
What are your rights?
You have the right to:
-Withdraw your consent at any time.
-Access your personal data.
-Request the rectification of inaccurate data.
-Request data portability.
-Request the erasure of your personal data.
-Request the restriction of processing.
Object to the processing of your personal data.
Lodge a complaint with the relevant supervisory authority if you believe that the processing of your personal data does not comply with applicable legislation.
For Spain, complaints may be submitted to the Spanish Data Protection Agency (AEPD):
https://www.aepd.es
Contact details for exercising your rights:
You may exercise your rights using any of the contact methods displayed on this website.
2. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER
By ticking the corresponding boxes and entering data in the fields marked with an asterisk (*) on contact forms or download forms, USERS expressly, freely and unequivocally accept that their data is necessary for the provider to process their request. The provision of data in any remaining fields is voluntary.
The USER guarantees that the personal data provided to the CONTROLLER is accurate and undertakes to notify any changes thereto.
The CONTROLLER informs users that all data requested through the website is mandatory, as it is necessary in order to provide an optimal service to the USER. If all required data is not provided, the CONTROLLER cannot guarantee that the information and services supplied will fully meet the USER’S needs.
3. SECURITY MEASURES
In accordance with applicable personal data protection legislation, the CONTROLLER complies with all requirements of the GDPR and the LOPDGDD regarding the processing of personal data under its responsibility and, in particular, with the principles set out in Article 5 of the GDPR, according to which personal data must be processed lawfully, fairly and transparently, and must be adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed.
The CONTROLLER guarantees that appropriate technical and organisational measures have been implemented to ensure a level of security appropriate to the risk, in accordance with the GDPR and the LOPDGDD, in order to safeguard the rights and freedoms of USERS. Furthermore, the CONTROLLER has provided users with the necessary information to enable them to exercise their rights.
For further information regarding privacy safeguards, you may contact the CONTROLLER using any of the contact methods displayed on this website.