2. Privacy Policy
2.1 Data controller
- Controller: ALCARE Medical Consulting, S.L.
- NIF/CIF: B05579644
- Address: C/ Can Flequer 30, 08100 Mollet del Vallès, Barcelona, Spain
- Email for data protection matters: info@alcaremedical.com
This Privacy Policy is issued in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Data Protection and the Guarantee of Digital Rights (LOPDGDD).
2.2 What personal data we collect
We only collect the personal data that users provide voluntarily, together with limited technical data generated by browsing:
| Source | Data Collected |
|---|---|
| Contact form / email enquiries | Name, surname, email address, company or institution, job title, and any information included in the message |
| Browsing the website | IP address, device and browser type, pages visited and interaction data, collected through cookies and similar technologies (see the Cookie Policy) |
We do not knowingly collect data from persons under 14 years of age, and we do not request or process special categories of personal data (such as health data) through this website. Users are asked not to include patient data, personal health information or confidential third-party information in messages sent through this website.
2.3 Why we process your data and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to enquiries and requests for information about our services | Steps taken at the request of the data subject prior to entering into a contract, Art. 6(1)(b) |
| Managing the professional relationship with clients and collaborators | Performance of a contract, Art. 6(1)(b) |
| Sending commercial or informational communications about our services | Consent, Art. 6(1)(a), or legitimate interest where there is a prior professional relationship, Art. 6(1)(f) |
| Analysing website use in order to improve it | Consent, Art. 6(1)(a), obtained through the cookie banner |
| Complying with legal obligations (tax, accounting, data protection) | Legal obligation, Art. 6(1)(c) |
2.4 How long we keep your data
Personal data is kept for as long as the professional relationship with the user is maintained and, thereafter, blocked for the periods required to meet any legal, contractual, accounting or tax obligations that may arise.
Where there is no such relationship (for example, general enquiries that do not result in a contract), the data is retained only for as long as necessary to deal with the request and, at most, for a reasonable period afterwards, after which it is deleted or irreversibly anonymised.
Consent may be withdrawn at any time, in which case the data processed on that basis will be deleted without undue delay. Data forming part of a contractual, accounting or tax relationship will be retained for the periods required by the applicable legislation (in particular Law 58/2003 General Tax Law and the Commercial Code), and blocked for the sole purpose of making it available to public authorities during the applicable limitation periods.
2.5 Who has access to your data
Personal data is not sold, rented or transferred to third parties, except:
- To service providers acting as data processors (website hosting, email service, form and newsletter management, analytics tools), with whom a data processing agreement has been signed under Article 28 GDPR.
- Where disclosure is required by law, or requested by courts, public authorities or supervisory bodies.
International transfers: where a provider is located outside the European Economic Area, transfers are made under an adequacy decision of the European Commission or, failing that, under Standard Contractual Clauses together with any additional safeguards required.
2.6 Your rights
Users may exercise the following rights at any time, free of charge:
- Access — to know what personal data we hold about them.
- Rectification — to correct inaccurate or incomplete data.
- Erasure — to request deletion of their data where it is no longer necessary.
- Restriction of processing — to request that processing be limited in certain circumstances.
- Objection — to object to processing based on legitimate interest.
- Data portability — to receive their data in a structured, commonly used, machine-readable format.
- Withdrawal of consent — at any time, without affecting the lawfulness of processing carried out beforehand.
Requests should be sent to info@alcaremedical.com, indicating the right being exercised and attaching a copy of an identity document where necessary to verify identity. We will respond within one month of receipt, extendable by two further months where the request is complex.
Users who consider that their rights have not been properly addressed may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid — www.aepd.es).
2.7 Security
We apply technical and organisational measures appropriate to the risk in order to protect personal data against unauthorised access, loss, alteration or disclosure, including encrypted connections (HTTPS), access control and confidentiality commitments from everyone who handles the data.
2.8 Accuracy of the data provided
Users warrant that the data they provide is true, accurate and up to date, and that they are entitled to provide any third-party data included in their communications, having informed those third parties beforehand of the contents of this Privacy Policy.
2.9 Changes to this Privacy Policy
This Privacy Policy may be updated to reflect legislative changes or changes in how the website operates. The version published on this page is the one in force, and the date of the last update is shown at the top.
