DATA PROTECTION
In accordance with current and applicable legislation on personal data protection, you are hereby informed that your data will be incorporated into the processing system owned by GT-MEDICAL SL with Tax Identification Number (NIF) B83143602 and registered address at CAMINO DE HORMIGUERAS, 122 BIS. 3ª PLANTA. NAVES P1 Y P2. 28031 MADRID, whose respective purpose, retention period and legal basis are listed below. For all processing operations that so require, you are also informed of the possible creation of profiles and automated decisions, as well as the possible assignments and international transfers that GT-MEDICAL SL intends to carry out:
Processing operation
- Website management
Purpose: Processing and management of the data necessary for the functionality of the website.
Retention period: For the duration of the consent given.
Legal basis: The consent given by the data subject.
Type of Data: Data merely for identification purposes.
Transfers: Not anticipated.
International transfers: Not anticipated.
Profiling: Not anticipated. - Web form
Purpose: To reply to your queries and/or requests.
Retention period: For the duration of the consent given. Legal basis: The consent given by the data subject.
Type of Data: Data merely for identification purposes.
Transfers: Not anticipated.
International transfers: Not anticipated.
Profiling: Not anticipated. - Regulatory compliance management
Purpose: Management and processing of the obligations and duties arising from compliance with the regulations to which the entity is subject.
Retention period: Retention of copies of documents until the period for claiming possible liability has expired.
Legal basis: Compliance with a law.
Type of Data: Data merely for identification purposes.
Transfers: Your data will be disclosed, if necessary, to entities and/or government bodies with competence in the matter in order to comply with the obligations established in the applicable regulations. Furthermore, you are hereby informed that the legal basis for the transfer is to comply with the obligations established in the applicable regulations.
International transfers: Not anticipated.
Profiling: Not anticipated. - Commercial Actions
Purpose: Collection, registration and processing of data for advertising and commercial prospecting purposes of our products and/or services.
Retention period: For the duration of the consent given.
Legal basis: The consent given by the data subject.
Type of Data: Data merely for identification purposes.
Transfers: Not anticipated.
International transfers: Not anticipated.
Profiling: Not anticipated. - User registration
Purpose: Collection, registration and processing of data for the purpose of user registration.
Retention period: For the duration of the consent given.
Legal basis: The consent given by the data subject.
Type of Data: Data merely for identification purposes.
Transfers: Not anticipated.
International transfers: Not anticipated.
Profiling: Not anticipated. - Purchase management
Purpose: Collection, registration and processing of data for purchase management purposes, as well as for the correct development, fulfilment and execution of the contract between both parties.
Retention period: For the time necessary to manage the purchase of the products or services acquired, including possible returns, complaints or claims associated with the purchase of the product or service in particular.
Legal basis: The execution of a contract.
Type of Data: Data merely for identification purposes.
Transfers: Your data may be disclosed, if necessary, to companies that sponsor competitions, prizes and/or promotions.
International transfers: Not anticipated.
Profiling: Not anticipated. - Economic and administrative management
Purpose: Administrative management, invoicing, accounting and legal obligations.
Retention period: 5 years in compliance with tax law and 10 years in the case of tax documentation in compliance with Organic Law 7/2012.
Legal basis: The consent given by the data subject.
Type of Data: Data merely for identification purposes.
Transfers: Your data will be disclosed, if necessary, to the Tax Agency, banks, savings banks and entities and/or government bodies with competence in the matter in order to comply with the tax and fiscal obligations established in the applicable regulations. Furthermore, you are hereby informed that the legal basis for the transfer is to comply with the obligations established in the applicable regulations.
International transfers: Not anticipated.
Profiling: Not anticipated.
RIGHTS OF DATA SUBJECTS
GT-MEDICAL SL informs users that they may exercise their rights of access, rectification, limitation, deletion, portability and objection to the processing of their personal data before the Data Controller, as well as withdraw the consent given.
- Right of access
This refers to the User’s right to obtain information about their specific personal data and the processing that has been or is being carried out, as well as the information available on the origin of said data and any disclosures made or planned in relation to said data. - Right of rectification
This refers to the User’s right to amend inaccurate or incomplete data. This right may only be exercised in relation to information that is under the control of GT-MEDICAL SL, for example, deleting comments posted on the page itself, images or web content containing the User’s personal data. - Right to the restriction of processing
This refers to the right to limit the purposes of the processing originally intended by the data controller. - Right of deletion
This refers to the right to delete the User’s personal data, with the exception of the provisions of the GDPR itself or other applicable regulations that determine their obligatory retention, in time and form. - Right of portability
This refers to the right to receive the personal data provided by the User in a structured, commonly used and machine-readable format and to transfer them to another data controller. - Right of objection
This refers to the User’s right not to have their personal data processed or to stop GT-MEDICAL SL from processing them.
In order to exercise any of the rights described above, you must comply with the following requirements:
- By sending a letter to the address CAMINO DE HORMIGUERAS, 122 BIS. 3ª PLANTA. NAVES P1 Y P2. 28031 MADRID (for the attention of GT-MEDICAL SL) or by email to clientes@gt-medical.com.
- The letter sent by the data subject requesting the exercise of their rights must comply with the following legal requirements:
- Name and surname of the data subject and a copy of their national identification document or any other identification document. In the exceptional cases in which representation is allowed, it will also be necessary to identify the representative by the same means, as well as to provide a document validating the representation. The photocopy of the national identification document may be substituted as long as proof of identity is provided by any other legally valid means.
- The grounds on which the request is made. (The right in relation to which you wish to access the information). If the request is not in reference to a specific file, we will provide you with all the information available on your personal data. If you request information on a specific file, we will only send you the information on that file. We cannot provide you with information relating to a third party. If you request the information by telephone, you will be instructed to do so in writing and you will be informed of how to do so and the address to which the request must be sent. You will never be given information over the phone.
- Address for notification purposes
- Date and signature of the applicant
- Documents supporting the request made
- The data subject must certify that the request has been sent and received, by any possible means
Finally, we hereby inform you that you have the right to file a complaint with the Spanish Data Protection Agency in the event that you become aware of or consider that a certain action may violate the applicable data protection regulations.
GT-MEDICAL SL undertakes to adopt the necessary technical and organisational measures, according to the level of risk associated with the processing carried out and indicated in the terms and conditions of use section, so as to ensure the integrity, confidentiality and availability thereof.