Privacy policy

WEBSITE PRIVACY POLICY

www.doctorflexo.com

1. PRIVACY AND DATA PROTECTION POLICY
   In compliance with current legislation, DOCTORFLEXO (hereinafter, also referred to as the Website) commits to adopting the necessary technical and organizational measures, according to the level of security appropriate to the risk of the data collected.

Laws Included in this Privacy Policy

This privacy policy is adapted to the current Spanish and European regulations regarding the protection of personal data on the internet. Specifically, it respects the following regulations:

• Regulation (EU) 2016/679 of the European Parliament and the Council, of April 27, 2016, concerning the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
• Organic Law 15/1999, of December 13, on the Protection of Personal Data (LOPD).
• Royal Decree 1720/2007, of December 21, which approves the Regulation implementing Organic Law 15/1999, of December 13, on the Protection of Personal Data (RDLOPD).
• Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce (LSSI-CE).

Identity of the Data Processing Controller

The controller of the personal data collected on DOCTORFLEXO is: Sergio Cots Cambra with Tax Identification Number (NIF): 52716243J (hereinafter, Data Processing Controller). The contact details are as follows:

• Address:
• Contact Email: INFO@DOCTORFLEXO.COM

Registration of Personal Data

The personal data collected by DOCTORFLEXO, through the forms on its website, will be entered into an automated file under the responsibility of the Data Processing Controller and duly declared and registered in the General Registry of the Data Protection Agency, which can be consulted on the website of the Spanish Data Protection Agency (http://www.agpd.es), with the purpose of facilitating, expediting, and fulfilling the commitments established between DOCTORFLEXO and the User or the maintenance of the relationship established in the forms that the User fills out, or to respond to a request or query from the User.

 

Principles Applicable to the Processing of Personal Data

The processing of the User’s personal data will adhere to the following principles outlined in Article 5 of the GDPR:

• Principle of Lawfulness, Loyalty, and Transparency: The User’s consent will be required at all times after fully transparent information regarding the purposes for which the personal data is collected.
• Principle of Purpose Limitation: Personal data will be collected for specified, explicit, and legitimate purposes.
• Principle of Data Minimization: Only the data strictly necessary in relation to the purposes for which they are processed will be collected.
• Principle of Accuracy: Personal data must be accurate and up-to-date.
• Principle of Storage Limitation: Personal data will only be kept in a manner that allows the identification of the User for the time necessary for its processing.
• Principle of Integrity and Confidentiality: Personal data will be processed in a manner that ensures its security and confidentiality.
• Principle of Proactive Responsibility: The Data Processing Controller will be responsible for ensuring that the above principles are met.

Categories of Personal Data

The categories of data processed in DOCTORFLEXO are solely identification data. Under no circumstances will special categories of personal data be processed in the sense of Article 9 of the GDPR.

Legal Basis for the Processing of Personal Data

The legal basis for the processing of personal data is consent. DOCTORFLEXO commits to obtaining the User’s express and verifiable consent for the processing of their personal data for one or more specific purposes.

The User has the right to withdraw their consent at any time. It will be as easy to withdraw consent as to give it. As a general rule, the withdrawal of consent will not condition the use of the Website.

On occasions where the User should or may provide their data through forms to make inquiries, request information, or for reasons related to the content of the Website, they will be informed if the completion of any of them is mandatory because they are essential for the correct development of the operation performed.

Data Retention Periods

Personal data will only be retained for the minimum time necessary for its processing or until the User requests its deletion.

Recipients of Personal Data

The User’s personal data will be shared with the following recipients or categories of recipients:

• Courier companies for the shipping of orders made in the online store.

If the Data Processing Controller intends to transfer personal data to a third country or international organization, at the time the personal data is obtained, the User will be informed about the third country or international organization to which it is intended to transfer the data, as well as the existence or absence of a Commission adequacy decision.

Personal Data of Minors

In accordance with Articles 8 of the GDPR and 13 of the RDLOPD, only those over 14 years old may give their consent for the lawful processing of their personal data by DOCTORFLEXO. If it is a minor under 14 years old, the consent of parents or guardians will be necessary for the processing, and this will only be considered lawful to the extent that they have authorized it.

Confidentiality and Security of Personal Data

DOCTORFLEXO commits to adopting the necessary technical and organizational measures, according to the appropriate level of security risk for the data collected, in order to ensure the security of personal data and prevent the destruction, loss or accidental or unlawful alteration of personal data transmitted, stored or otherwise processed, or unauthorized communication or access to such data.

However, since DOCTORFLEXO cannot guarantee the impregnability of the internet nor the complete absence of hackers or others who fraudulently access personal data, the Data Processing Controller commits to notifying the User without undue delay when a breach of personal data security occurs that is likely to result in a high risk to the rights and freedoms of natural persons. Following Article 4 of the GDPR, a breach of personal data security is understood to be any breach of security that leads to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed.

Personal data will be treated as confidential by the Data Processing Controller, who commits to informing and ensuring, through a legal or contractual obligation, that such confidentiality is respected by its employees, associates, and any person to whom it makes the information accessible.

Rights Arising from the Processing of Personal Data

The User has the following rights under the GDPR, which can be exercised with DOCTORFLEXO as the Data Processing Controller:

Right of Access

The User has the right to obtain confirmation as to whether or not DOCTORFLEXO is processing their personal data. If so, the User can obtain specific information about their personal data and how DOCTORFLEXO has processed or is processing it, as well as additional information about the source of the data and the recipients of any communications.

Right to Rectification

The User has the right to correct inaccurate or incomplete personal data, considering the purpose of the processing.

Right to Erasure (“Right to Be Forgotten”)

The User has the right to request the deletion of their personal data when it is no longer necessary for the purpose for which it was collected, among other conditions.

Right to Restriction of Processing

The User has the right to limit the processing of their personal data under specific conditions, such as disputing the accuracy of the data.

Right to Data Portability

If the processing is carried out by automated means, the User has the right to receive their personal data in a structured, commonly-used, machine-readable format and to transmit it to another data controller.

Right to Object

The User has the right to object to the processing of their personal data.

Right Not to be Subject to Automated Decision-making

The User has the right not to be subject to a decision based solely on automated processing, including profiling, unless explicitly permitted by law.

To exercise these rights, the User can send a written communication to the Data Processing Controller with the reference “GDPR-www.doctorflexo.com,” specifying:

• User’s full name and a copy of their identification.
• Specific reasons for the request or the information to be accessed.
• Address for notifications.
• Date and signature of the applicant.
• Any document supporting the request.

This request and any attached document can be sent to the following address and/or email: Email: info@doctorflexo.com

Complaints to the Regulatory Authority

If the User believes there is a problem or infringement of the current regulations on how their personal data is being processed, they have the right to effective judicial protection and to lodge a complaint with a supervisory authority, particularly in the state where they have their habitual residence, place of work, or place of the alleged infringement. In Spain, the supervisory authority is the Spanish Data Protection Agency (http://www.agpd.es).

COOKIE POLICY

Access to this Website may involve the use of cookies. Cookies are small amounts of information stored in the browser used by each User—on the different devices that they may use to browse—so that the server remembers certain information that only the server that deployed it will read later. Cookies make browsing easier, more user-friendly, and do not harm the browsing device.

The information collected through cookies may include the date and time of visits to the Website, the pages viewed, the time spent on the Website, and the sites visited just before and after it. However, no cookie allows the website to contact the User’s phone number or any other means of personal contact. No cookie can extract information from the User’s hard drive or steal personal information. The only way for the User’s private information to become part of the Cookie file is for the user to personally give that information to the server.

Cookies that allow a person to be identified are considered personal data. Therefore, the previously described Privacy Policy will apply to them. In this sense, the User’s consent will be necessary for the use of cookies. This consent will be communicated, based on an authentic choice, offered through an affirmative and positive decision, before the initial treatment, removable, and documented.

Own Cookies

These are cookies that are sent to the User’s computer or device and managed exclusively by DOCTORFLEXO for the better functioning of the Website. The information collected is used to improve the quality of the Website and its Content and your experience as a User. These cookies allow us to recognize the User as a recurring visitor to the Website and adapt the content to offer content that suits their preferences.

Third-Party Cookies

These are cookies used and managed by external entities that provide DOCTORFLEXO with services requested by the same to improve the Website and the user’s browsing experience. The main objectives for which third-party cookies are used are to obtain access statistics and analyze browsing information, i.e., how the User interacts with the Website.

The information obtained refers, for example, to the number of pages visited, the language, the location to which the User’s IP address is accessed, the number of Users accessing, the frequency and recurrence of visits, the time of the visit, the browser used, the operator or the type of device from which the visit is made. This information is used to improve the Website, and to detect new needs to offer Users Content and/or service of optimum quality. In any case, the information is collected anonymously and website trend reports are prepared without identifying individual users.
More information about cookies, privacy information, or to consult the description of the types of cookies used, their main characteristics, expiration period, etc., can be found at the following link(s):

Google Analytics —> https://developers.google.com/analytics/?hl=es-419
The entity(ies) responsible for supplying cookies may transfer this information to third parties, as long as required by law or if a third party processes this information for these entities.

Social Network Cookies

DOCTORFLEXO incorporates social network plugins, which allow access to them from the Website. Therefore, social network cookies can be stored in the User’s browser. The owners of these social networks have their own data protection and cookie policies, and they are responsible for their own files and privacy practices. The User should refer to them to learn about these cookies and, where appropriate, the processing of their personal data.

Disabling, Rejecting, and Deleting Cookies

The User can disable, reject, and delete cookies—either fully or partially—installed on their device through the settings of their browser (among which are, for example, Chrome, Firefox, Safari, Explorer). In this sense, the procedures for rejecting and deleting cookies may differ from one Internet browser to another. Consequently, the User should go to the instructions provided by the Internet browser they are using. In the event that the use of cookies is rejected—either fully or partially—the User may continue to use the Website, although the use of some of its features may be limited.

III ACCEPTANCE AND CHANGES IN THIS PRIVACY POLICY

The User must have read and agree with the conditions on the protection of personal data contained in this Privacy and Cookie Policy, as well as to accept the processing of their personal data so that the Data Controller can proceed in the manner, during the periods, and for the purposes indicated. The use of the Website will imply acceptance of its Privacy and Cookie Policy.

DOCTORFLEXO reserves the right to modify its Privacy and Cookie Policy, according to its own criteria, or motivated by a legislative, jurisprudential, or doctrinal change by the Spanish Data Protection Agency. Changes or updates to this Privacy and Cookie Policy will not be explicitly notified to the User. It is recommended that the User consult this page periodically to be aware of the latest changes or updates.

This Privacy and Cookie Policy was updated on September 20, 2018, to comply with Regulation (EU) 2016/679 of the European Parliament and Council, dated April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the free circulation of this data (GDPR).”