- PRIVACY AND DATA PROTECTION POLICY
In compliance with current legislation, DOCTORFLEXO (hereinafter, also referred to as the Website) commits to adopting the necessary technical and organizational measures, according to the level of security appropriate to the risk of the data collected.
- Regulation (EU) 2016/679 of the European Parliament and the Council, of April 27, 2016, concerning the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
- Organic Law 15/1999, of December 13, on the Protection of Personal Data (LOPD).
- Royal Decree 1720/2007, of December 21, which approves the Regulation implementing Organic Law 15/1999, of December 13, on the Protection of Personal Data (RDLOPD).
- Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce (LSSI-CE).
Identity of the Data Processing Controller
The controller of the personal data collected on DOCTORFLEXO is: Sergio Cots Cambra with Tax Identification Number (NIF): 52716243J (hereinafter, Data Processing Controller). The contact details are as follows:
- Contact Email: INFO@DOCTORFLEXO.COM
Registration of Personal Data
The personal data collected by DOCTORFLEXO, through the forms on its website, will be entered into an automated file under the responsibility of the Data Processing Controller and duly declared and registered in the General Registry of the Data Protection Agency, which can be consulted on the website of the Spanish Data Protection Agency (http://www.agpd.es), with the purpose of facilitating, expediting, and fulfilling the commitments established between DOCTORFLEXO and the User or the maintenance of the relationship established in the forms that the User fills out, or to respond to a request or query from the User.
Principles Applicable to the Processing of Personal Data
The processing of the User’s personal data will adhere to the following principles outlined in Article 5 of the GDPR:
- Principle of Lawfulness, Loyalty, and Transparency: The User’s consent will be required at all times after fully transparent information regarding the purposes for which the personal data is collected.
- Principle of Purpose Limitation: Personal data will be collected for specified, explicit, and legitimate purposes.
- Principle of Data Minimization: Only the data strictly necessary in relation to the purposes for which they are processed will be collected.
- Principle of Accuracy: Personal data must be accurate and up-to-date.
- Principle of Storage Limitation: Personal data will only be kept in a manner that allows the identification of the User for the time necessary for its processing.
- Principle of Integrity and Confidentiality: Personal data will be processed in a manner that ensures its security and confidentiality.
- Principle of Proactive Responsibility: The Data Processing Controller will be responsible for ensuring that the above principles are met.
Categories of Personal Data
The categories of data processed in DOCTORFLEXO are solely identification data. Under no circumstances will special categories of personal data be processed in the sense of Article 9 of the GDPR.
Legal Basis for the Processing of Personal Data
The legal basis for the processing of personal data is consent. DOCTORFLEXO commits to obtaining the User’s express and verifiable consent for the processing of their personal data for one or more specific purposes.
The User has the right to withdraw their consent at any time. It will be as easy to withdraw consent as to give it. As a general rule, the withdrawal of consent will not condition the use of the Website.
On occasions where the User should or may provide their data through forms to make inquiries, request information, or for reasons related to the content of the Website, they will be informed if the completion of any of them is mandatory because they are essential for the correct development of the operation performed.
Data Retention Periods
Personal data will only be retained for the minimum time necessary for its processing or until the User requests its deletion.
Recipients of Personal Data
The User’s personal data will be shared with the following recipients or categories of recipients:
- Courier companies for the shipping of orders made in the online store.
If the Data Processing Controller intends to transfer personal data to a third country or international organization, at the time the personal data is obtained, the User will be informed about the third country or international organization to which it is intended to transfer the data, as well as the existence or absence of a Commission adequacy decision.
Personal Data of Minors
In accordance with Articles 8 of the GDPR and 13 of the RDLOPD, only those over 14 years old may give their consent for the lawful processing of their personal data by DOCTORFLEXO. If it is a minor under 14 years old, the consent of parents or guardians will be necessary for the processing, and this will only be considered lawful to the extent that they have authorized it.
Confidentiality and Security of Personal Data
DOCTORFLEXO commits to adopting the necessary technical and organizational measures, according to the appropriate level of security risk for the data collected, in order to ensure the security of personal data and prevent the destruction, loss or accidental or unlawful alteration of personal data transmitted, stored or otherwise processed, or unauthorized communication or access to such data.
However, since DOCTORFLEXO cannot guarantee the impregnability of the internet nor the complete absence of hackers or others who fraudulently access personal data, the Data Processing Controller commits to notifying the User without undue delay when a breach of personal data security occurs that is likely to result in a high risk to the rights and freedoms of natural persons. Following Article 4 of the GDPR, a breach of personal data security is understood to be any breach of security that leads to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed.
Personal data will be treated as confidential by the Data Processing Controller, who commits to informing and ensuring, through a legal or contractual obligation, that such confidentiality is respected by its employees, associates, and any person to whom it makes the information accessible.
Rights Arising from the Processing of Personal Data
The User has the following rights under the GDPR, which can be exercised with DOCTORFLEXO as the Data Processing Controller:
Right of Access
The User has the right to obtain confirmation as to whether or not DOCTORFLEXO is processing their personal data. If so, the User can obtain specific information about their personal data and how DOCTORFLEXO has processed or is processing it, as well as additional information about the source of the data and the recipients of any communications.
Right to Rectification
The User has the right to correct inaccurate or incomplete personal data, considering the purpose of the processing.
Right to Erasure (“Right to Be Forgotten”)
The User has the right to request the deletion of their personal data when it is no longer necessary for the purpose for which it was collected, among other conditions.
Right to Restriction of Processing
The User has the right to limit the processing of their personal data under specific conditions, such as disputing the accuracy of the data.
Right to Data Portability
If the processing is carried out by automated means, the User has the right to receive their personal data in a structured, commonly-used, machine-readable format and to transmit it to another data controller.
Right to Object
The User has the right to object to the processing of their personal data.
Right Not to be Subject to Automated Decision-making
The User has the right not to be subject to a decision based solely on automated processing, including profiling, unless explicitly permitted by law.
To exercise these rights, the User can send a written communication to the Data Processing Controller with the reference “GDPR-www.doctorflexo.com,” specifying:
- User’s full name and a copy of their identification.
- Specific reasons for the request or the information to be accessed.
- Address for notifications.
- Date and signature of the applicant.
- Any document supporting the request.
This request and any attached document can be sent to the following address and/or email: Email: email@example.com
Complaints to the Regulatory Authority
If the User believes there is a problem or infringement of the current regulations on how their personal data is being processed, they have the right to effective judicial protection and to lodge a complaint with a supervisory authority, particularly in the state where they have their habitual residence, place of work, or place of the alleged infringement. In Spain, the supervisory authority is the Spanish Data Protection Agency (http://www.agpd.es).
The information collected through cookies may include the date and time of visits to the Website, the pages viewed, the time spent on the Website, and the sites visited just before and after it. However, no cookie allows the website to contact the User’s phone number or any other means of personal contact. No cookie can extract information from the User’s hard drive or steal personal information. The only way for the User’s private information to become part of the Cookie file is for the user to personally give that information to the server.
These are cookies that are sent to the User’s computer or device and managed exclusively by DOCTORFLEXO for the better functioning of the Website. The information collected is used to improve the quality of the Website and its Content and your experience as a User. These cookies allow us to recognize the User as a recurring visitor to the Website and adapt the content to offer content that suits their preferences.
These are cookies used and managed by external entities that provide DOCTORFLEXO with services requested by the same to improve the Website and the user’s browsing experience. The main objectives for which third-party cookies are used are to obtain access statistics and analyze browsing information, i.e., how the User interacts with the Website.
The information obtained refers, for example, to the number of pages visited, the language, the location to which the User’s IP address is accessed, the number of Users accessing, the frequency and recurrence of visits, the time of the visit, the browser used, the operator or the type of device from which the visit is made. This information is used to improve the Website, and to detect new needs to offer Users Content and/or service of optimum quality. In any case, the information is collected anonymously and website trend reports are prepared without identifying individual users.
More information about cookies, privacy information, or to consult the description of the types of cookies used, their main characteristics, expiration period, etc., can be found at the following link(s):
Google Analytics —> https://developers.google.com/analytics/?hl=es-419
The entity(ies) responsible for supplying cookies may transfer this information to third parties, as long as required by law or if a third party processes this information for these entities.
Social Network Cookies
DOCTORFLEXO incorporates social network plugins, which allow access to them from the Website. Therefore, social network cookies can be stored in the User’s browser. The owners of these social networks have their own data protection and cookie policies, and they are responsible for their own files and privacy practices. The User should refer to them to learn about these cookies and, where appropriate, the processing of their personal data.
Disabling, Rejecting, and Deleting Cookies