Privacy Policy

In compliance with current legislation, MEDICAL SUPPORT SERVICES S.L., (hereinafter also referred to as the Website) commits to adopting the necessary technical and organizational measures, appropriate to the level of security required for the risk associated with the collected data.

Legislation incorporated into this Privacy Policy

This Privacy Policy is adapted to current Spanish and European regulations on the protection of personal data on the internet. Specifically, it complies with the following regulations:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).

• Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).

• Royal Decree 1720/2007, of 21 December, approving the Regulation implementing Organic Law 15/1999, of 13 December, on the Protection of Personal Data (RDLOPD).

• Law 34/2002, of 11 July, on Services of the Information Society and Electronic Commerce (LSSI-CE).

Identity of the Data Controller

The data controller of the personal data collected on MEDICAL SUPPORT SERVICES S.L. is: MEDICAL SUPPORT SERVICES S.L., with NIF/CIF: B19784453 and registered at: [data pending], whose representative is: [data pending] (hereinafter, the Data Controller). Contact details:

• Address: Plaza Aviador Ruiz de Alda, 41004 – Seville

• Phone: [data pending]

• Email: protecciondedatos@disderm.com

Registration of Personal Data

In compliance with the GDPR and LOPD-GDD, we inform you that the personal data collected by MEDICAL SUPPORT SERVICES S.L. through the forms on its pages will be included and processed in our file for the purpose of facilitating, expediting, and fulfilling the commitments established between MEDICAL SUPPORT SERVICES S.L. and the User, or to maintain the relationship established in the forms filled out by the latter, or to respond to a request or inquiry.

Furthermore, in accordance with the GDPR and LOPD-GDD, unless the exception provided in Article 30.5 of the GDPR applies, a record of processing activities is maintained specifying, according to their purposes, the processing activities carried out and other conditions established in the GDPR.

Principles applicable to the processing of personal data

The processing of the User’s personal data will adhere to the following principles as set forth in Article 5 of the GDPR and Articles 4 and following of Organic Law 3/2018:

• Lawfulness, fairness, and transparency: User consent will be required with full transparency regarding the purposes of data collection.

• Purpose limitation: Data will be collected for specific, explicit, and legitimate purposes.

• Data minimization: Only strictly necessary data will be collected for the intended purpose.

• Accuracy: Data must be accurate and up to date.

• Storage limitation: Data will only be retained as long as necessary for its processing purposes.

• Integrity and confidentiality: Data will be processed securely and confidentially.

• Accountability: The Data Controller is responsible for ensuring compliance with the above principles.

Categories of personal data

The categories of data processed by MEDICAL SUPPORT SERVICES S.L. are solely identifying data. No special categories of personal data are processed as defined in Article 9 of the GDPR.

Legal basis for processing personal data

The legal basis for processing is consent. MEDICAL SUPPORT SERVICES S.L. commits to obtaining the User’s explicit and verifiable consent for one or more specific purposes.

Users have the right to withdraw consent at any time. Withdrawal will be as easy as granting it and will not affect the use of the Website.

When data is requested through forms for queries, information, or website content-related purposes, Users will be informed if any fields are mandatory due to their necessity for the process.

Purpose of data processing

Personal data is collected and managed by MEDICAL SUPPORT SERVICES S.L. to facilitate, expedite, and fulfill commitments with the User or to maintain relationships through completed forms or respond to inquiries.

Data may also be used for personalized commercial, operational, and statistical purposes, related to the corporate purpose of MEDICAL SUPPORT SERVICES S.L., and for data extraction, storage, and marketing studies to tailor content and improve the Website’s quality, functionality, and navigation.

At the time of data collection, the User will be informed of the specific purpose(s) of the processing.

Data retention periods

Personal data will only be retained for the minimum time necessary for processing purposes or until the User requests deletion. At the time of collection, Users will be informed of the retention period or the criteria used to determine it.

Recipients of personal data

The User’s data may be shared with the following recipients or categories of recipients:

If the Data Controller intends to transfer data to a third country or international organization, Users will be informed at the time of collection about the country/organization and the existence or absence of an adequacy decision by the Commission.

Personal data of minors

In compliance with Articles 8 of the GDPR and 7 of Organic Law 3/2018, only individuals over 14 years old may consent to the lawful processing of their data. If under 14, parental or guardian consent is required, and processing will only be lawful if authorized by them.

Confidentiality and security of personal data

MEDICAL SUPPORT SERVICES S.L. undertakes to implement necessary technical and organizational measures, appropriate to the security level required for the risk involved, to ensure the security and confidentiality of data and prevent accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

Despite this, MEDICAL SUPPORT SERVICES S.L. cannot guarantee absolute internet invulnerability or the absence of hackers. If a security breach occurs that likely compromises personal rights and freedoms, the Data Controller will notify the User without undue delay.

All personal data will be treated as confidential, and this obligation will be ensured by the Data Controller through legal or contractual means with employees, collaborators, and others with data access.

User rights regarding data processing

Users may exercise the following rights under the GDPR and Organic Law 3/2018:

• Right of access: To confirm whether data is being processed and to obtain information about it.

• Right to rectification: To correct inaccurate or incomplete data.

• Right to erasure (“right to be forgotten”): To request deletion of data under certain conditions.

• Right to restriction of processing: To limit processing under specific scenarios.

• Right to data portability: To receive data in a structured format and transfer it to another controller.

• Right to object: To object to the processing of their data.

• Right not to be subject to automated decisions, including profiling: To avoid decisions based solely on automated processing.

Users may exercise these rights by written request to the Data Controller referencing “GDPR-https://www.telexahealth.com/”, specifying:

• Full name and ID copy (or equivalent proof).

• Reasoned request and information desired.

• Notification address.

• Date and signature.

• Supporting documents, if applicable.

Requests may be sent to:

• Postal address: Plaza Aviador Ruiz de Alda, 41004 – Seville

• Email: protecciondedatos@disderm.com

Links to third-party websites

This Website may include links to external sites not operated by MEDICAL SUPPORT SERVICES S.L.. Each of these third-party sites has its own privacy policies, and they are responsible for their own data practices.

Complaints to the supervisory authority

If Users believe that their data is being misused or their rights are being violated, they may file a complaint with a supervisory authority. In Spain, the competent authority is the Spanish Data Protection Agency (https://www.aepd.es/).