Certified Medical Magazine by WMA, ACSA, HON
Privacy and Data Protection Policy
3
0

Privacy and Data Protection Policy

Last Update: 08/04/2023

Object

The purpose of this Privacy Policy is to inform people (hereinafter, users or interested parties) who visit our website (hereinafter, web page, website or the web), how we collect, process and protect the personal data you decide to provide us by any means (forms, emails, telephone, contracts, etc.) and after reading it, decide freely if you want us to treat them. Additionally, it will serve to expand the information that we have previously provided to the interested parties, in the informative clauses provided in the processes of collecting their personal data.

Furthermore, this policy aims to comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter RGPD) and with Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (hereinafter LOPDGDD).

Who is responsible for the processing of your personal data?

  • Identity-Entity: EUREKA FERTILITY S.L.
  • CIF: B16978264
  • Postal address: Av. de las Jacarandas, 2, 46100 Burjassot, Valencia(Spain)
  • Phone: +34 963 498 949
  • E-mail: info@eurekafertility.com
  • Company object: Media specialized in reproductive medicine
  • Web Site: https://eurekafertility.com/en/
  • Registration data: Registered in the Mercantile Registry of Valencia, T 11064, L 8342, F 7, S 8, H V 200845

How can you contact the Data Protection Officer?

Our company has designated a Data Protection Delegate before the General Registry of the Spanish Data Protection Agency, to whom the interested parties may address their complaints or doubts about how our company is treating their personal data. You may contact us in writing, indicating the name of our entity or trade name, followed by your complaint or inquiry to:

What personal data will we process and how do we collect it?

For the development of our business activity, it is essential to process personal data whose collection can be done by digital means (e.g. email, web forms or questionnaires), by filling out paper documents (e.g. clauses, contracts or forms) or through conversations and in any of these cases the data will be treated in a fair, lawful and transparent manner. The categories of data that our entity will process about the interested parties are:

  • Identification data: name and surname.
  • Contact information: telephone, email, postal address.
  • Identification keys: identifiers for remote access to our website, as a registered person (user or Nick and password).
  • Navigation data: analysis of time spent on our website, pages visited, demographic data (e.g. age, gender).
  • Bank details: bank accounts in case of donations.
  • Accounting data: control of income and expenses, invoicing data.
  • Special category data: data related to health, own and partner's sex.

Given the scope of our media, if you request information about specific processing, we will ask you for special category data (e.g. data related to your health, your gender and your partner's gender), which are essential to properly address your request for information and in such cases we will inform you accordingly and you will decide whether you wish to give us your express consent to process this type of data.

In this regard, we inform you that the data requested will be adequate, relevant, limited to those strictly essential and necessary, processed only by personnel and/or collaborators authorized by our entity, who will have signed a confidentiality commitment and undertake to comply with the necessary security standards to ensure the confidentiality, integrity and availability of the data processed and other legal requirements established in the RGPD. Therefore, they will be treated within the law.

The data that we will treat will always be provided by the interested party and if these are incomplete or incorrect, it will not be possible to respond to your request for information or maintain the relationship with them.

The categories of data that we can treat about a person, will depend on the relationship you have with our organization, as shown below:

Web users

When visiting our website and only if expressly authorized by the user, analytical data (e.g. time of visit or pages viewed) including demographic data (e.g. gender, age, country or language) may be collected. For more information visit our Cookies Policy.

If the user has registered to participate in our forums, we will process their identification keys for remote access to our website (username or Nickname and password).

Requesting information

Whether the information is requested in writing (e.g. email or web forms) or by telephone, we will request and process your identification, contact and special category data.

Donors

Since the information offered in our web pages is free of charge, we have a section to make donations for those interested and in these cases we will process identification and bank data.

Social network users

We are present in different social networks and may process identification, contact, commercial and other data that the user enables to be displayed or shared with other users of the social network, including curricular data (eg. LinkedIn). For more information, please see our Social Media Policy.

Claimants

We will process identification data, contact data and personal information about yourself or third parties that you want to let us know related to the claim that you send us.

More information for those interested

The information legally established in the corresponding informative clauses included in the different means of data collection will be made available to the interested parties, so that you can freely and expressly decide if you want the personal data requested to be processed by our company. All categories and types of personal data processed will be duly identified in the corresponding processing activities owned by our company.

What will your data be used for?

In general, the purpose of the processing of personal data carried out by our entity is the fulfillment and maintenance of the relationship with the people who contact us proactively through our web forms, by telephone, email or post, as would be the case of information seekers, users of our website/blog or social networks and interested parties in general.

Depending on this relationship, the treatment of your data obeys to different purposes and that with enunciative and not limitative character, we detail below:

Web users

Your personal data will be processed to identify you, attend your request for information including the sending of commercial communications by different means, answer your queries and exercise your data protection rights.

If you have registered on our website, it will allow you to participate in the open forums and interact with other people who have also decided to register.

In addition, data may be processed for different purposes (e.g. analysis of visits) by accepting the installation of cookies when visiting our website. For more information visit our Cookies Policy.

Donors

Your data will be processed for accounting and billing management, the attention of claims and exercise of rights, as well as for other purposes to which we are obliged to comply with this relationship, the laws to which we are subject and to comply with our legitimate interests.

Social network users

We will treat your personal data to maintain the relationship as users of the same social network, to identify you, to contact you, to share news and other personal data that you allow to share with the rest of the components of the social network. For more information, please see our Social Media Policy.

Claimants

Personal data will be processed to identify you, handle your complaint and contact you about the status of your complaint, as well as to fulfill our legal obligations and legitimate interests.

More information for those interested

The information legally established in the corresponding informative clauses included in the different means of data collection (e.g. forms, locutions, contracts, etc.) and in others that we will make available to you (e.g. badges, invoices, legal notices, etc.) will be made available to the interested parties, so that you can freely and expressly decide if you want the personal data requested to be processed by our entity. In the event that you do not provide the information we request or provide incomplete or erroneous data, it will not be possible to fulfill your request for information, purchase or sale of goods or the contracting of our services. The data will not be processed further or for purposes other than those accepted by the data subjects. The purposes that motivate the processing of personal data will be duly identified in the corresponding processing activities owned by our company.

Why do we process your data (legitimacy)?

The processing of your personal data by our company is carried out with one or more of the following legitimate bases:

  1. When you provide us with your express, free, informed and unequivocal consent, since we inform you at the time of collecting your data and more extensively with this privacy policy, that after reading this and if you agree, you can voluntarily authorize us to process your data for one or more purposes, by checking the boxes provided for this purpose in our web forms, by verbal consent (voice recording will be required) or signing the informative clauses that we provide at all times when requesting your personal data.
  2. For the performance of a contract to which you are a party or for which you have requested us to take pre-contractual measures.
  3. When the processing is necessary for compliance with a legal obligation applicable to our entity.
  4. When the processing is necessary for the fulfilment of legitimate interests pursued by our entity or by a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject. In this regard, our entity has carried out an analysis weighing our legitimate interests with the rights and freedoms of the data subject, always respecting their fundamental rights.

In the event that the user is under 14 years of age, it will be necessary to have the consent of parents, guardians or legal representative, to treat their data. The user is solely responsible for the accuracy of the data he/she sends us.

Data Retention

The personal data provided will be kept for as long as we maintain the relationship with you and for the time necessary to fulfill the purpose for which your data has been collected. Once this relationship has ended, we will keep them blocked in those cases where it is necessary to keep them until the statute of limitations of responsibilities for the exclusive purpose of claims or legal actions, as well as to comply with our legal obligations, for example:

Sector scopeLegal basisConservation period
AccountingArt. 30.1 Commercial Code6 years from the last entry
ProsecutorArt. 66 LGTGeneral deadline: 4 years 10 years: in case of losses during the fiscal year 5 years: invoices

Profiling

In some cases, the request for complex information requires us to profile the person requesting the information in order to tailor the information to his or her personal situation, gender, etc., and it is this profile that allows us to provide you with the exact information you have requested.

In such cases, we will inform you appropriately and ask for your prior express consent.

Likewise, you have the right to object to this type of processing at any time by writing to info@eurekafertility.com

Transfer of data

As a general rule, our company does not disclose personal data to third parties, although it may be necessary, for example:

If you have made a donation, your personal data may be disclosed to third parties as required by law (e.g., if you have made a donation, your personal data may be disclosed to third parties as required by law). Tax Agency), they may also be transferred to certain suppliers to whom we delegate some of our obligations (e.g. accounting consultants) and in these cases they have committed themselves through a data processor contract to comply with the same security measures implemented by our entity, as well as to submit to the duty of secrecy and confidentiality of the personal data processed, among other obligations regarding the protection of personal data.

If you are an information requester, depending on the type of information requested, your data including special category data (e.g. data related to your health, your gender and your partner's gender) may be disclosed to medical providers in charge of informing you about the specific service corresponding to the treatment you have requested. These assignments will only be made with your prior and express consent.

In accordance with the laws in force in each country, the suppliers compatible with the selected treatment may be located in countries other than Spain. In this case, the list of countries will be expressly indicated in the form, before filling in your data and later in the personalized report sent by e-mail. Therefore, your data may be transferred to these medical providers located in these countries, but only with your prior and express consent.

Security Measures

Our company has implemented all the necessary technical and organizational measures to protect the personal data processed, avoiding its loss, theft or unauthorized use.

These measures have been created according to the type of data processed and the purposes for which it is processed. These are periodically verified in our internal controls of compliance with personal data protection regulations and by means of external audits.

Your Rights

You, as the owner of your personal data and acting on your own behalf or through your legal representative may contact our entity at any time and ask us to know if our entity is processing your personal data; therefore, you have the right to access your data, rectify it if it is inaccurate or request its deletion when the data is no longer necessary.

In the same way, you can exercise your right of limitation or portability if you deem it convenient, and you can even revoke the consent initially granted.

To exercise any of your rights, you must write to our company either by mail to the address: Av. de las Jacarandas, 2, 46100 Burjassot, Valencia or to the e-mail: info@eurekafertility.com, stating the rights you wish to exercise, accompanied by a copy of your ID card or equivalent document to know about whom we must provide the requested information and your contact details to send you our reply. If you are acting on behalf of another person, you must prove your representation. Below, we provide you with the forms to exercise these rights:

If you have any suggestions or questions about the processing of your personal data, you can contact the data protection officer, indicating our company name or trade name in the form for the attention of the interested partyor by e-mail: info@businessadapter.es (Ref. Eureka).

We inform you that you have the right to make a complaint to the Spanish Data Protection Agency at: C/ Jorge Juan, 6, 28001 Madrid or at www.aepd.es.

Commitment to Personal Data Protection

Scope of application

Our commitment to the protection of personal data will be mandatory for all departments and employees of our company, as well as those third parties acting on our behalf.

1.Object

We have established protocols for the processing of your personal data, in accordance with the provisions of European and Spanish data protection regulations.

Principles

We will treat your data with lawfulness, fairness, transparency, data minimization, accuracy, limitation of the retention period, integrity, confidentiality and active responsibility.

Special category of data

Our entity prohibits the processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, the processing of genetic or biometric data, data concerning health or data concerning sexual orientation, except in the legally authorized exceptions and with the prior consent of the data subject.

Rights of interested parties

Our entity will attend and respond as quickly and diligently as possible, your requests to exercise your rights.

Registration of Activities, Impact Assessment and Security Measures

Our entity will keep a record of processing activities and analyze the purposes of processing, categories of data subjects and data, recipients, international transfers, storage periods, etc., in order to assess the risks of processing and implement the necessary security measures to ensure the confidentiality, integrity and availability of personal data.

Likewise, for each processing activity, we have analyzed the need to prepare an Impact Assessment and determine whether there is an obligation to appoint a Data Protection Officer, establishing, if necessary, that the person appointed to this position has sufficient knowledge and experience in accordance with the provisions of the regulations in force.

Control

We rely on external assistance to advise us on this matter, monitoring all publications issued by the competent control bodies and other European and Spanish entities related to data protection regulations, in order to comply with these regulations at all times.

13. Updating this Policy

We reserve the right to modify this Policy without prior notice. For this reason, we recommend that you consult it every time you visit our website.

Text updated on August 4, 2023.