Privacy policy

I. PRIVACY AND DATA PROTECTION POLICY

In compliance with current legislation, IES Medical (hereinafter, also the Website) undertakes to adopt the necessary technical and organizational measures, according to the appropriate level of security for the risk of the data collected.

Laws incorporated in this privacy policy

This privacy policy is adapted to current Spanish and European regulations on personal data protection on the internet. In particular, it complies with:

• Regulation (EU) 2016/679 of 27 April 2016 (GDPR).
• Organic Law 3/2018 of 5 December (LOPD-GDD).
• Royal Decree 1720/2007 of 21 December (RDLOPD).
• Law 34/2002 of 11 July (LSSI-CE).

Identity of the data controller

The controller of the personal data collected on IES Medical is: INTERNATIONAL EMERGENCY SERVICES, S.L., with Tax ID: B95598207 and registered in the Commercial Registry of Vizcaya. Contact details:

Address: Parque Científico y Tecnológico de Bizkaia Ibaizabal Bidea, Building 500, 1st Floor 48160 Derio

Phone: 944008847

Email: comercial@iesmedical.es

Registration of personal data

In compliance with GDPR and LOPD-GDD, we inform you that personal data collected by IES Medical via forms on its pages will be included and processed in our file to facilitate, expedite, and fulfill commitments between IES Medical and the User, or to maintain the relationship specified in the forms, or to respond to a request or inquiry. A record of processing activities is maintained unless Article 30.5 of GDPR applies.

Principles applicable to personal data processing

The processing of User personal data will comply with the following principles:

• Lawfulness, fairness, and transparency: User consent will be required after transparent information about purposes.
• Purpose limitation: Data will be collected for specific, explicit, and legitimate purposes.
• Data minimization: Only strictly necessary data will be collected.
• Accuracy: Data will be accurate and up-to-date.
• Storage limitation: Data will be kept no longer than necessary.
• Integrity and confidentiality: Data will be processed securely and confidentially.
• Accountability: The controller will ensure compliance with these principles.

Categories of personal data

The categories processed are solely identifying data. No special categories of data are processed.

Legal basis for processing

The legal basis is consent. IES Medical undertakes to obtain express, verifiable consent for one or more specific purposes. Consent may be withdrawn at any time, without affecting Website use.

Purpose of processing

Data are collected to facilitate, expedite, and fulfill commitments or maintain relationships specified in forms, or respond to inquiries. Data may also be used for personalization, operations, statistics, marketing studies, and improving content and Website navigation.

Retention periods

Data will be kept for the minimum necessary period, in any case: 36 months, or until deletion is requested.

Recipients

Data will not be shared beyond what is necessary for service delivery (e.g., transport, client mailing).

Personal data of minors

Only those over 14 years of age may lawfully give consent for personal data processing by IES Medical. If the user is under 14, parental or guardian consent is required.

Confidentiality and security of personal data

IES Medical undertakes to adopt necessary technical and organizational measures appropriate to the risk to ensure data security, prevent destruction, loss, alteration, unauthorized disclosure or access. The Website uses SSL encryption to ensure secure and confidential data transmission.

However, IES Medical cannot guarantee absolute internet security or prevent unauthorized access. If a security breach likely to pose a high risk occurs, the User will be notified without undue delay.

Data will be treated as confidential. IES Medical ensures that its staff and associates respect this confidentiality.

User rights

The User has the right to:

• Access: Confirm whether data are being processed and access details.
• Rectification: Request modification of inaccurate or incomplete data.
• Erasure: Request deletion when data are no longer needed or consent is withdrawn.
• Restriction: Request restriction when contesting accuracy or processing is unlawful.
• Portability: Receive data in structured format and transmit to another controller.
• Objection: Oppose processing.
• No automated decisions: Not be subject to decisions based solely on automated processing, including profiling.

Requests should be sent with identification, reasons, and proof to:

Postal address: Parque Científico y Tecnológico de Bizkaia Ibaizabal Bidea, Building 500, 1st Floor 48160 Derio

Email: comercial@iesmedical.es

Links to third-party websites

The Website may contain links to third-party websites not operated by IES Medical. These sites have their own privacy policies and data practices, for which they are responsible.

Complaints to the supervisory authority

If the User believes that there is a problem or violation regarding personal data processing, they have the right to effective judicial protection and to lodge a complaint with a supervisory authority, especially in their habitual residence, workplace, or place of the alleged infringement. In Spain, this is the Spanish Data Protection Agency (http://www.agpd.es).

II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

The User must have read and agreed to this Privacy Policy for the controller to process data as indicated. Using the Website implies acceptance of this Privacy Policy.

IES Medical reserves the right to modify its Privacy Policy at its discretion or due to legal, jurisprudential, or agency changes. Changes will not be explicitly notified. Users should review this page periodically to stay updated.

This Privacy Policy was updated to comply with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights.