WEBSITE PRIVACY POLICY

https://groupmedicalimpex.es/

I. PRIVACY AND DATA PROTECTION POLICY

In accordance with current legislation, Medical Impex (hereinafter, also referred to as the “Website”) undertakes to implement the necessary technical and organizational measures appropriate to the level of risk of the data collected.

Applicable Laws

This privacy policy is aligned with Spanish and European regulations regarding the protection of personal data online. Specifically, it adheres to the following:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 (GDPR).

  • Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).

  • Royal Decree 1720/2007, of 21 December, approving the implementation of Organic Law 15/1999.

  • Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE).

Data Controller Identity

The data controller of the personal data collected on the Website is MEDICAL IMPEX S.L., NIF/CIF: B56138290, registered at the Commercial Registry of Alicante, represented by Ana María Salistean and Petruska Gabor.

Contact details:
Address: C/ Cardenal Tarancón 3, Crevillente 03330, Alicante
Phone: 698284445
Email: ana.salistean@medical-impex.com

Personal Data Registration

In compliance with GDPR and LOPD-GDD, users are informed that the personal data collected via website forms will be included in a file for the purpose of facilitating, expediting, and fulfilling the commitments established between Medical Impex and the User, or to manage a request or inquiry. A record of processing activities is maintained unless the exception in Article 30.5 of GDPR applies.

Principles for Data Processing

Personal data will be processed according to the following GDPR principles:

  • Lawfulness, fairness, and transparency

  • Purpose limitation

  • Data minimization

  • Accuracy

  • Storage limitation

  • Integrity and confidentiality

  • Accountability

Categories of Personal Data

Only identifying data is collected. No special categories of personal data are processed under Article 9 of the GDPR.

Legal Basis for Processing

The legal basis is the User’s explicit and verifiable consent. Consent can be withdrawn at any time, as easily as it was given. If data is requested through a form, the User will be informed whether the data is mandatory.

Purpose of Data Collection

Personal data is collected to manage relationships established via forms, handle queries, and provide services. Data may also be used for:

  • Customization and statistics

  • Marketing analysis

  • Improving website performance and content

The specific purposes will be communicated to the User when data is collected.

Data Retention Period

Data will only be retained for the time necessary to fulfill its purpose, with a maximum of 18 months, unless the User requests deletion sooner.

Data Recipients

User data may be shared with third parties when necessary and compliant with GDPR. If data is to be transferred internationally, the User will be informed about the recipient country or organization and whether an adequacy decision exists.

Children’s Data

Only individuals aged 14 or older can give valid consent for data processing. For children under 14, parental or guardian consent is required.

Data Security and Confidentiality

Medical Impex implements appropriate security measures to prevent unauthorized access, loss, or alteration of personal data. The Website uses SSL encryption to ensure secure transmission.

While we take reasonable measures, we cannot guarantee complete security against cyberattacks. In the event of a data breach that could pose a high risk, users will be notified without undue delay.

All data is treated as confidential, and all parties handling this data are bound to maintain confidentiality.

User Rights

Under GDPR and LOPD-GDD, Users have the following rights:

  • Right of access – Know whether and how your data is being processed.

  • Right to rectification – Correct inaccurate or incomplete data.

  • Right to erasure (right to be forgotten) – Request deletion under legal conditions.

  • Right to restriction of processing – Limit data use in certain cases.

  • Right to data portability – Receive your data in a structured, machine-readable format.

  • Right to object – Stop data processing under certain circumstances.

  • Right not to be subject to automated decision-making, including profiling.

To exercise these rights, send a written request to the Data Controller with reference:
“GDPR – https://groupmedicalimpex.es/, including:

  1. Name, surname, and ID (or valid proof of identity).

  2. Specific request.

  3. Notification address.

  4. Date and signature.

  5. Supporting documentation, if needed.

Send your request to:
Postal Address: C/ Cardenal Tarancón 3, Crevillente 03330, Alicante
Email: ana.salistean@medical-impex.com

Third-Party Links

This Website may include links to third-party websites not operated by Medical Impex. Each has its own privacy policy, and Medical Impex assumes no responsibility for their practices.

Complaints to the Supervisory Authority

If a User believes that data is being processed unlawfully, they may file a complaint with the competent Data Protection Authority. In Spain, this is the Spanish Data Protection Agency (AEPD):
https://www.aepd.es

II. ACCEPTANCE AND POLICY UPDATES

By using this Website, the User declares to have read and agreed to this Privacy Policy and authorizes the data processing as described.

Medical Impex reserves the right to modify this policy at any time due to legal, jurisprudential, or regulatory updates. Users are encouraged to review this page regularly.

This Privacy Policy was last updated in accordance with Regulation (EU) 2016/679 and Organic Law 3/2018.