This policy of personal data protection aims to publicize how, from CADUCEUS SOFTWARE, S.L. (hereinafter “CADUCEUS”), obtain, process and protect personal data you provide or we collect, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (on the protection of natural persons with regard to the processing of personal data and on the free movement of such data) – General Data Protection Regulation, Organic Act 3/2018 of 5 December, on the protection of personal data and guarantees of digital rights, and other regulations concerning the personal data protection.
2. Responsible for processing
The responsible for the personal data you provide or obtained by other means is CADUCEUS, with CIF: B-93000404, domiciled in C/ Marie Curie, 8, Edif. B, Parque Tecnológico de Andalucía, 29590, Málaga (España), email firstname.lastname@example.org and contact telephone (+34) 952 02 07 09.
The “Website” of CADUCEUS consists of the website www.caduceus.es, which is owned by CADUCEUS, and may contain links to other third party websites with data protection policies outside CADUCEUS. By accessing these third party websites you can decide whether or not to accept their data protection and cookie policies, in accordance with the regulations in force.
4. Platform Users, Customers and Potential Customers
Users are informed of the personal data that may be collected, its purpose and the legitimacy of its processing.
- Identification data: name, surname/s.
- Contact details: telephone, mobile phone, e-mail.
PURPOSE OF THE PROCESSING OF PERSONAL DATA:
- The purpose of the processing of your personal data is to guarantee the security of the service and to manage your queries, requests for information or complaints, either through the Contact Form, or through the request for evaluations of our services.
- The purpose of writing comments on the blog or forum.
- Processing may also consist, provided we have received prior express consent from the user, in receiving communications, company advertising, announcements, newsletters, etc.
LEGITIMATION FOR THE PROCESSING OF PERSONAL DATA:
- In general, the legal basis that legitimizes the processing of personal data by CADUCEUS is the fulfillment of legal obligations or public interest or in the exercise of public powers conferred on CADUCEUS.
- Some treatments may also require the consent of the interested parties (receiving communications, advertising, announcements, newsletters, etc). This consent must be given by clear affirmative action and it is informed that it can be withdrawn at any time by the data subject.
- Other treatments are based on the legitimate interest we have to manage and respond to their requests for information and applications in CADUCEUS, as well as knowing their assessment of our services and performance or send communications of interest on the services contracted.
5. Personal data collection and record processing
CADUCEUS treats your personal data in a lawful, loyal and transparent way and limits the purposes for which they were collected.
The personal data collected from the person concerned are incorporated into the processing owned by CADUCEUS and are included in our Register of Processing Activities.
These personal data will be treated confidentially and in a way that guarantees adequate security for the protection of these data.
6. Communication of personal data
CADUCEUS will not communicate personal data without the consent of the concerned, except in circumstances provided for in existing legislation, as well as the State Security Forces, Courts and Tribunals, Public Administration with competence in the matter, when requested in accordance with applicable laws and regulations.
7. Data Storage
In general, personal data processed by CADUCEUS will be kept for the time necessary to fulfill the purpose for which they were collected, taking into account the deadlines set out in the regulations in general and specifically in Act 10/2001 of 13 July and Decree 13/2008 of 22 January, without prejudice, where appropriate, their availability to the competent authorities or to address complaints. In this case, the data will be kept blocked until the end of the prescription period, at which time they will be deleted.
CADUCEUS guarantees, under the terms established in the General Data Protection Regulation (GDPR), that it will use the personal data of users confidentially, and that it has adopted the appropriate technical and organizational security measures in its facilities and systems. This protection covers everything related to the collection and use of information provided via the Internet.
Therefore, we are committed to maintaining and applying the necessary levels of security, taking into account the state of technology, the category of data stored and the risks, to protect your personal data from accidental loss and unauthorized access, processing or disclosure, and not to disclose the information provided that it is not in strict compliance with an order or a legal obligation. In short, to treat your data in accordance with current legislation on data protection.
9. Legislation on Personal Data Protection
The interested party may exercise their rights of access, rectification, cancellation, portability, limitation and opposition by writing to the e-mail email@example.com, or by post to Avda. Ortega y Gasset, 124, 2nd floor, office 14, 29006, Malaga, Spain, indicating as reference “RGPD rights”.
Access to your Personal Data: It is the right to request and obtain information about your personal data held by CADUCEUS, as well as the processing done on them, for what purpose and for what specific uses.
Right of rectification: This is the right you have to rectify your personal data when they are incorrect or incomplete.
Right of cancellation (right to forget): This is the right you have to ask for access to your personal data to be suppressed when it is inappropriate, excessive or unnecessary, when it is kept for a longer period than is appropriate or when it is contrary to the Regulation.
Right of opposition: This is the right you have to request that no processing of your personal data be carried out.
Right of limitation: It is a right to mark your personal data kept by CADUCEUS in order to limit the processing in the future.
Right to data portability: This is the right to receive the personal data you have provided to CADUCEUS in a structured, commonly used and machine-readable format, and to transmit them to another controller, if the processing is based on consent or a contract or if it is done by authorized means.
Right not to be subject to automated individual decisions: This is the right not to be subject to a decision based solely on automated processing of data, including profiling, which produces legal effects on you or significantly affects you.
In Exercise of right GDPR, you will find all the information to be able to exercise rights. You also have the right to file a complaint with the Spanish Data Protection Authority at any time regarding the processing of your personal data.
10. Changes to our notice
If we change the way we process Personal Data, we will update this Policy and the corresponding Privacy and Data Protection Legal Notice. We reserve the right to make changes at any time to our practices and this Policy, so please check back frequently for updates or changes
11. More information
We will be happy to provide you with more information about how we protect and use your personal information. Contact us at the following email address firstname.lastname@example.org.
You can also obtain useful information on privacy and data protection from the office of the Spanish Data Protection Agency (AEPD).Privacy notice