icm-med-pharm-blanco-2
Privacy Policy – Data Controller

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, General Data Protection Regulation (GDPR) and Organic Law 3/2018 of 5 December on Data Protection and Guarantee of Digital Rights (LOPDGDD), we inform you of the following:

The data controller is:

 

Data collected and its source

We collect and process personal information to manage our relationship with you. This data includes:

  • Identification data: name, surname(s), ID number/tax ID number/foreign ID number/passport number, address (postal or email), telephone number.
  • Browsing data: IP address, MAC address of mobile devices, cookies during visits to the website.

The data comes directly from the data subject.

How do we collect your information?

We collect personal information through various means. At the time of collection, we inform you about the data controller, the purpose, legal basis, recipients and retention period. We also inform you about how to exercise your data protection rights.

Depending on the service provided, we will ask for your consent for one or more specific purposes. We use social networks such as Facebook and Instagram to reach you. The information in messages and posts may contain personal data that is accessible to the public. Please consult the privacy policies of these networks before using them.

We collect personal information on our website when you register as a customer, request the newsletter, make enquiries or browse using cookies. For more details, please see our Cookie Policy.

User responsibility

By providing us with your data through electronic channels, you guarantee that you are over 14 years of age and that the data provided is true, accurate, complete and up to date. You will be responsible for keeping the information up to date and for any damage caused by false or inaccurate data.

Purpose of processing

The processing of personal data has the following purposes:

  • Management of user data and purchase history.
  • Management of the registration process on the Online Platform.
  • Compliance with legal obligations, prevention of fraud and money laundering.
  • Management of orders and purchases in the online store.
  • Sending of newsletters.
  • Management of social platforms linked to ICM Med&Pharm Translations.
  • Browsing analysis and service improvement.
  • Resolution of queries and incident management.
Retention period

The data will be kept for as long as necessary to fulfil its purpose and to comply with legal obligations. At the end of the processing, it will be blocked and will only be available to the competent authorities if necessary. In general, we will keep your information for as long as there is a contractual relationship or until you exercise your right of erasure.

Legitimacy

Inmaculada Caracuel Matilla is entitled to process personal data in accordance with the GDPR:

  • Article 6.1.a) GDPR: consent of the data subject.
  • Article 6.1.b) GDPR: processing is necessary for the performance of a contract.

 

Accuracy of data

It is your responsibility to provide accurate information and keep it up to date. You will also be liable for any damage caused by false or inaccurate information.

Recipients

Data will only be transferred when necessary for the development, control and fulfilment of the stated purposes, or when required by law.

We do not transfer data internationally outside the European Economic Area (EEA). In addition, your data will be available to public administrations and courts if necessary.

User rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing, withdrawal of consent and data portability.

To do so, you must send a copy of your ID card to the following address:

 

If you are not satisfied with the exercise of your rights, you also have the option of filing a complaint with the Spanish Data Protection Agency.

Security measures

Inmaculada Caracuel Matilla adopts physical, technical and organisational measures to guarantee the security of stored data, as established in our privacy policy. These measures are reviewed periodically to ensure their effectiveness.

Suppliers with access to the data are also obliged to maintain confidentiality and apply the corresponding security measures, in accordance with our privacy policy.

However, absolute security cannot be guaranteed. In the event that any information under our control is compromised by a security breach, we will notify the competent authorities and the affected users, as established in the privacy policy.

It should be noted that this website is not bound by any code of conduct. Therefore, this privacy policy may be modified in accordance with legislative changes or the guidelines of the Spanish Data Protection Agency.

Last revised on 10 February 2025.