Privacy policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA

Both data privacy and confidentiality of information are important aspects for Oxigen salud, S.A.U. This data protection policy establishes the way in which your personal data that we have obtained, either through this website or through our established professional relationships, will be treated.

We inform you that this policy may vary over time due to possible changes in legislation, jurisprudence or the criteria followed by the Spanish Data Protection Agency and/or the competent authority at any given time. For this reason, Oxigen salud, S.A.U. reserves the right to modify it in order to adapt it to new legislation or jurisprudence that is in force at the precise moment that the website is accessed.

Date of last update: December 2020.

1. WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?

• Name: Oxigen salud, S.A.U.
• Tax ID: A58573171
• Registered office: Ctra. de Rubí, 141-143 08174 Sant Cugat del Vallès (Barcelona)
• Contact of the data protection officer: dpo@oxigensalud.com

2. FOR WHAT PURPOSE DO WE PROCESS YOUR DATA?

The personal data that Oxigen salud, S.A.U. collects are strictly necessary for the management of the established relationship, being adequate, relevant and not excessive, limited to what is necessary in relation to the purposes for which they are processed.

We process your personal data for the following purposes:

2.1. CONTACT FORMS: management of queries and requests received through the different contact forms provided on the website (contact, satisfaction surveys, complaints, doubts and suggestions) and the performance of statistical studies.

2.2. ELECTRONIC NEWSLETTER: sending of the electronic newsletter to subscribers to the service.

2.3. WORK WITH US FORM: management of CVs received for the selection of personnel during the processes that the company keeps open and to maintain a file with curricular information of candidates to provide services to our Company and whose required profile fits the characteristics of the company.

Concerning the mandatory or optional nature of the information provided

Users, by ticking the corresponding boxes and entering data in the fields marked with an asterisk (*) in the forms provided, expressly and freely and unequivocally accept that their data are necessary to deal with their request, with the inclusion of data in the remaining fields being voluntary.

2.4. FOR ESTABLISHED PROFESSIONAL RELATIONSHIPS: we process the data of our business contacts, customers, suppliers, collaborators and patients for the following purposes:

• Sending of commercial communications provided that prior authorisation has been given or that a contractual relationship with the company is maintained.
• Management of contracted services and products.
• Logistics management and coordination.
• Customer and patient care.
• Administrative management, as well as economic, accounting and tax management.
• Logistics and returns management.

3. WHAT IS THE LEGITIMACY FOR THE PROCESSING OF YOUR DATA?

We have the following legal bases for processing personal data:

• Consent in relation to the following purposes:
  • Sending of commercial information and personalised information adapted to the profile of the interested party.
  • Sending of the electronic bulletin.
  • CV management for recruitment.
• Execution of the contract in relation to the following purposes:
  • The management of professional relations with clients, suppliers and collaborators in relation to the services and products contracted.
• Fulfilling a legal obligation in relation to the following purposes:
  • Administrative, economic, accounting and tax management.
• Legitimate interest in relation to the following purposes:
  • Profiling through web browsing.
  • Profiling for sending personalised information.
  • Sending satisfaction surveys on products and services purchased.
    Our legitimate interest is to be able to offer personalised services and therefore to improve customer satisfaction.

4. HOW LONG DO WE KEEP YOUR DATA?

Oxigen salud, S.A.U. will store personal data only for the period of time that is necessary to deal with the questions that arise or to resolve problems, as well as to comply with the legal periods of limitation of contractual obligations established in the civil code. In such cases, the company will keep the data properly blocked.

For CVs received, the company will store the data for a maximum period of 3 years. However, the company may keep your name and surname and contact email for future collaborations without prejudice to the rights of the owner of the data as set out in section "6.- What are your rights?”

5. TO WHOM WILL WE DISCLOSE YOUR PERSONAL DATA?

The company will not communicate your data to third parties except in the following cases:

• By legal obligation.
• For execution of the contract.

No international transfer of data is foreseen.

6. WHAT ARE YOUR RIGHTS?

• Right of access
  • You have the right to obtain confirmation as to whether or not we are processing your personal data and to access the personal data we hold about you.
• Right of rectification
  • You have the right to request that we rectify personal data where it is inaccurate or complete it where it is incomplete.
• Right of erasure/right to be forgotten
  • You can ask us to delete personal data when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
• Right of limitation
  • You have the right to request the limitation of data processing, in which case we will only keep the data for the exercise or defence of claims.
• Right of portability
  • You have the right to receive personal data in a structured, commonly used and machine-readable format and to transmit it to another controller where the processing is based on consent or a contract and is carried out by automated means.
• Right to object
  • You can object to the processing of personal data on the basis of the public or legitimate interest pursued by the company, including profiling. In this case, we will stop processing the data, except for compelling legitimate reasons or for the exercise or defence of possible claims.
• Automated individual decisions
  • You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. However, it is not possible to exercise this right if the decision is necessary for the conclusion or performance of a contract between us provided that we offer adequate measures to safeguard your rights, freedoms and legitimate interests; or it is based on your explicit consent.
• Right to lodge a complaint
  • You have the right to lodge a complaint with the Spanish Data Protection Agency or with the competent local supervisory authority (AEPD - www.agpd.es)

If you wish to make use of any of your rights, please contact dpo@oxigensalud.com indicating the following information:

• Name and surname
• DNI
• Contact e-mail address
• Right you wish to exercise
• Data on which you make your request

Within a maximum period of one (1) month we will resolve your request by notifying you at the e-mail address you have indicated.

7. WHAT SECURITY DO WE APPLY?

Taking into account the state of the art, the costs of implementation, and the nature, scope, context and purposes of processing, as well as risks of varying likelihood and severity to the rights and freedoms of individuals, the company shall implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, which prevents the accidental or unlawful destruction, loss or alteration of, or unauthorised disclosure of or access to personal data transmitted, stored or otherwise processed.