Data Controller

The company responsible for processing your data under this Privacy Policy is: PALEX MEDICAL, S.A.

NIF: A58710740

Address: Jesús Serra Santamans, 5 - 08174 SANT CUGAT DEL VALLÈS (Barcelona)

Email address: lopd@palex.es

Website: www.palexhealth.com

Phone: 934006603

Registered in the Barcelona Commercial Register, Volume 32475, Folio 134, Sheet Number B4953, Entry 96

At PALEX MEDICAL, S.A., we recognize the importance of protecting your personal information and are committed to ensuring that it is processed responsibly and in accordance with data protection laws. This privacy policy is intended to regulate all aspects related to the processing of data from different users who browse or provide their personal data through the various forms located on the website.

Personal Data

Personal data refers to information that identifies you or makes you identifiable. Through the website, in the boxes provided for this purpose, we collect the personal data that you provide us with: name, surname, email, phone number, postal address, city, etc. The user's visit to the website does not require the user to provide any information regarding their personal data. However, if provided, the data will be processed lawfully, at all times subject to the principles and rights established in EU GDPR 2016/679, of April 27, 2016, and Law No. 58/2019, of August 8.

Purpose, duration, and legitimacy of the processing:

The data that the user provides will be processed for the following purposes:

• To respond to the request or inquiry made by the user through the contact form located on the website. We collect and process the user's personal data to process and manage their request, inquiry, or any request they make through this form. We will retain this data for the necessary time to fulfill your request and for the legally required minimum period of 3 years. The legal basis for legitimizing the data processing will be the consent given by the user by selecting the checkbox accepting our privacy policy before sending the request. The user has the right to withdraw their consent at any time without affecting the lawfulness of the processing based on consent prior to its withdrawal.

• To provide training and information to registered users on the website and, where applicable, to take the necessary steps to allow them to enroll in courses and attend or monitor them, as well as conferences, events, and any other training, social, informative, and/or educational activity in which the user is interested and is offered through the website. We will retain this data for the duration of the training activity and for the legally required minimum period of 3 years. The legal basis for this purpose of processing personal data is the performance of the contract to which the user is a party, i.e., for the maintenance, fulfillment, development, control, and execution of the contractual relationship established.

• To manage the CV submitted by the data subject through the form provided for this purpose and include it in the company's candidate database. This data will be kept for a maximum period of one year, after which the data will be blocked for the legally required period, guaranteeing full confidentiality both in processing and its subsequent destruction. The legal basis for managing and processing the CV of the data subject is their consent, expressed through an affirmative action to send it and by selecting the checkbox accepting our privacy policy before submitting the document. The user has the right to withdraw their consent at any time without affecting the lawfulness of the processing based on consent prior to its withdrawal.

• To improve your browsing experience on the website. We will retain this data for as long as the user does not withdraw their consent for its processing by deleting the cookies, and for the legally required minimum period of 3 years. The legal basis for improving your browsing experience on the website is the consent given by the user when accepting cookies. The user has the right to withdraw their consent at any time without affecting the lawfulness of the processing based on consent prior to its withdrawal.

• To manage our social networks and send you information about our activities and products. We will retain this data for as long as the user does not withdraw their consent for its processing, and for the legally required minimum period of 3 years. The legal basis for managing our social networks and sending you information about our activities and news is the consent you give us to do so. The user has the right to withdraw their consent at any time without affecting the lawfulness of the processing based on consent prior to its withdrawal.

• To manage the sending of satisfaction surveys based on the purchase of the product or service requested in order to improve our customers' day-to-day experience. The personal data will be deleted once the survey is completed and the reasonable time for implementing improvements, activating new services, and fulfilling the requirements of applicable legislation has passed. The processing of your data will be based on the legitimate interest of improving the quality of service when the user has purchased goods and/or services. In the absence of such a contractual relationship, the processing of data will be based on the user's consent, as established by the current regulations. Likewise, in the event that you withdraw your consent for any of the processing activities, this will not affect the lawfulness of the processing carried out previously.

Transfer or communication of personal data and international transfers:

Your data will not be communicated or transferred to third parties, unless there is a legal obligation or to suppliers linked to the Data Controller who act as processors. No international transfers are carried out, and if they were to occur at any time, you would be informed to obtain your consent.

Updating data

It is important that, in order to keep your personal data up to date, the user informs us whenever there has been any change. Otherwise, we cannot be held responsible for the accuracy of the data.

The user guarantees that the personal data provided is true, ensuring that all information provided corresponds to the real situation, that it is up to date and accurate, and is obliged to inform of any changes.

Third-party data

If the user provides data of third parties for any purpose to PALEX MEDICAL, S.A., they guarantee that they have obtained such data lawfully, have informed the affected parties beforehand, obtained their consent to provide the data, and that the information provided is accurate and true.

Mandatory nature of the requested information

All our forms have an asterisk (*) on mandatory fields. If the user does not fill in these fields, or does not check the acceptance box for the privacy policy, the information cannot be submitted.

Rights of data subjects:

You have the right to access your data and to obtain confirmation of its processing, as well as to obtain a copy of the personal data being processed. You have the right to update and request rectification of inaccurate data or request deletion when the data is no longer needed for the purposes for which it was collected. You may request the limitation of the processing of your data and object to the processing thereof by withdrawing your consent, as well as exercising the right to data portability. Likewise, you have the right not to be subject to decisions based solely on the automated processing of your personal data. You may exercise your rights by contacting us at: Jesús Serra Santamans, 5 - 08174 SANT CUGAT DEL VALLÈS (Barcelona). Email: lopd@palex.es. If you believe that your rights have not been properly addressed, you have the right to file a complaint with the National Data Protection Commission www.cnpd.pt.

Processing of minors' data

Anyone providing data through the forms on this website and consenting to its processing confirms that they are over 14 years old, and access and use of the portal by minors under that age is prohibited. If, at any time, the Data Controller detects that a child under 14 has provided personal data, we will proceed to cancel such data. Likewise, parents or legal guardians may contact PALEX MEDICAL, S.A. at any time to block the account of minors under their care who may have registered by falsifying their identity.

Processing of cookies

A cookie is a small file that is downloaded and stored on the user's computer when they access a website. Cookies allow the website, among other things, to store and retrieve information about the user's browsing habits or their device, and depending on the information they contain and how they use the device, they may be used to recognize the user. The user has the option to prevent the generation of cookies by selecting the corresponding option in their browser. You can learn more by reading our Cookie Policy.