Last modification: March 2024
This Privacy Policy forms an integral part of the General Conditions governing the website https://ainasalomfarma.com/ (hereinafter, “the Website”), together with the Cookies Policy and the Legal Notice. Aina Salom (hereinafter, “the Company”) reserves the right to modify or update this Privacy Policy at any time. Therefore, we recommend reviewing this policy each time you access the Website. In the event that a registered user accesses their account or profile, any substantial modification regarding the processing of their personal data will be notified.
Data Controller
The personal data collected or voluntarily provided through the Website, whether through browsing, contact forms, email, or telephone, will be processed by the Data Controller, whose information is detailed below:
Aina Salom, with DNI 43118973E, residing at Passatge Guillem de Torrella number 1, telephone 630410038 and email: hola@ainasalomfarma.com
For any inquiry or request related to the processing of personal data or data protection, you may contact our Data Protection Officer or the Company through the means indicated above.
Data Collected Through the Website
By simply browsing the Website, the Company will collect information related to:
• IP address.
• Browser version.
• Operating system.
• Duration of the visit or browsing on the Website.
This information is stored and processed through Google Analytics, so we refer to Google’s Privacy Policy, available at http://www.google.com/intl/en/policies/privacy/, for details regarding its processing. Likewise, the Website incorporates Google Maps functionality, which may access the user’s location if authorized, in order to provide specific information about distances or routes to our offices. For more information, consult the Google Maps Privacy Policy at http://www.google.com/intl/en/policies/privacy/.
The data collected will not be linked to an identified user, except in the cases described in this policy, and will be stored in our databases for the purpose of performing statistical analyses, optimizing the Website, improving our products and services, and developing business strategies. This data will not be shared with third parties, unless legally required.
User Registration and Form Submission
To access certain products or services, such as information requests, the user must complete a form with personal data. This data is mandatory to complete the registration or request. Failure to provide such data will make it impossible to process the request.
Browsing data will be associated with the user’s registration data, allowing the identification of the specific user interacting with the Website. This facilitates the personalization of the offer of products or services according to the user’s preferences.
The registration data, along with the user’s transaction history, will be incorporated into the Company’s databases and will be retained while the user’s account remains active. Once the account is deleted, transaction-related data will be stored for a period of 10 years to comply with current legal obligations, without being accessed or altered. Data not related to transactions will be immediately deleted upon consent withdrawal, unless applicable regulations provide otherwise.
The legal basis for processing this data is the performance of a contract between the parties or, where applicable, the express consent of the user for sending electronic communications or responding to information requests.
The purposes of the processing include:
a) Managing the user’s access to the Website.
b) Administering the services and functionalities available through the Website.
c) Informing the user about the status and processing of their requests.
d) Responding to information requests.
The user may receive communications by email or phone to inform them of incidents, errors, or the status of their requests. For the sending of commercial communications, the express consent of the user will be required at registration. Such consent may be withdrawn at any time by contacting the Company through the means indicated or by using the unsubscribe link included in each commercial communication.
Data Processing for Specific Groups
4.1. Website or Email Contacts
Purposes of processing:
• Respond to queries, requests, or petitions.
• Manage the requested service or process the request.
• Send electronically information related to the request.
• Send commercial information or event information, subject to prior express authorization.
Legal basis: Express consent from the data subject, given by completing and submitting a form or explicitly accepting this Privacy Policy by checking the box: “□ I have read and accept the Privacy Policy.”
4.2. Clients
Purposes of processing:
• Prepare quotes and carry out follow-up through communications between the parties.
• Send information electronically related to the request.
• Send commercial or event information, subject to prior express authorization.
• Manage administrative, communication, and logistics services.
• Carry out corresponding transactions, invoicing, and tax declaration.
• Perform control and recovery management.
Legal basis: Contract execution and, where applicable, express consent for commercial communications.
4.3. Providers
Purposes of processing:
• Send information electronically related to the request.
• Send commercial or event information, subject to prior express authorization.
• Manage administrative, communication, and logistics services.
• Perform invoicing, transactions, and tax declaration.
• Perform control and recovery management.
Legal basis: Execution of a contractual relationship or, failing that, express consent upon contacting the Company.
4.4. Users
Purposes of processing:
• Manage the provision of requested socio-health collaboration services.
• Send commercial information or information on events and activities, subject to express authorization.
• Manage administrative, communication, and logistics services.
• Respond to queries, requests, or petitions.
Legal basis: Contract execution and express consent.
4.5. Partners
Purposes of processing:
• Organize actions necessary to fulfill the company’s purposes.
• Manage internally and comply with legal obligations.
• Call meetings.
• Perform transactions and corresponding tax declarations.
Legal basis: Contractual relationship derived from the purchase of shares or participation in the company’s formation.
4.6. Associates
Purposes of processing:
• Organize actions necessary to fulfill the association’s purposes.
• Manage internally and comply with legal obligations.
• Call meetings.
• Manage fee collection and corresponding tax declaration.
Legal basis: Contractual relationship derived from the acceptance of the founding act and the association’s statutes.
4.7. Collaborators
Purposes of processing:
• Respond to queries, requests, or petitions.
• Manage collaboration with the entity in socio-health or administrative areas.
• Comply with legal obligations.
Legal basis: Express consent.
4.8. Family Members/Contacts of Users
Purposes of processing:
• Respond to queries, requests, or petitions.
• Manage administrative matters and comply with legal obligations.
• Manage the social assistance of the service user’s family member undergoing treatment.
Legal basis: Express consent.
4.9. Social Media Contacts
Purposes of processing:
• Respond to queries, requests, or petitions.
• Manage the requested service or process the request.
• Maintain a relationship with the user and foster a community of followers.
Legal basis: Acceptance of a contractual relationship within the corresponding social network environment, in accordance with its privacy policies:
• Facebook: http://www.facebook.com/policy.php?ref=pf
• Instagram: https://help.instagram.com/155833707900388
• WhatsApp: https://www.whatsapp.com/legal/#privacy
• YouTube: https://www.youtube.com/yt/policyandsafety/es/policy.html
Duration of processing: Data will be processed while the user maintains an active relationship with the Company on social media (e.g., following us or interacting). Any rectification or restriction must be done through the user’s profile settings in the respective social network.
4.10. Job Applicants
Purposes of processing:
• Organize selection processes for employee hiring.
• Schedule interviews and evaluate applications.
• Transfer data to collaborating or related entities, with the applicant’s consent, to facilitate job search.
Legal basis: Unequivocal consent, given by providing the resume and accepting the processing conditions.
Duration of processing: Resumes will be kept for a maximum of one year. After this period, if no contact has been made, they will be deleted.
Third-Party Data
As a general rule, the Company only processes data provided directly by its owners. If a user provides data of third parties, they must first inform said individuals and obtain their express consent, releasing the Company from any liability derived from failure to comply with this obligation.
Minors’ Data
The Company does not process data of minors under 14 years old. Therefore, the user must refrain from providing such data if they are under this age.
Electronic Communications
Electronic communications will only be made to manage requests, provided that the user has supplied a means of electronic contact. Commercial communications will only be sent with the user’s prior express consent.
Security Measures
The Company has adopted appropriate technical and organizational measures, in accordance with the current state of technology, to ensure the security of personal data, prevent its loss, misuse, alteration, unauthorized access, or theft.
Automated Decision-Making and Profiling
The Company does not use fully automated decision-making processes to initiate, develop, or terminate contractual relationships with users. Should such processes be used in specific circumstances, users will be informed and their rights communicated in accordance with applicable regulations.
To offer products or services tailored to the user’s interests and improve their experience, the Company may create a commercial profile based on the information provided. However, no automated decisions will be made based solely on this profile.
Data Recipients
Personal data will not be transferred to third parties, unless legally required. In particular, they may be communicated to:
• The State Tax Administration Agency, to comply with tax obligations.
• Banks and financial institutions, for payment of services or products.
• Data processors necessary to execute contractual agreements.
In the case of purchases or payments via online platforms, applications, or services, data may be transferred to these platforms, always guaranteeing the highest level of security.
If the user has given express consent, their name, images, or other information related to Company activities may be published on the Website or the Company’s social media accounts.
International Data Transfers
In the event that the Company makes international data transfers, it will ensure such transfers comply with Regulation (EU) 2016/679 (GDPR) or any other applicable regulation. Agreements will be adopted to ensure an equivalent level of protection as established in European regulations.
In particular, if shared folder systems on platforms such as Dropbox, Google Drive, Microsoft OneDrive, Amazon, Apple, HubSpot or others are used, any international transfer to the United States will be carried out in accordance with Article 49.c) of the GDPR or via mechanisms that guarantee adequate protection.
Data Subject Rights
Pursuant to the GDPR, the user has the following rights regarding their personal data:
• Right to know if their data is being processed.
• Right of access to their personal data.
• Right to rectify inaccurate data.
• Right to delete data when no longer necessary or consent has been withdrawn.
• Right to restrict processing, in the cases provided by law, retaining data only according to legal provisions.
• Right to data portability, receiving data in a structured, commonly used, and machine-readable format, or requesting its transfer to another controller.
• Right to object to processing, unless legitimate reasons exist that justify it.
• Right to file a complaint with the Spanish Data Protection Agency or the competent authority if they believe their rights have not been properly attended to.
• Right to withdraw consent at any time for processing based on consent.
To exercise these rights, users may contact the Company through the information provided in section 1. Forms for exercising rights are available upon request by email or through the models provided by the Spanish Data Protection Agency. Forms must be submitted electronically signed or accompanied by a copy of the DNI. If acting through a representative, a copy of the representative’s DNI or electronic signature must be attached.
The Company will resolve requests within a maximum of one month from receipt, unless the complexity or volume of requests requires a longer period, in which case the user will be informed.
Cookies
The processing of cookies is governed by the Cookies Policy, accessible from the homepage of the Website.
Data Retention Period
Personal data will be retained as long as the user maintains an active relationship with the Company. Once such relationship ends, data processed for each purpose will be kept for the legally established periods, including those periods during which a judge or court may request them, in accordance with statute of limitations for legal actions.
If there is no legal obligation to retain data, it will be kept until the user requests deletion or withdraws consent. The Company will retain information related to purchases or services while applicable warranties remain in effect, in order to handle potential claims.
Applicable Law and Jurisdiction
This Privacy Policy is governed by Regulation (EU) 2016/679 (General Data Protection Regulation) and applicable Spanish law. In the event of disputes arising from the interpretation or application of this policy, the parties submit, expressly waiving any other jurisdiction that may apply, to the courts and tribunals of Palma de Mallorca, unless applicable law provides otherwise.