Privacy Policy

1. INFORMATION FOR THE USER

Who is responsible for processing your personal data?
CRITERIA MÉDICA INSURANCE CLAIMS & LOSS ADJUSTERS, S.L. is the Controller responsible for processing the USER’s personal data and informs you that such data will be processed in accordance with Regulation (EU) 2016/679 of 27 April (GDPR) and Organic Law 3/2018 of 5 December (LOPDGDD).

What do we process your personal data for?
To maintain a business relationship with the user. The processing operations envisaged are:

  • Sending commercial advertising communications by email, fax, SMS, MMS, social media, or any other electronic or physical means, present or future, that enables commercial communications. These communications will be made by the Controller and will relate to its products and services, or those of its partners or suppliers with whom it has entered into a promotion agreement. In this case, third parties will never have access to personal data.
  • Conducting market research and statistical analysis.
  • Processing orders and requests, responding to queries, or any type of request made by the USER through any of the contact methods made available on the Controller’s website.
  • Sending the online newsletter about news, offers, and promotions related to our activity.


On what grounds may we process your personal data?
Because the processing is legitimised under Article 6 of the GDPR as follows:

  • With the USER’s consent: sending commercial communications and the newsletter.
  • On the Controller’s legitimate interest: conducting market research, statistical analysis, etc., and processing orders, requests, etc., at the USER’s request.

How long will we keep your personal data?
It will be kept for no longer than necessary to fulfil the purpose of the processing or for as long as there are legal requirements that mandate its retention; when it is no longer necessary, it will be deleted using appropriate security measures to ensure data anonymisation or its complete destruction.

Who do we share your personal data with?
No disclosure of personal data to third parties is envisaged, except where necessary for the development and execution of the purposes of the processing, to our communications-related service providers, with whom the Controller has signed the confidentiality and data processor agreements required by applicable privacy regulations.

What are your rights?
The USER has the following rights:

  • The right to withdraw consent at any time.
  • The right of access, rectification, portability, and erasure of your data, and the right to restrict or object to its processing.
  • The right to lodge a complaint with the supervisory authority (www.aepd.es) if you consider that the processing does not comply with applicable regulations.

Contact details to exercise your rights
CRITERIA MÉDICA INSURANCE CLAIMS & LOSS ADJUSTERS, S.L.
CALLE ORENSE, 25 – 7ºD IZDA. – 28020 MADRID (Madrid)
Email: medica@criteriamedica.com

 

2. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER

USERS, by ticking the corresponding boxes and entering data in the fields marked with an asterisk (*) in the contact form or presented in download forms, expressly and freely and unequivocally accept that their data is necessary for the provider to handle their request, while the inclusion of data in the remaining fields is voluntary. The USER guarantees that the personal data provided to the Controller is truthful and undertakes to notify any changes to it.

The Controller informs you that all data requested through the website is mandatory, as it is necessary to provide an optimal service to the USER. If all data is not provided, it is not guaranteed that the information and services provided will fully meet your needs.

 

3. SECURITY MEASURES

In accordance with applicable personal data protection regulations, the Controller complies with all provisions of the GDPR and the LOPDGDD for the processing of personal data under its responsibility, and expressly with the principles described in Article 5 of the GDPR, under which data is processed lawfully, fairly, and transparently in relation to the data subject, and is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed.

The Controller guarantees that it has implemented appropriate technical and organisational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect the rights and freedoms of USERS, and has provided them with the appropriate information so that they may exercise those rights.

For more information about privacy safeguards, you may contact the Controller at CRITERIA MÉDICA INSURANCE CLAIMS & LOSS ADJUSTERS, S.L. CALLE ORENSE, 25 7 D – 28020 MADRID (Madrid). Email: medica@criteriamedica.com