Privacy Policy

1. INFORMATION FOR THE USER

Who is responsible for the processing of your personal data?

Grupo Mespa S.L., with CIF B10701985 and address at C/Escalonia 5, block 11 1D, 28231, Las Rozas, Madrid, is RESPONSIBLE for the processing of the USER's personal data and informs them that these data will be treated in accordance with the provisions of Regulation (EU) 2016/679, of April 27 (GDPR), and Organic Law 3/2018, of December 5 (LOPDGDD).

What do we process your personal data for?

To maintain a business relationship with the user. The operations planned to carry out the treatment are:

• Remisión de comunicaciones comerciales publicitarias por e-mail, fax, SMS, MMS, redes sociales o cualquier otro medio electrónico o físico, presente o futuro, que posibilite realizar comunicaciones comerciales. Estas comunicaciones serán realizadas por el RESPONSABLE y estarán relacionadas con sus productos y servicios, o de sus colaboradores o proveedores, con los que este haya alcanzado algún acuerdo de promoción. En este caso, los terceros nunca tendrán acceso a los datos personales.
• Realizar estudios de mercado y análisis estadísticos.
• Tramitar encargos, solicitudes, dar respuesta a las consultas o cualquier tipo de petición que sea realizada por el USUARIO a través de cualquiera de las formas de contacto que se ponen a su disposición en la página web del RESPONSABLE.
• Remitir el boletín informativo online, sobre novedades, ofertas y promociones en nuestra actividad.

For what reason can we process your personal data?

Because the treatment is legitimate by Article 6 of the GDPR in the following way:

With the consent of the USER: sending commercial communications and the newsletter.

For the legitimate interest of the RESPONSIBLE: to carry out market studies, statistical analysis, etc. and to process orders, requests, etc. at the request of the USER.

How long will we keep your personal data?

They will be kept for no longer than necessary to maintain the purpose of the treatment or there are legal requirements that dictate their custody and when it is no longer necessary for this purpose, they will be deleted with appropriate security measures to ensure the anonymization of the data or the total destruction of the same.

To whom do we provide your personal data?

No communication of personal data to third parties is planned except, if necessary for the development and execution of the purposes of the processing, to our service providers related to communications, with whom Grupo Mespa S.L. has signed the confidentiality and data processor contracts required by current privacy regulations.

What are your rights?

The rights that the USER has are:

• Derecho a retirar el consentimiento en cualquier momento.
• Derecho de acceso, rectificación, portabilidad y supresión de sus datos, y de limitación u oposición a su tratamiento.
• Derecho a presentar una reclamación ante la autoridad de control (www.aepd.es) si considera que el tratamiento no se ajusta a la normativa vigente.

Datos de contacto para ejercer sus derechos: Grupo Mespa S.L., C/Escalonia 5, bloque 11 1D, 28231, Las Rozas, Madrid. Email: info@grupomedsum.com

2. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER

USERS, by checking the corresponding boxes and entering data in the fields, marked with an asterisk (*) in the contact form or submitted in download forms, expressly and freely and unequivocally accept that their data is necessary to fulfill their request, by the provider, and the inclusion of data in the remaining fields is voluntary. The USER guarantees that the personal data provided to the CONTROLLER are true and is responsible for communicating any changes to them. The RESPONSIBLE party informs that all the data requested through the website are mandatory, since they are necessary for the provision of an optimal service to the USER. If all the data are not provided, it is not guaranteed that the information and services provided are completely adapted to your needs.

3. SECURITY MEASURES

That in accordance with the provisions of current regulations on the protection of personal data, the CONTROLLER is complying with all the provisions of the GDPR and LOPDGDD regulations for the processing of personal data under his responsibility, and clearly with the principles described in article 5 of the GDPR, by which they are treated lawfully, loyally and transparently in relation to the interested party and adequate, relevant and limited to what is necessary in relation to the purposes for which they are treated. The CONTROLLER guarantees that it has implemented appropriate technical and organizational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect the rights and freedoms of USERS and has provided them with appropriate information so that they can exercise them.

For more information about privacy guarantees, you can contact the RESPONSIBLE person through Grupo Medspa SL. C/ Hermosilla 48, Madrid, 28001 MADRID (Madrid). E-mail: info@grupomedsum.com.