PRIVACY POLICY
This privacy policy complies with Regulation (EU) 2016/679 of the European Parliament and Council, of April 27, 2016, regarding the protection of natural persons with respect to the processing of personal data and the free movement of such data (GDPR), with Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), as well as insofar as it is not contrary to the aforementioned regulations, with Organic Law 15/1999, on the Protection of Personal Data (LOPD) and its implementing regulations, and/or those that could replace or update it in the future.
Our organization is committed to the privacy of your personal data. The personal data provided is necessary to provide our services and is processed in a lawful, fair and transparent manner, guaranteeing adequate security thereof, including protection against unauthorized or unlawful processing and against loss, destruction or accidental damage through the application of technical and organizational measures.
Through this document we want to offer you transparently and fairly all the necessary information regarding the processing of your personal data carried out by this organization.
I.- DATA CONTROLLER
IDENTITY: PENTA CENTRO DE ANÁLISIS CLÍNICOS, S.L.
TAX ID / VAT NUMBER: B82055278
ADDRESS: PLAZA DE LOS DEPORTES, 7 LOCAL 1, 03590 ALTEA (ALICANTE)
TELEPHONE: 965843847
E-MAIL: info@pentalaboratorio.com
DATA PROTECTION OFFICER: dpo@procoden.es
II.- RECIPIENTS OF PERSONAL DATA
1.- The personal data provided will not be transferred to anyone unless provided for in specific processing.
2.- Optionally, for the contracting of cloud computing services and/or email sending services, communications, as well as other related computer services, personal data may be:
– Transferred to IT service companies located within the European Economic Area (EEA) or,
– Transferred to IT service companies located outside the EEA that have adopted the Privacy Shield framework and therefore have adequate protection measures to guarantee the security of personal data. You can obtain more information by visiting this link: https://www.privacyshield.gov/welcome
3.- Optionally, to administrations and other bodies when required to comply with legal obligations.
III.- LEGAL BASIS LEGITIMIZING THE PROCESSING OF PERSONAL DATA
In each specific processing of personal data we will inform you of the legal basis that legitimizes it.
IV.- RIGHTS
RIGHT OF ACCESS
It is the right to obtain from the data controller confirmation of whether or not personal data concerning you is being processed and, if so, the right of access to the personal data and the following information: the purposes of processing, the categories of personal data in question, the recipients or categories of recipients to whom the personal data has been or will be communicated, the retention period or the criteria used to determine this period, the existence of the right to request from the controller the rectification or deletion of personal data or the limitation of processing of personal data relating to you or to object to such processing, the right to lodge a complaint with the Spanish Data Protection Authority (AEPD), the existence, where applicable, of automated decision-making, including profiling, when data is transferred to third countries the right to be informed of the appropriate safeguards applied.
RIGHT OF RECTIFICATION
It is the right to request the rectification of your personal data if they are inaccurate, including the right to complete data that is incomplete. It should be noted that by providing us with personal data through any means, you guarantee that it is true and accurate and commit to notifying us of any changes or modifications to it. Therefore, any damage caused due to communication of erroneous, inaccurate or incomplete information in the website forms will be the exclusive responsibility of the interested party.
RIGHT TO ERASURE
It is the right to request the erasure of your personal data when, among other circumstances, they are no longer necessary for the purpose for which they were collected, or are being processed otherwise, or you withdraw consent. It should be noted that erasure shall not apply when the processing of personal data is necessary, among other circumstances, for compliance with legal obligations or for the establishment, exercise or defense of legal claims.
RIGHT TO RESTRICT PROCESSING
It is the right to request the restriction of processing of your personal data, which means that in certain cases you may ask us to temporarily suspend the processing of your personal data or to retain it beyond the necessary time when you may need it.
RIGHT TO WITHDRAW CONSENT
It is the right to withdraw the consent you have provided by checking "I have read and accept the privacy policy" at any time and as specified in the corresponding section "Exercise of rights" or in the specific treatment of commercial communications or Newsletter. It should be noted that this right will not take effect if, among other cases, the processing of personal data is necessary for compliance with a legal obligation, the execution and maintenance of a contractual relationship, or for the establishment, exercise or defense of legal claims. Likewise, the withdrawal of consent will not have retroactive effect, that is, it will not affect the lawfulness of the processing based on consent prior to its withdrawal.
RIGHT TO DATA PORTABILITY
It is the right to receive the personal data that concerns you and that you have provided to us, in a structured, commonly used and machine-readable format, and to transmit them to another controller, provided that: the processing is based on your consent and is carried out by automated or computer means.
RIGHT TO OBJECT
It is the right to object to the processing of your personal data on the basis of our legitimate interest. We will not continue to process your personal data unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims.
RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
If you believe we are processing your personal data incorrectly, you can contact us or you also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD):
https://www.agpd.es/portalwebAGPD/index-ides-idphp.php
EXERCISE OF RIGHTS
You can exercise your rights by sending a letter to the postal address indicated above or by email to info@pentalaboratorio.com, attaching in both cases a copy of your ID/NIE/Passport or similar document.
V.- PROCESSING OF PERSONAL DATA.
GENERAL PROVISIONS
The personal data requested in each of the specific processing are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed, thus complying with the principle of data minimization.
The personal data requested in each of the specific processing are strictly necessary; refusal to provide them would mean not being able to provide the requested service.
The communications of personal data provided for in each of the specific processing are in some cases necessary for the execution and maintenance of a contract and in other cases for compliance with a legal obligation applicable to the data controller.
DIGITAL ASSISTANT – "CHATBOT" OR "ONLINE CHAT"
In case this website uses online chat software, provided as a self-service to facilitate users with an appropriate and quick response to frequently asked questions and to improve customer service for the benefit of users visiting the website, the following data will be processed during the conversation with the "chat bot": the IP address and other personal data that is entered in the "chat bot" conversation function.
The collected data will not be used to personally identify the website visitor, and will not be merged with personal data about the bearer of the pseudonym, unless personal data is provided voluntarily when using the online chat.
The legal basis for this processing is established in Article 6, paragraph 1, letter f) of the GDPR.
CONTACT FORM
Personal data will be processed to channel information requests, suggestions and complaints from users or customers.
The legal basis that legitimizes the processing of personal data is express consent by checking "I have read and accept the privacy policy".
Personal data will be retained for a period of two years from the moment they stop being processed, without prejudice to the exercise of your rights as the interested party.
E-COMMERCE FORM
Personal data will be processed to manage your online purchases through the processing of your orders and returns through our online services, to send you notifications about the status of the delivery or in case of problems with the shipping of items, to manage your payments, manage any complaint or issue regarding product or service warranties, identify you and validate your legal age to contract, as well as for the establishment, exercise or defense of legal claims where applicable.
The legal basis that legitimizes the processing of personal data is express consent by checking "I have read and accept the privacy policy".
Personal data will be transferred to the transport company to be able to deliver your order to your home as well as to payment service providers.
Personal data will be retained as long as you do not withdraw consent, unless it must be retained for the maintenance of the relationship between the parties or for the necessary years to comply with legal obligations.