Privacy Policy
Data Protection
Information about how we process your personal data in accordance with the GDPR and LOPDGDD.
Privacy Policy
The purpose of this policy is to inform data subjects about the various processing activities carried out by this organisation through the website that affect their personal data, in accordance with the provisions of Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights, and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016.
1. Identification and contact details of the controller and data protection officer
Data Controller
Owner: Biohealth Dental Spain S.L. (hereinafter, BDS). Registered office: Partida Lliriet 14, 03502 Benidorm, Alicante, Spain Phone: +34 688 915 757 Email for exercising rights: notificacionline@gmail.com IMPORTANT: this email address is exclusively for exercising personal data protection rights. For enquiries related to dental treatments, please use: info@bdspain.com. Tax ID (CIF): B16994683
Data Protection Officer
Company name: ASESORÍA JURÍDICA BDS Tax ID: B16994683 Address: Partida Lliret 14, 03502 Benidorm, Alicante, Spain Phone: +34 688 915 757 Email: notificacionline@gmail.com
2. Purposes of processing your personal data
Website users/visitors
Responding to call requests or information requests received through the website contact channels.
Managing appointment requests at the different clinics that may be part of the group. Requesting an appointment through this means implies acceptance of this policy. Alternatively, you may request an appointment in person or by phone at your trusted clinic.
Sending promotions, discounts, contests, gifts and other commercial communications to those who have checked the corresponding box (email, SMS or phone call).
Sending an informative summary about Blog publications to subscribers.
Understanding visitor behaviour in order to detect potential cyber attacks.
Complying with legal obligations applicable to our activity.
Protecting and exercising our rights or responding to claims.
Providing medical advice via video call with recording and capture of image and sound.
Performing statistical calculations and segmentations, as well as scheduling appointments or video calls through the chatbox, without storing the data included therein.
Users of the controller's APP
We will process your personal data to:
Personalise the provision of BDS services:
(i) appointment management and reminders;
(ii) communication of test results;
(iii) patient follow-up;
(iv) sending communications through the APP about promotions, discounts, contests, gifts and other commercial communications to users who have authorised it.
Understanding APP user behaviour for cybersecurity purposes.
Complying with applicable legal obligations.
Protecting and exercising our rights or responding to claims.
Job applicants or employment candidates
Managing your application.
Communicating with you about the status of the selection process.
Navigation analytics necessary for website cybersecurity.
Protecting and exercising our rights or responding to claims.
3. Legal basis for processing
Website users/visitors
Consent given for the indicated purposes. Refusal to provide data makes processing for these purposes impossible.
Compliance with legal obligations applicable to us. The data subject cannot object to this processing.
Legitimate interest in protecting our image, business and reputation, preventing attacks on the website. The data subject cannot object, without prejudice to the rights in section 8.
Users of the controller's APP
Consent for the indicated purposes.
Legal compliance with applicable obligations.
Legitimate interest in cybersecurity and service continuity.
Job applicants or employment candidates
Consent to manage the application.
Legal compliance with applicable obligations.
Legitimate interest in website cybersecurity. Without prejudice to the rights in section 8.
4. Data retention periods or criteria
Personal data will be retained for the time necessary to fulfill the purposes for which it was collected. Once no longer necessary, it will remain blocked to be made available to competent Public Administrations or Bodies, Judges and Courts or the Public Prosecutor's Office, during the limitation periods for actions and/or legally established retention periods.
In the case of CVs, we will retain your data for a maximum of one year from receipt, unless authorisation is given for a longer period.
5. Automated decisions and profiling
The website does not make automated decisions or create profiles.
6. Recipients
During the processing of your data, the organisation may transfer it to:
Judges and Courts.
Law enforcement agencies.
Other competent authorities or public bodies when there is a legal obligation.
In addition, the provider hosting this website, Vercel Inc. (United States), processes as data processor the technical data needed to serve the website, such as the IP address and access logs.
7. International data transfers
This website is hosted by Vercel Inc., based in the United States. When you visit it, technical connection data (such as your IP address) may be processed outside the European Economic Area.
This international transfer is covered by the EU-U.S. Data Privacy Framework and, where applicable, by the standard contractual clauses approved by the European Commission, which ensure an adequate level of protection.
You can read Vercel’s privacy policy at vercel.com/legal/privacy-policy
8. Rights
You may exercise, at any time and free of charge, the rights of access, rectification, erasure, restriction of processing, objection, portability (where technically feasible), and withdraw consent given. Where applicable, you may also request not to be subject to decisions based solely on automated processing, including profiling.
To exercise these rights, use the forms provided by the organisation or send a written request to the postal or email addresses indicated in section 1. You must attach a copy of your ID or equivalent document to verify your identity.
If you consider that your rights have been violated, especially if you do not obtain satisfaction in exercising them, you may file a complaint with the competent supervisory authority (Spanish Data Protection Agency) at www.aepd.es.
In compliance with Article 21 of Law 34/2002 (LSSI), if you no longer wish to receive commercial communications, you may unsubscribe by sending an email to pedidosbds@bdspain.com with the subject "UNSUBSCRIBE", or by using the unsubscribe link included in each communication.
9. Data accuracy
The data subject guarantees that the data provided is true, accurate, complete and up to date, and undertakes to communicate any changes through the channels provided. They shall be liable for any damages that may result from breach of this obligation.
If the user provides third-party data, they declare that they have their consent and undertake to convey the information in this policy to them, exempting the organisation from liability for non-compliance.
10. Social networks
The Entity maintains profiles on various social networks. Website users may join these networks or groups. Unless we request your data directly (e.g., marketing actions, contests, promotions), the data will belong to the corresponding social network. We recommend reviewing their terms of use and privacy policies and configuring your data processing preferences.
11. Modifications / updates
This privacy policy may be modified or updated due to legal requirements or to adapt it to instructions from the Spanish Data Protection Agency or changes to our website. We recommend reviewing it periodically.
If you have any questions, you may contact BDS at pedidosbds@bdspain.com.