Global Healthcare Privacy Polic

Last updated: July 2021

We are a company who consider that transparency is essential to establish a relationship of trust with those who work on our projects, with our suppliers and customers, being of vital importance the protection of their personal data. Through this Privacy Policy we aim to inform you how we collect, treat, or use such data.

This Privacy Policy establishes the basis on which the company treats the personal data voluntarily provided by our users through the website.

This Privacy Policy will always be applicable when data is voluntarily provided to the company through any of the contact or subscription forms where personal data is collected (name, email, etc.). Global Healthcare will be responsible for your data (Data Controller).

• • We are committed to respecting the privacy of our users, treating their personal data with the according consent.
  • To treat the personal data that we strictly need to provide the requested service, in a securely and confidentially manner, we take the necessary measures to prevent unauthorized access and misuse.
  • We don’t use personal data for purposes that we have not previously obtained consent for.
  • We don’t give personal data to third parties or share this information if not authorized.
  • We keep personal data for the strictly necessary time for the specific purpose for which this information has been provided.

Company name: GHC 360 Group, S.L.
TAX ID: B01843481
Address: C/ Fernando VI, 17, 1º. 28004, Madrid

Personal data consists of any information about an identified or identifiable natural person. An identifiable natural person is any person whose identity can be established directly or indirectly, in particular by means of an identifier, such as a name, an identification number, location data, an online identifier, or one or more elements of that person’s physical, physiological, genetic, mental, economic, cultural, or social identity.

Likewise, the processing of personal data implies any operation or set of operations carried out on personal data or sets of personal data, whether by automated procedures or not, such as collection, recording, organization, structuring, storage, adaptation or modification,

extraction, consultation, use, communication by transmission, dissemination, or any other form of enabling access, matching or interconnection, restriction, erasure or destruction.

• • Information request from the user: Manage the request for information sent by the user through the contact form and / or email address, postal mail and / or telephone number provided through the website.
  • Newsletter subscription: Manage the subscription to the newsletter.
  • User profile registration and access: Manage the registration and access to the user portal through the corresponding user account and password.
  • Blog comments management: Manage the sending and receiving of comments that the user has left on the blog.

Through our website we may collect personal data for different purposes:

• Information request from the user: We will gather the personal data provided by the user for the purpose of the query raised.
• Newsletter subscription: We will collect your e-mail address.
• User profile registration and access: Username and password, as well as any other data that has been provided to create the account or profile.
• Blog comments management: Any data that has been provided when publishing the corresponding comment.

Depending on the purpose for which the data is provided, the information strictly necessary will be required.

The user must be aware of the data provided and the final purpose for which it is provided because, at the moment the data is provided, the user is accepting that we collect, store and use such data for the required purpose, and may at any time withdraw the consent given through the appropriate channels, being the consent of the interested party the legal basis and legitimacy for the processing of personal data.

In accordance with the current legislation on data protection, we need a legitimate basis for the processing of your personal data. The basis of legitimacy is your consent.

As a user, you can exercise the following rights:

• Right of access: You have the right to obtain confirmation from the company as to whether or not your personal data is being processed, and if so, what data is being processed.
• Right of rectification: You have the right to obtain from GHC 360 Group, S.L. the rectification of inaccurate personal data that concerns you. In the rectification request, you must indicate the data you wish to be modified.
• Right of opposition: You have the right to object at any time, for reasons related to your situation, to the processing of your personal data on grounds of the legitimate interest of the company. In this case, the company will stop processing the personal data, unless we can demonstrate legitimate grounds for the processing that override your interests, rights, and freedoms, or for the formulation, exercise, or defense of claims.
• Right of suppression: You have the right to request GHC 360 Group, S.L. to delete your personal data.
• Right to data portability: You have the right to have the company transfer your personal data to another data controller. This right can only be exercised when the processing is based on the performance of a contract or on your consent, and the processing is carried out by automated means.
• Right to limitation of processing: You have the right to ask the company to suspend the processing of your data when: you dispute the accuracy of the data, pending verification of its accuracy; you have exercised the right to object to the processing of your data, pending verification of whether the legitimate reasons of GHC 360 Group, S.L. outweigh those of you as the data subject.

At any time, you may exercise these rights by writing to the Data Controller at the address indicated above, or by e-mail to: atriginer@globalhealthcare.es.

In addition, you may file a complaint with the supervisory authority, in this case, the Spanish Data Protection Agency, if you consider that the processing of personal data infringes the applicable legislation.

We will maintain the data for the time strictly necessary for the provision of the requested service and if the holder does not request its deletion. We are committed to taking appropriate technical and organizational measures against unauthorized or unlawful processing and against accidental loss, destruction, or damage, making every effort to protecting them and keeping them secure.

No transfers of data are foreseen except in those cases where there is a legal obligation or communication necessary to provide you with the requested service adequately