Privacy Policy

Dermika Longevity Health Center, SL, is committed to protecting the privacy of users who access this website and/or any of its services. The use of the website and/or any of the services offered by Dermika Longevity Health Center, SL, implies acceptance by the user of the provisions contained in this Privacy Policy and that their personal data will be treated as stipulated therein. Please note that although there may be links from our website to other websites or social networks, this Privacy Policy does not apply to the websites of other companies or organizations to which the website is redirected. Dermika Longevity Health Center, SL, does not control the content of third party websites, nor does it accept any responsibility for the content or privacy policies of these websites.

Basic information on data processing (Regulation (EU) 2016/679 and LO 3/2018).

Responsible for the treatment

Dermika Longevity Health Center, SL

TAX ID: B22698518

Torremirona Sport & Spa, Av. Josep Maira de Ventós s/n, 17744 Navata (Girona)
Email: emporda@halolongevity.es

Purpose of the treatmentTo offer and manage our aesthetic and aesthetic medicine services.
Legitimation

Consent obtained from the interested party when requesting information from us.

Execution of the service contract when you contract with us.

RecipientsThe data will not be communicated to third parties, unless it is required by law or is necessary to fulfill the purpose of the processing.
Rights of individualsData subjects are entitled to exercise their rights of access, rectification, limitation of processing, deletion, portability and opposition by sending their request to our address.
Data retention periodAs long as the business relationship is maintained or for the years necessary to comply with legal obligations.
ComplaintInterested parties may contact the AEPD to file the claim they deem appropriate.
Additional InformationAdditional detailed information can be found below in the “Privacy Questions”.

Privacy Questions

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and the Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD) we provide you with the following information on the processing of your personal data:

Who is responsible for the processing of your data?

Identity: Dermika Longevity Health Center, SL

TAX ID: B22698518

Address: Torremirona Sport & Spa, Av. Josep Maira de Ventós s/n, 17744 Navata (Girona)

Tel.: +34 643 63 17 15
Email: emporda@halolongevity.es


For what purposes do we process your personal data?

  • We process the information provided to us to manage our aesthetic and aesthetic medicine services.
  • In the event that you contact us through the contact form on our website, we will treat them to handle your inquiry.
  • We may also use your data to inform you about our activities, products or services when you are already our customer or, if you are not, when you have provided us with your consent to do so.
  • When accessing our facilities, your image may be recorded by video surveillance cameras for security control purposes.
  • If you send us a resume, we will process the data in order to manage the database of CV’s for recruitment purposes.

How long will we keep your data?

The personal data provided will be kept for as long as you are a user of our services or wish to receive information, given that you can object to the processing of your data for promotional purposes at any time by contacting us at info@dermika.es, and then for the periods established to comply with our legal obligations, which in the case of accounting and tax documentation for commercial purposes will be 6 years, in accordance with Art. 30 of the Commercial Code, and for tax purposes will be 4 years, in accordance with Articles 66 to 70 of the General Tax Law.

  • The images captured by the video surveillance system will be kept for one month.
  • In the case of resumes, the data will be kept for one year.


What is the legitimacy for the processing of your data?

For the management of the contractual relationship with the data subject, we will base the processing of the data on the execution of the contract or within the framework of the pre-contractual relationship.

For the sending of commercial information we will base the treatment on your consent, although if you are already our customer, we may send you information about our products and services, always providing a simple and free means to unsubscribe, in accordance with the provisions of Article 21.2 of Law 34/2002, of July 11, 2002, of services of the information society and electronic commerce.

With respect to information sent by minors under 14 years of age, it will be an essential requirement that it be done with the consent of the minor’s parent, guardian or legal representative in order for the personal data to be processed. If this is not the case, the legal representative of the minor will inform us as soon as he/she becomes aware of it.

Regarding the capture of images by the video surveillance system, the legitimacy is given by the legitimate interest of preserving the security of persons and property.

To which recipients will your data be communicated?

The data will not be communicated to third parties, unless required by law or necessary to fulfill the purpose of processing.

What are your rights when you provide us with your data?

  • Any person has the right to obtain confirmation as to whether or not we are processing his or her personal data.
  • Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
  • In certain circumstances the interested parties may request the limitation of the processing of their data, in this case we will only keep them for the exercise or defense of claims.
  • Also, in certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In this case, we will stop processing the data, except for compelling legitimate reasons or for the exercise or defense of possible claims.
  • Data subjects also have the right to data portability .
  • Every data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.
  • Finally, interested parties have the right to file a complaint with the competent supervisory authority.


How can you exercise your rights?

By sending a written request, attaching a copy of a document that identifies you, to our physical or e-mail address.

How did we obtain your data?

The personal data that we process comes from the interested party. The interested party guarantees that the personal data provided are true and is responsible for communicating any changes to them. The data marked with an asterisk are mandatory in order to provide the requested service.

What data do we process?

The categories of data that we may process in the provision of our services are:

  • Identifying data
  • Postal or e-mail addresses

In the case of the video surveillance system:

  • Image

In the case of curricula, too:

  • Personal characteristics
  • Academics and professionals

The data is limited, since we only process the data necessary for the provision of our services and the management of our activity.

Do we make international data transfers?

For the receipt and sending of commercial communications we use the WhatsApp application, owned by META, located in the United States. The international transfer of data is based on the Standard Contractual Clauses for processors approved by the European Commission, and on the Commission Implementing Decision of 10.7.2023 in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate level of protection of personal data under the EU-US Data Privacy Framework agreement.

Do we use cookies?

We use cookies while browsing our website with the user’s consent.

The user can configure his browser to be notified of the use of cookies and to prevent their use. Please visit our cookie policy.

What security measures do we apply?

We apply the security measures established in Article 32 of the GDPR, therefore, we have adopted the necessary security measures to ensure a level of security appropriate to the risk of data processing we perform, with mechanisms that allow us to ensure the confidentiality, integrity, availability and ongoing resilience of systems and processing services.

Some of these measures are:

  • Information of the data processing policies to the personnel.
  • Performing periodic backups.
  • Data access control.