PRIVACY POLICY
Preliminary information
rehabilify considers your personal information is very important; we therefore process it confidentially and securely. We are committed to ensuring the privacy of personal data at all times and not to collect unnecessary information.
Who processes the data?
The users are informed that they can find the following entities acting as co-data controllers under the rehabilify brand:
- Identity
- FUNDACIÓ EURECAT
- Tax Identification Code (NIF)
- G66210345
- Registered office
- Parc Tecnològic del Vallès. Avinguda Universitat Autònoma, 23 – 08290 Cerdanyola del Vallès (Barcelona)
- Email address
- legal@eurecat.org
- Data Protection Officer
- dpo@eurecat.org
- Identity
- Doole Health S.L.
- Tax Identification Code (NIF)
- B67450478
- Registered office
- Ctra Canyet, s/n, Hospital Germans Trias i Pujol, Edificio Maternal 2ª planta, 08916, Badalona, (Barcelona)
- Email address
- info@doolehealth.com
- Data Protection Officer
- dpd@cipdi.com
What data do we collect, for what purposes and how long do we store them?
data processing purpose and legal basis storage period Functioning of the Website Managing the correct functioning of the website and its operation: personal data will be processed to the extent they are strictly necessary for the purpose of providing and guaranteeing the security of the application and the information, the basis being the legitimate interests pursued by the controller, according to Article 6.1.f) of the GDPR. The data will be stored for the period the data subject has subscribed to the Newsletter or until he/she exercises the right to object to or erase the data. However, they may be stored in order to determine the possible liabilities that could arise for such purpose. Records The personal data collected in the registration form will be processed for the purpose of managing the request to form part of our team as a developer. Processing of personal data is legitimate by applying pre-contractual measures to your request according to Article 6.1.b) of the GDPR. The data will be stored until a decision has been made on the request. In all cases, they may be stored in order to determine the possible liabilities that could arise for such purpose To whom will the data be disclosed?
We will not disclose your personal data to third parties, unless there is a legal obligation for us to do so, or you provide us with your express consent.
Are data transferred internationally?
There are no international data transfers to countries outside the European Union.
What are your rights as a user and how can you exercise them?
Right to access the data
As a user, you can ask us to explain what we do with your personal data.
You can also ask us for information about the purpose of the processing of your personal data, the period of time for which we store them, your rights as a user and the transfer of the data to a third country or an international organization, the existence of automated decisions or profiling on the website, among others.
Right to rectification
If the personal data you have provided to us are inaccurate or incomplete, you are entitled to rectify or supplement them. Please contact us and we will rectify the data according to your request.
Right to restrict processing
As a user you can request restriction of the processing of your personal data in the following cases:
- If you question the accuracy of your personal data, for a period of time that allows us to verify their accuracy.
- If the processing is unlawful and you object to the erasure of your personal data and, instead of erasure, you request that their use is restricted.
- If we no longer need your data for the purposes of processing, but they are needed for filing, exercising or defending legal claims.
Right to erasure
You can request us to erase your personal data immediately. We are obliged to erase the data immediately if they are no longer required for the purpose for which they were collected. In addition, you can ask us to erase your data if you change your mind about the consent you granted, if you object to the processing and there are no justified grounds for it, if your data are processed incorrectly, if the data must be erased in order to comply with a legal obligation or if the data has been obtained related to a legal offer.
Right to information
If you have exercised a right to rectify, erase or restrict your data, we are obliged to inform all the recipients to whom your personal data have been disclosed of such rectification, erasure or restriction of processing, unless this proves impossible or involves a disproportionate effort.
As a user, you are entitled to be informed by the data controller about who these recipients are.
Right to data portability
You are entitled to receive the personal data you have provided to us in a structured, commonly used and machine-readable format. You are also entitled to transfer this data to another data controller without us being able to prevent this.
Right to object to the data processing
As a user, you are entitled to object to our use of the personal data made available to us at any time for reasons related to your personal situation.
We will stop processing your personal data unless we have compelling legitimate grounds to use them, if such grounds override your interests, rights and freedoms or if the processing is for filing, exercising or defending legal claims.
Right to withdraw the declaration of consent related to data protection
As a user you are entitled to change your declaration of consent related to data protection at any time. This change of decision regarding the consent will not affect the legality of the processing that took place on the basis of the consent provided prior to its withdrawal.
Automated individual decisions, including profiling
You are entitled not to be subject to a decision solely based on automated processing, including profiling, which has legal effects for you or significantly affects you in a similar way.
Right to submit a complaint to a supervisory authority
As a user you are entitled to submit a complaint to a supervisory authority, in particular in the Member State of your residence, place of work or place of infringement, if you consider the processing of your personal data implies a violation of the GDPR.
Where can you exercise your rights?
You can request to exercise your rights at:
- FUNDACIÓ EURECAT, at the following e-mail address: legal@eurecat.org
- Doole Health S.L., at the following e-mail address: info@doolehealth.com
- Is it mandatory to provide all the information requested in the data collection forms?
Regarding the forms posted on the website, you must fill in the fields marked as "required". Failure to complete the required personal data or only partially complete them could mean that Rehabilify will be unable to deal with your requests and, therefore, Rehabilify will be held harmless for any liability due to not rendering or only partially rendering the requested services.
The personal data provided by the user to rehabilify must be current information so that our records are up to date and error-free. The user is responsible for the veracity of the data provided.
What security measures have we implemented?
You are hereby informed that rehabilify protects and uses your personal data according to the regulations in force on data protection and information society services.
rehabilify have implemented the necessary technical and organizational security measures to guarantee the security of the users’ personal data and prevent their alteration, loss, unauthorized processing and/or access thereto, bearing in mind the state of the art, the kind of data provided and the risks to which they could be exposed, whether due to human action or physical or natural factors, in accordance with the provisions in the regulations in force.