Legal
Privacy policy
In compliance with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 (LOPDGDD) and Law 34/2002 (LSSICE), Surgimob SL sets out below how personal data is processed through this website.
1. Data controller
- Company name: Surgimob SL
- Tax ID (CIF): B05383997
- Registered address: Calle Príncipe de Vergara, 2, 1º Izq., 28001 Madrid, España
- Commercial Registry: Registro Mercantil de Madrid, Tomo 41768, Folio 139, Sección 8, Hoja M-739857, Inscripción 1
- Email: info@dlcirugiaoral.com
- Data protection contact: info@dlcirugiaoral.com
- Registered professionals in charge: Dr. Juan Lara Chao, nº colegiado 28009429 (COEM)
2. Purposes
Your data is processed in order to:
- Answering the enquiries and requests sent through the contact form.
- Meeting applicable legal obligations, in particular tax and accounting ones.
- Keeping the service secure: the server records the requests it receives in order to detect attacks and diagnose faults.
What you send through the form is recorded in our own email platform (mails.surgimob.com), which is what we use to reply to you and to follow up on your request. We run it ourselves: it is not a third-party marketing service.
You are not added to any marketing list: your data is used only to reply to you and for the purposes above.
3. Data processed
- What you type into the form: whatever the form asks for, and whatever you choose to tell us in the free-text field.
- Technical details of the request: IP address, date and time, page requested and browser, written to the server log.
- This website does not collect health data over the internet.
4. Legal basis
- Your consent, given when you submit the form (Article 6(1)(a) GDPR).
- Performance of a contract or pre-contractual steps, when you request a place or place an order (Article 6(1)(b)).
- Compliance with legal obligations (Article 6(1)(c)).
- The legitimate interest in keeping the service secure, for the server access log (Article 6(1)(f)).
5. Retention
- Form messages: for as long as the relationship lasts and, afterwards, for the applicable limitation periods.
- Server access log: 30 days.
6. Recipients
- Hosting: DigitalOcean (our own server in Amsterdam, the Netherlands).
- Our own email platform (mails.surgimob.com), run by Surgimob SL on its own server in North Bergen (New Jersey, United States): it keeps your contact details if you write to us, and the pages you visit if you accept the cookie in the notice.
- Email: Google Workspace (Google Ireland Limited), which delivers the notice for each form.
- Public authorities, where a legal obligation requires it.
- Beyond those cases, your data is not shared with anyone and is not used for profiling.
7. Cookies
This website uses ONE cookie, and only if you accept it in the notice that appears when you arrive: the one that lets us recognise you when you come in from a link in one of our emails. If you press “Only what is needed”, or press nothing, none is set. There is no third-party audience measurement, no advertising and no social buttons. It is explained in detail in the cookie policy, and you can change your mind whenever you like.
8. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent at any time without retroactive effect. To do so, write to info@dlcirugiaoral.com or to Calle Príncipe de Vergara, 2, 1º Izq., 28001 Madrid, España, proving your identity.
If you believe the processing does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
9. Security measures
Surgimob SL applies reasonable technical and organisational measures to protect your data: the site is always served encrypted (HTTPS), access to the server is restricted, and form messages are stored outside the site’s public folder.
10. International transfers
Hosting for this website is within the European Union. Our email platform runs on our own server in North Bergen (New Jersey, United States), so your contact details are kept outside the European Economic Area. The email provider belongs to a group headquartered in the United States. Any transfers rely on the EU-US Data Privacy Framework and on the standard contractual clauses approved by the European Commission that the infrastructure providers have in place.
11. Changes
Surgimob SL may update this policy by publishing it on the website. We recommend reviewing it from time to time.