Privacy Policy
Who is the controller of your personal data?
ADN Institut, Institut d’Assessorament i Diàgnostic Genètic S.L. is the Controller of the USER’s personal data and informs him/her that these data shall be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April (GDPR) and the Organic Law 3/2018 of 5 December (LOPDGDD) .
For what purpose do we process your personal data and why do we do it?
Depending on the form from which we have obtained the personal data, we will process it confidentially for the following purposes:
For what purpose do we process your personal data and why do we do it?
Depending on the form from which we have obtained the personal data, we will process it confidentially for the following purposes:
In the form Contact
-Respond to queries or any type of request made by the user through any of the contact methods available at the controller’s website.
(for the legitimate interest of the person in charge, art. 6.1.f GDPR)
-Send commercial advertising communications by email, fax, SMS, MMS, social networks or by any other electronic or physical means, present or future, that make it possible to carry out commercial communications. These communications will be made by the controller and will be related to their products and services, or those of their partners or suppliers with whom they have reached a promotion agreement. In this case, the third parties will never have access to personal data.
(by the consent of the interested party, 6.1.a GDPR)
-Conduct statistical analysis and market research.
(for the legitimate interest of the person in charge, art. 6.1.f GDPR)
In the form Newsletter
-Send newsletters, news, offers and online promotions.
(by the consent of the interested party, 6.1.a GDPR)
In the form Testimonials
To moderate and publish on the website the user’s experiences, opinions and suggestions about a product or service .
(by the consent of the interested party, 6.1.a GDPR)
In the form Comments
-Moderate and publish feedback on a publication on the website.
(by the consent of the interested party, 6.1.a GDPR)
In the form Ethical or complaints channel
-To properly manage our ethical channel, processing the corresponding irregularities reported through it and deciding on the appropriateness of initiating an investigation, in order to detect possible offences and prevent the imposition of any type of liability, as well as to avoid any type of conduct contrary to the internal or external regulations of the entity.
(for compliance with a legal obligation, 6.1.c GDPR)
In the form User register
-Manage the user’s account in order to provide personalised access to the website and the interactive services offered
(by the consent of the interested party, 6.1.a GDPR)
In the form E-commerce
-Manage the purchase or online order, process the payment and proceed with the shipment or activation of the same, based on the general contracting conditions.
(for the execution of a contract or pre-contract, 6.1.b GDPR)
-Manage, maintain, improve or develop the services provided.
(for the execution of a contract or pre-contract, 6.1.b GDPR)
-Conduct satisfaction and quality surveys.
(for the legitimate interest of the person in charge, art. 6.1.f GDPR)
In the form Citas
-Schedule appointments and meetings with the controller.
(for the legitimate interest of the person in charge, art. 6.1.f GDPR)
Social networks
-Contact through Social Networks in order to maintain a relationship between the User and the Responsible, which may include the following operations: – Process your requests and queries. – Inform about activities and events. – Inform about products and/or services. – Interact through official profiles. The user has a profile on the same social network and has decided to join the Responsible Party’s social network, thus showing their interest in the information published on it, therefore at the time of requesting to follow our official page, they provide us with your consent to the processing of your data. The User can access the privacy policies of the social network itself at any time, as well as configure their profile to guarantee their privacy. Once the User is a follower or has joined the Responsible Party’s social network, they may publish comments, links, images, photographs or any other type of content supported by it. The User, in all cases, must be the owner of the published content, enjoy the copyright and intellectual property rights or have the consent of the affected third parties. – – Sending commercial communications related to the activities of the Group companies, as well as companies outside the Group, with which commercial collaboration or intermediation agreements have been established.
(by the consent of the interested party, 6.1.a GDPR)
Instant messaging
-Schedule appointments and meetings with the controller.
(for the legitimate interest of the person in charge, art. 6.1.f GDPR)
-Send commercial advertising communications by email, fax, SMS, MMS, social networks or by any other electronic or physical means, present or future, to customers, which enable commercial communications concerning products or services that are similar to those that were initially contracted with the customer (art. 21.2 LSSI).
(for the legitimate interest of the person in charge, art. 6.1.f GDPR)
-Manage, maintain, improve or develop the services provided.
(for the execution of a contract or pre-contract, 6.1.b GDPR)
-Manage the purchase or online order, process the payment and proceed with the shipment or activation of the same, based on the general contracting conditions.
(for the execution of a contract or pre-contract, 6.1.b GDPR)
-Send commercial quotes on products and services.
(for the execution of a contract or pre-contract, 6.1.b GDPR)
-Send commercial advertising communications by email, fax, SMS, MMS, social networks or by any other electronic or physical means, present or future, that make it possible to carry out commercial communications. These communications will be made by the controller and will be related to their products and services, or those of their partners or suppliers with whom they have reached a promotion agreement. In this case, the third parties will never have access to personal data.
(by the consent of the interested party, 6.1.a GDPR)
-Respond to queries or any type of request made by the user through any of the contact methods available at the controller’s website.
(for the legitimate interest of the person in charge, art. 6.1.f GDPR)
Video surveillance
-Purpose Security and access control, labor control and i nternal activity Legitimation Public interest in security and access control and legitimate interest of the Responsible based on Art. 20.3 of the Workers’ Statute Conservation A maximum of 30 days
(by the consent of the interested party, 6.1.a GDPR)
Images and recordings
-File with static and/or dynamic images. Includes publication in the media of the data controller or third parties.
(by the consent of the interested party, 6.1.a GDPR)
Clients and suppliers
-Business management with customers and suppliers
(for the legitimate interest of the person in charge, art. 6.1.f GDPR)
Advertising exclusion
-Data management to avoid sending commercial communications to those who have expressed their refusal or opposition to receiving them.
(for compliance with a legal obligation, 6.1.c GDPR)
Commercial advertising
-Advertising management and commercial prospecting. Includes data from legitimate publicly accessible sources.
(for the legitimate interest of the person in charge, art. 6.1.f GDPR)
Right of the interested parties
-Respond to requests from citizens in the exercise of the rights established by the GDPR
(for compliance with a legal obligation, 6.1.c GDPR)
Users Web, app and other platforms of the person
-Identification data of the users who access the corporate website.
(for the legitimate interest of the person in charge, art. 6.1.f GDPR)
Data of minors or vulnerable
-The person in charge will not collect or process personal data of children under fourteen years of age, without fully complying with the requirements established in the applicable data protection regulations, in relation to compliance with the duty to inform and obtaining any necessary consents. The data collected will be processed for the management of the informed purposes. The person in charge has the appropriate security measures the security of these data.
(by the consent of the interested party, 6.1.a GDPR)
Legal representatives and contact persons
-In the event that you are the legal representative or contact person of any of the entities or persons with which the Foundation is related, the person in charge will process your data to control the development of the intended relationship.
(by the consent of the interested party, 6.1.a GDPR)
For how long will we keep your personal data?
Data shall be stored for no longer than is necessary to maintain the purpose of the processing or for as long as there are legal prescriptions dictating their custody, and when such purpose is no longer necessary the data shall be erased with appropriate security measures to ensure the anonymization of the data or their complete destruction.
To whom do we disclose your personal data?
No communication of personal data to third parties is foreseen except, if necessary for the development and execution of the purposes of the processing, to our suppliers of services related to communications, with which the CONTROLLER has signed the confidentiality and data processor contracts required by current privacy regulations.
Do we make international transfers?
In accordance with the provisions of article 44 of the GDPR, the authorization of international data transfer to a country that has not been declared as a country with an adequate level of protection can only be granted if they are obtained sufficient guarantees. Thus, it may be granted if the person responsible for the treatment provides a written contract, entered into between the exporter and the data importer, in which the necessary guarantees of respect for the protection of the interested parties are stated and the exercise of their rights is guaranteed.
It is possible that the person in charge has services from providers that have servers or headquarters in other places and, therefore, these transfers are made. To consult the updated list of suppliers, contact the person in charge or through info@adninstitut.com
What are your rights?
The rights of the USER are:
-Right to withdraw consent at any time.
-Right of access, rectification, portability and erasure of your data and the limitation or objection to their processing.
-The right to file a claim with the Spanish Supervisory Authority (www.aepd.es) if you consider that the processing does not comply
with the current legislation.
Contact information for exercising rights:
ADN Institut, Institut d’Assessorament i Diàgnostic Genètic S.L.. Avda. Cerdanyola, 57 Baixos, – 08172 Sant Cugat del Vallès
(Barcelona). E-mail: dpo@grupox3.es
Contact details of the data protection officer: Consultancy X3 S.L., Jaume Balmes 26, 07005 Palma de Mallorca –
gestion@grupox3.es
2. COMPULSORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER
The USERS, by marking the corresponding boxes and entering data in the fields, marked with an asterisk (*) in the contact form or download forms, accept expressly and in a free and unequivocal way that their data are necessary for the supplier to meet their request, voluntarily providing their data in the remaining fields. The USER ensures that the personal data provided to the CONTROLLER are true and is responsible for communicating any changes to them.
The CONTROLLER informs that all data requested through the website are mandatory, as they are necessary for provision of an optimal service to the USER. In the event that not all of the data is provided, there is no guarantee that the information and services provided will be completely adapted to the User’s needs.
If by some kind of means, you provide us with personal data of other people, the person in charge advises that you must do so with your consent and having informed, in advance, of the ends contained in this Privacy Policy. Likewise, the person in charge undertakes to provide any third party whose data provides us with the relevant information , in accordance with the provisions of article 14 of the General Regulations.
3. SECURITY MEASURES
That in accordance with the provisions of the current regulations on the protection of personal data, the CONTROLLER is complying with all the provisions of the GDPR and LOPDGDD regulations for processing the personal data for which they are responsible and is manifestly complying with the principles described in Article 5 of the GDPR, by which they are processed in a lawful, fair and transparent manner in relation to the data subject and appropriate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
The CONTROLLER guarantees that all appropriate technical and organisational policies have been implemented to apply the security measures established by GDPR and LOPDGDD in order to protect the rights and freedoms of the USERS, and has communicated the appropriate information for them to be able to exercise their rights and freedoms.
For more information about privacy safeguards, you can contact the DATA CONTROLLER via ADN Institut, Institut d’Assessorament i Diàgnostic Genètic S.L.. Avda. Cerdanyola, 57 Baixos, – 08172 Sant Cugat del Vallès (Barcelona). E-mail: dpo@grupox3.es
Contact details of the data protection officer: Consultancy X3 S.L., Jaume Balmes 26, 07005 Palma de Mallorca – gestion@grupox3.es
4. VALIDITY
This privacy policy is valid as of 05/11/2023
The person in charge reserves the right to modify this policy to adapt it to future legislative or jurisprudential updates that result from application, or for other technical, operational, commercial, corporate reasons, etc. If, as a result of the changes, the rights of the users are affected, the person in charge undertakes to inform about the reasons.
