[et_pb_section fb_built=”1″ fullwidth=”on” _builder_version=”4.24.2″ _module_preset=”default” background_color=”#009b7d” da_disable_devices=”off|off|off” global_colors_info=”{}” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on”][et_pb_fullwidth_header title=”Privacy Policy” _builder_version=”4.25.0″ _module_preset=”default” title_font=”||||||||” title_text_align=”center” title_font_size=”45px” title_line_height=”1.8em” subhead_font=”Inter|600|||||||” subhead_text_align=”center” subhead_font_size=”24px” subhead_line_height=”1.8em” background_enable_color=”off” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″][\/et_pb_fullwidth_header][\/et_pb_section][et_pb_section fb_built=”1″ _builder_version=”4.23.2″ _module_preset=”default” background_color=”gcid-fc7afca1-7302-4e55-829d-3d445387c282″ da_disable_devices=”off|off|off” global_colors_info=”{%22gcid-fc7afca1-7302-4e55-829d-3d445387c282%22:%91%22background_color%22%93}” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on”][et_pb_row _builder_version=”4.23.2″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.23.2″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.25.0″ _module_preset=”_initial” text_font=”Inter||||||||” text_font_size=”16px” text_line_height=”1.8em” text_font_size_tablet=”15px” text_font_size_phone=”14px” text_font_size_last_edited=”on|desktop” global_colors_info=”{}”]<\/p>\n
Welcome to the Vascular Lipedema website, please read our Privacy Policy.<\/span><\/p>\n In this privacy statement we explain what personal data we collect from users and how it is used. We encourage you to read these terms carefully before providing personal data on this website. Those over thirteen years of age may register on lipedemasvascular.com as users without the prior consent of their parents or guardians.<\/span><\/p>\n In the case of minors under thirteen years of age, the consent of their parents or guardians is required for the processing of their personal data.<\/span><\/p>\n Our website is protected by an SSL security certificate, your data is not visible over the internet.<\/span><\/p>\n Under no circumstances will data relating to the professional or economic situation or the privacy of other family members be collected from minors without their consent.<\/span><\/p>\n If you are under thirteen years of age and have accessed this website without notifying your parents, you should not register as a user.<\/span><\/p>\n On this website, the personal data of users is respected and taken care of. As a user you should know that your rights are guaranteed.<\/span><\/p>\n Vascular Lipedema (lipedemasvascular.com) has adapted this website to the requirements of Organic Law 15\/1999, of December 13, on the Protection of Personal Data (LOPD), and Royal Decree 1720\/2007, of December 21 , known as the Regulations for the development of the LOPD. It also complies with Regulation (EU) 2016\/679 of the European Parliament and of the Council of April 27, 2016 regarding the protection of natural persons (RGPD), as well as Law 34\/2002, of July 11, Information Society Services and Electronic Commerce (LSSICE or LSSI).<\/span><\/p>\n Identity of the Controller: Doctor Andr\u00e9s Reyes Valdivia<\/span> For the purposes of the provisions of the aforementioned General Data Protection Regulation, the personal data you send through the forms on the website will be treated as \u201cWebsite users and subscribers\u201d.<\/span><\/p>\n When processing your personal data, we will apply the following principles that comply with the requirements of the new European data protection regulation:<\/span><\/p>\n The personal data that I process at lipedemasvascular.com comes from:<\/span><\/p>\n Anyone has the right to obtain confirmation as to whether lipedemasvascular.com is processing their personal data.<\/span><\/p>\n Interested persons have the right to:<\/span><\/p>\n The interested parties may access their personal data, as well as request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.<\/span><\/p>\n In certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims.<\/span><\/p>\n In certain circumstances and for reasons related to their particular situation, interested parties may object to the processing of their data.<\/span><\/p>\n Lipedema Vascular will stop processing the data, except for legitimate reasons when:<\/span><\/p>\n By exercising your right to data portability, you have the right to have personal data transmitted directly from controller to controller where technically possible.<\/span><\/p>\n When a user connects to this website, they are providing personal information for which Lipedema Vascular is responsible. This information may include personal data such as your IP address, name, physical address, email address, telephone number, and other information. By providing this information, the user gives their consent for their information to be collected, used, managed and stored by www.lipedemasvascular.com, only as described in the Legal Notice and in this Privacy Policy.<\/span><\/p>\n In Vascular Lipedema there are different systems for capturing personal information based on forms:<\/span><\/p>\n Contact form: I request the following personal information: Name, Email, telephone number to respond to the requirements of users of https:\/\/www.lipedemasvascular.com.<\/span><\/p>\n Newsletter subscription form: In this case, we request the following personal data: Name, Email, to manage the subscription list, send newsletters, promotions and special offers, provided by the user when subscribing. The data will be located on MailChimp servers outside the EU in the US. MailChimp is covered by the EU-US Privacy Shield agreement, whose information is available here, approved by the European Data Protection Committee.<\/span><\/p>\n Service request form: We request the following personal data: Name, Email, telephone number to request any of the services that www.lipedemasvascular.com.com makes available to its users. The information collected will allow you to request the corresponding service for possible offline processing. Requests will be responded to by email.<\/span><\/p>\n To ensure compliance with the conditions of use and applicable law. This may include the development of tools and algorithms that help this website guarantee the confidentiality of the personal data it collects.<\/span><\/p>\n To support and improve the services offered by this website.<\/span><\/p>\n Other non-identifying data is also collected, obtained through some cookies that are downloaded to the user’s computer when browsing this website, which is detailed in the cookie policy.<\/span> The processing of data carried out on people who become followers of the official pages of lipedemasvascular.com on social networks will be governed by this section. As well as those conditions of use, privacy policies and access regulations that belong to the social network that applies in each case and previously accepted by the Lipedema Vascular user.<\/span><\/p>\n It will process your data for the purposes of correctly managing your presence on the social network, informing about Lipedema Vascular activities, products or services. As well as for any other purpose that the regulations of social networks allow.<\/span><\/p>\n In no case will I use the profiles of followers on social networks to send advertising individually.<\/span><\/p>\n In accordance with the provisions of the European general data protection regulation (GDPR) 2016\/679, Lipedema Vascular (Lipedema Vascular) will be responsible for the processing of data corresponding to users of the website and subscribers.<\/span><\/p>\n Lipedema Vascular does not sell, rent or transfer personal data that may identify the user, nor will it do so in the future, to third parties without prior consent. However, in some cases collaborations can be carried out with other professionals, in those cases, consent will be required from users informing them of the identity of the collaborator and the purpose of the collaboration. It will always be carried out with the strictest safety standards.<\/span><\/p>\n The legal basis for the processing of your data is: consent.<\/span><\/p>\n To contact or make comments on this website, consent with this privacy policy is required.<\/span><\/p>\n The prospective or commercial offer of products and services is based on the consent requested, without in any case the withdrawal of this consent conditioning the execution of the subscription contract.<\/span><\/p>\n The categories of data processed are identifying data.<\/span><\/p>\n In no case are specially protected or sensitive categories of data processed.<\/span><\/p>\n The personal data provided are kept until the purpose for which they are processed ends or as long as there is a legal obligation to keep them.<\/span><\/p>\n To provide services strictly necessary for the development of the activity, www.lipedemasvascular.com, shares data with the following providers under their corresponding privacy conditions:<\/span><\/p>\n Google Analytics: a web analytics service provided by Google, Inc., a Delaware company whose main office is at 1600 Amphitheater Parkway, Mountain View (California), CA 94043, United States (\u201cGoogle\u201d). Google Analytics uses \u201ccookies\u201d, which are text files located on your computer, to help www.lipedemasvascular.com analyze how users use the website. The information generated by the cookie about your use of www.lipedemasvascular.com (including your IP address) will be directly transmitted to and stored by Google on servers in the United States.<\/span><\/p>\n Hosting: Strato, domiciled in Germany, processes the data for the purpose of performing its hosting services and backup copies where the files of our Lipedema Vascular applications and hard drives are stored.<\/span><\/p>\n The security protocols applied are the following:<\/span><\/p>\n Appendix 2 to the Data Processing Agreement: technical and organizational security measures according to art. 32 GDPR<\/span> 1. Confidentiality (Article 32 (1) (b) GDPR)<\/span> 1.2 Login control<\/span> 1.3 Access Control<\/span> 1.4 Usage control<\/span> 1.5 Privacy Friendly Presets<\/span> 2. Integrity (Article 32 (1) (b) GDPR)<\/span> 2.2 Input control<\/span> 3. Availability, resilience, disaster recovery.<\/span> 3.2 Disaster recovery: rapid recovery after incident (article 32 (1) (c) GDPR)<\/span> 4. Data protection organization.<\/span>Principles regarding your privacy:<\/span><\/h3>\n
\n
Responsible for the processing of your personal data.<\/span><\/h3>\n
Commercial name: Lipedema Vascular<\/span>
NIF\/CIF:<\/span>
Address: Menendez Pidal, 39 \u2013 Madrid<\/span>
Email: consulta@lipedemasvascular.com<\/span>
Activity: Health Services<\/span><\/p>\nPrinciples that apply to personal information.<\/span><\/h3>\n
\n
How is your data obtained?<\/span><\/h3>\n
\n
What are your rights when you provide your data?<\/span><\/h3>\n
\n
\n
For what purpose do we process your personal data?<\/span><\/h3>\n
Other purposes of processing personal data:<\/span><\/h3>\n
To manage social networks. Vascular Lipedema may have a presence on social networks.<\/span><\/p>\nLegitimation for the processing of your data.<\/span><\/h3>\n
Category of data collected.<\/span><\/h3>\n
How long do we keep your data?<\/span><\/h3>\n
To which recipients will your data be communicated?<\/span><\/h3>\n
version 1.0<\/span><\/p>\n
1.1 Entry control<\/span>
Unauthorized persons must be denied access to rooms containing data processing equipment.<\/span>
Definition of security areas.<\/span>
\u2022 Realization of effective access protection.<\/span>
\u2022 Access log.<\/span>
\u2022 Determination of people with access authorization.<\/span>
\u2022 Management of personal access authorizations.<\/span>
\u2022 Accompaniment of external personnel.<\/span>
\u2022 Room monitoring.<\/span><\/p>\n
The use of data processing systems by unauthorized persons must be avoided.<\/span>
\u2022 Determination of the protection requirement.<\/span>
\u2022 Login protection<\/span>
\u2022 Implementation of secure login procedures, strong authentication<\/span>
\u2022 Implementation of simple authentication using username password<\/span>
\u2022 Login registration<\/span>
\u2022 Monitoring of critical IT systems.<\/span>
\u2022 Secure (encrypted) transmission of authentication secrets<\/span>
\u2022 Lock in case of failed attempts\/inactivity and process to reset locked login IDs<\/span>
\u2022 Prohibit memory function for passwords and\/or form entry (server\/clients)<\/span>
\u2022 Determination of authorized persons.<\/span>
\u2022 Management and documentation of means of personal authentication and login permissions.<\/span>
\u2022 Automatic login lock and manual login lock<\/span><\/p>\n
Only data for which access is authorized can be accessed. The data may not be read, copied, altered or deleted without authorization during processing, use and after storage.<\/span>
\u2022 Create an authorization concept<\/span>
\u2022 Implement access restrictions.<\/span>
\u2022 Assignment of minimum authorizations.<\/span>
\u2022 Administration and documentation of personal access rights.<\/span>
\u2022 Avoid concentration of roles.<\/span><\/p>\n
It must be ensured that data collected for different purposes can be processed separately.<\/span>
\u2022 Data economy in the management of personal data.<\/span>
\u2022 Separate processing of different data sets.<\/span>
\u2022 Verification and elimination of the purpose of regular use<\/span>
\u2022 Separation of test and development environment.<\/span><\/p>\n
\u2022 If data is not required to achieve the intended purpose, the default technical settings will be set in such a way that data will only be collected, processed, transmitted or published by an action of the data subject.<\/span><\/p>\n
2.1 Transfer control<\/span>
The objective of transfer control is to ensure that personal data cannot be read, copied, altered or deleted during electronic transmission or during its transport or storage on data carriers, and that it is possible to verify and determine where the personal data is provided. through data transmission.<\/span>
\u2022 Determination of recipient\/transferred entities\/persons<\/span>
\u2022 Examination of the legality of the transfer abroad.<\/span>
\u2022 Registration of transmissions according to the registration concept.<\/span>
\u2022 Secure data transfer between server and client.<\/span>
\u2022 Transmission backup on the backend<\/span>
\u2022 Secure transmission to external systems.<\/span>
\u2022 Minimization of risks through network separation.<\/span>
\u2022 Implementation of security gateways at network transfer points.<\/span>
\u2022 Hardening of backend systems.<\/span>
\u2022 Description of the interfaces.<\/span>
\u2022 Implementation of machine-machine authentication<\/span>
\u2022 Secure data storage, including backups.<\/span>
\u2022 Secure storage on mobile data carriers.<\/span>
\u2022 Introduction of a disk management process.<\/span>
\u2022 Collection and disposal process.<\/span>
\u2022 Privacy-compliant disposal and destruction procedures.<\/span>
\u2022 Disposal record management.<\/span><\/p>\n
The purpose of input control is to ensure that it can be verified and subsequently verified whether personal data has been entered, modified or deleted in data processing systems.<\/span>
\u2022 Registration of entries.<\/span>
\u2022 Documentation of entry permits.<\/span><\/p>\n
3.1 Availability and resilience (Article 32 (1) (b) GDPR)<\/span>
\u2022 fire protection<\/span>
\u2022 Primary technology redundancy.<\/span>
\u2022 Power supply redundancy.<\/span>
\u2022 Redundancy of communication connections.<\/span>
\u2022 Supervision<\/span>
\u2022 Planning and deployment of resources.<\/span>
\u2022 Defense against systemic abuse.<\/span>
\u2022 Concepts and implementation of data backup<\/span>
\u2022 Periodic control of emergency facilities.<\/span><\/p>\n
\u2022 Emergency plan<\/span>
\u2022 Data backup concepts and implementation<\/span><\/p>\n
\u2022 Definition of responsibilities.<\/span>
\u2022 Implementation and control of adequate processes.<\/span>