1. INTRODUCTION

This Privacy Policy explains what we do with your personal data to provide the services offered on the www.dbdermatologiabarcelona.com website (the “Platform”), such as selling dermatology consultation bookings, communications, etc. (the “Services”). This policy also explains the data we may collect when you visit the Platform.
In accordance with applicable data legislation, please note the following: If you live in a member country of the European Economic Area, this Privacy Policy and how your data is processed will be governed by the General Data Protection Regulation, or Regulation (EU) 2016/679 (“GDPR”).
If you live in a country that is not part of the European Economic Area, the processing of your personal data will be governed by the privacy laws of the State of California.
The company responsible for the personal data is Dr. Didac Barco Nebreda, with registered office at c/ de L’Equador 75 Bajos de Barcelona, 08029 (Didac Barco) (“We” or “Data Controller”).

You can contact the Data Controller’s representative by sending an e-mail to: nbarea@didacbarco.ad
In the event that you do not provide the information indicated as mandatory, we may not be able to process your user registration or provide you with the use of some Services that are available on the Platform. In order to register and browse the Platform, you must be over 16 years of age. Didac Barco may use your personal information to verify your age and ensure compliance with this restriction.

2. LEGAL BASIS FOR PROCESSING PERSONAL DATA.

The collection and processing of your personal data is primarily based on the contractual and non-contractual relationship you have with us.
When we send you newsletters and Services or when we use the email address you have provided to contact you individually or to recognize you when you return to our website, we do so with informed consent.
The way we process the information collected by our cookies is based on the informed consent you have given us, in accordance with applicable law.

3. PERSONAL INFORMATION WE COLLECT.

To register on the Platform and identify yourself, we will ask for your email address. To create your profile on the Platform, you may include personal information such as the country or city in which you reside or your first and last name. Profile information helps you get the most out of our Services or courses in which you are interested. To purchase a reservation for a face-to-face dermatology consultation, we will ask you for your credit or debit card information, including the validity date and CVV code. If you request an invoice, we will ask for your billing details if necessary.
When you visit or use our Services, we record data such as how often you use it, the date and time you access, when you view or click on specific content, your course preferences, the projects you share, or the content you post. We use this information when you log in and when you read our emails, and we use internet protocol (“IP”) addresses to identify you and record your use of the Platform
We do not make decisions based on profiles, beyond for the legitimate prevention of internet fraud.

4. PROCESSING PURPOSE.

Didac Barco, as Data Controller, will process your personal data for the following purposes:

1. To manage your registration as a user of the Platform, to identify you and give you access to the Services that are available to users registered on it.
2. The development, fulfilment and performance of the contract for the provision of services such as the sale of courses or any other contract that we may have on the Platform. You should note that:
   You expressly authorize us to process the data required for activation and payment processing. Card security codes (CVV or CVC) will only be used to process the purchase in progress as part of your payment information and will not be stored or processed subsequently. Consent to the activation of this resource allows your details to be automatically filled in for future purchases, so you will not have to re-enter payment information every time you make a purchase. It will be understood that the data entered will be valid and up-to-date for future purchases. We store and disclose card information in accordance with international security and confidentiality standards for credit and debit cards. For security reasons, the use of this resource may require changes to your password. Please remember that the security of the Platform also depends on the correct use and storage of confidential passwords.
3. Contact you by email to update you and inform you about resources, products or services contracted, including security updates to the Platform, whenever necessary and reasonable.
4. Respond to requests or queries you make through the customer service channels available on our Platform.
5. We also use your information to generate aggregate, non-identifiable data.

5. OPTIONS.

The provision of the Didac Barco Service may involve the use of your personal data, with your express consent, to send you personalized advertising related to our products and services, through e-mails or other electronic means of communication, sent by us. In order to improve our services, please note that personal information related to purchases, interests and preferences may be used by Didac Barco for analytical purposes, user profile characterization, marketing studies, quality surveys and to improve interaction with our customers.
If you do not wish to receive some types of communications that we send by e-mail, you can let us know by sending an email to nbarea@didacbarco.ad
You can also cancel your notifications by following the instructions on each notification you receive.

DATA RETENTION PERIOD

We will retain your personal data for as long as we have a valid contractual relationship and, after that term, for the period determined by the obligations arising from the processing of the data or as otherwise required by law.

DATA RECIPIENTS.

In order to fulfill the purposes stated in this Privacy Policy, it may be necessary to provide or disclose your personal data to third parties due to the following reasons:

• Business transfer: related to any reorganization, restructuring, merger or sale, or any other transfer of assets, including personnel, provided that the receiving party agrees to process your data in accordance with our Privacy Policy.
• Service providers: to provide services on our behalf or to help us provide our services. For example, we hire vendors to perform marketing, advertising, communication, IT infrastructure and services, to personalize and improve our service, to process credit card transactions or other payment methods, for customer service, to collect debts, analyze and improve data (such as data related to user interaction with our services), and to process and manage satisfaction surveys. In order to be efficient, these partners and suppliers may be located in the U.S. or other countries or territories outside the European Economic Area and may not provide data protection services comparable to those in your country or in the European Union.

By agreeing to our Privacy Policy, you specifically authorize us to process and report your personal data to the aforementioned partners and to disclose your personal data to suppliers such as processors located outside the European Economic Area for the purposes described herein and to provide a full service. When we disclose personal information when exchanging data with countries located outside the European Economic Area and other regions with data protection laws, we ensure that the information is transferred in compliance with this Privacy Policy and applicable data protection laws.

8. DATA PROTECTION RIGHTS.

As a Data Controller, we are committed to respecting the confidential nature of your personal data and ensure that you fully exercise these rights. You may at any time exercise the following rights:

1. Right to access. You have the right to confirm whether we are processing your personal data and, if we are, you have the right to obtain a copy of the data and information related to the processing.
2. Right to change. You have the right to correct errors, to modify incomplete or erroneous data and to guarantee the authenticity of the information processed.
3. Right to erasure. You have the right to request the erasure of your personal data without undue delay, in the event that it has been wrongly processed or if the purpose for which it was processed or collected has ceased to exist.
4. Right to restrict processing. You have the right to request the suspension of the processing of your information if it is unlawful or if the accuracy of the data is disputed.
5. Right to object. You have the right to object to the processing of your data where it has been used for direct marketing purposes or where the processing needs to be terminated due to a personal problem, except where there is a legitimate interest or it is necessary for the exercise or defence of legal claims.
6. Right not to be subjected to personalised decisions. You have the right not to be subjected to a decision based solely on the automatic processing of your data, including profiling, with binding legal effects or affecting you, except where this is necessary for the performance of a contract, in accordance with the law, or if you have expressly authorised it.

   In order to exercise these rights, please send an e-mail to: nbarea@didacbarco.ad indicating your (i) identity with the full name and e-mail address used to register or make purchases at Didac Barco, an identification document to verify your identity and (ii) the right or rights you are exercising.
   You can also visit the agency that oversees data protection in your country to register a complaint or request protection of your rights, if you consider it necessary.
   The exercise of such rights is free of charge, except when the claims are deliberately unfounded or excessive, in which case the subject will have to pay the costs of the process.

9. COOKIE INFORMATION

We use cookies, small files with information relating to your browsing on this Platform, mainly to enable a better user experience. Please read our Cookie Policy to learn more about the cookies we use, their purpose and other useful information.

10. REQUIREMENTS

In compliance with the Privacy Shield Principles, Didac Barco commits to resolve complaints regarding the collection or use of your personal information. Users in the European Union with inquiries or complaints regarding the Privacy Shield policy should contact Domestika first: nbarea@didacbarco.ad

11. CHANGES

We will update this Privacy Policy from time to time and in accordance with legal, regulatory, or operational changes. We will notify you of these changes (including the effective date) as required by law.
Published on November 12, 2021.