Introduction

This privacy policy has been developed in compliance with the provisions of the current Organic Law on Personal Data Protection, as well as Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016, regarding the protection of individuals concerning the processing of personal data and the free movement of such data, hereinafter referred to as the GDPR.

The purpose of this Privacy Policy is to inform data subjects, regarding whom information is being collected, about specific aspects related to the processing of their data, including, among other things, the purposes of the processing, contact information to exercise their rights, retention periods for information, and security measures, among other things.

Data Controller

For data protection purposes, INSTITUTO ESPECIALIDADES VETERINARIAS S.L.U. must be considered the Data Controller, concerning the files/processing identified in this policy, specifically in the Data Processing section.

Identifying information of the owner of this website:

IFEVET

Corporate Name: INSTITUTO ESPECIALIDADES VETERINARIAS S.L.U.

Tax ID: B88493549

Address: PASEO DE LA CASTELLANA 120, 5º IZQDA – 28046 – MADRID – MADRID

Phone: 633435814

Email: [email protected]

DPO: [email protected]

Data Processing

The personal data requested, where applicable, will consist only of those strictly necessary to identify and address the request made by the data subject, hereinafter the Interested Party. Furthermore, personal data will be collected for specific, explicit, and legitimate purposes, and will not be further processed in a manner incompatible with those purposes.

The data collected from each interested party will be adequate, relevant, and not excessive in relation to the corresponding purposes for each case, and will be updated whenever necessary.

The data subject will be informed, prior to the collection of their data, of the general aspects in this policy so that they can provide express, precise, and unequivocal consent for the processing of their data, in accordance with the following aspects.

Purposes of Processing

The explicit purposes for which each of the processing operations are carried out are set out in the information clauses incorporated in each of the data collection channels (web forms, paper forms, voiceovers or posters, and informative notes).

However, the personal data of the data subject will be processed solely for the purpose of providing them with an effective response and addressing the requests made by the user, specified along with the option, service, form, or data collection system that the owner uses.

Legal Basis

As a general rule, prior to the processing of personal data, INSTITUTO ESPECIALIDADES VETERINARIAS S.L.U. obtains the express and unequivocal consent of the data subject, by incorporating informed consent clauses in the different information collection systems.

However, if the consent of the data subject is not required, the legal basis for the processing on which INSTITUTO ESPECIALIDADES VETERINARIAS S.L.U. relies is the existence of a law or specific regulation that authorizes or requires the processing of the data subject’s data.

If the data subject expressly and unequivocally declares that they have read this privacy policy, the data controller will be authorized to manage the data provided by the data subject, for the purpose of providing the service, providing the requested information, and/or sending future offers related to the activity carried out by the controller.

Recipients

As a general rule, INSTITUTO ESPECIALIDADES VETERINARIAS S.L.U. does not transfer or communicate data to third parties, except those required by law, to inform clients of ESTUDIOS VETERINARIOS S.L. group (composed of INSTITUTO ESPECIALIDADES VETERINARIAS S.L., ESPECIALIZACIÓN VETERINARIA, S.L., and EMPLEO VETERINARIO S.L.) about similar products or when the purpose is to carry out personnel selection among the entities of the ESTUDIOS VETERINARIOS S.L. group. However, such transfers or communications of data are informed to the data subject through informed consent clauses contained in the different data collection channels.

Origin

As a general rule, personal data is always collected directly from the data subject. However, in certain cases, data may be collected through third parties, entities belonging to the ESTUDIOS VETERINARIOS S.L. group (composed of INSTITUTO ESPECIALIDADES VETERINARIAS S.L., ESPECIALIZACIÓN VETERINARIA, S.L., and EMPLEO VETERINARIO S.L.), or different services from the data subject. In this regard, this aspect will be communicated to the data subject through informed consent clauses contained in the different channels for collecting information and within a reasonable period, once the data is obtained, and at the latest within one month.

Retention Periods

The information collected from the data subject will be retained for as long as necessary to fulfill the purpose for which the personal data were collected, so that once the purpose is fulfilled, the data will be deleted. Such deletion will result in the blocking of the data, keeping it solely available to the Public Administrations, Judges, and Courts, to address any potential liabilities arising from the processing, during the prescription period of these liabilities. Once this period has expired, the information will be destroyed.

For informational purposes, the legal retention periods of information regarding different matters are listed below:

• DOCUMENT: Documentation of a labor or social security nature

  • PERIOD: 4 years
  • LEGAL REFERENCE: Article 21 of Royal Legislative Decree 5/2000, of August 4, which approves the consolidated text of the Law on Social Order Infringements and Sanctions.

• DOCUMENT: Accounting and tax documentation for commercial purposes

  • PERIOD: 6 years
  • LEGAL REFERENCE: Article 30 of the Commercial Code.

• DOCUMENT: Accounting and tax documentation for tax purposes

  • PERIOD: 4 years
  • LEGAL REFERENCE: Articles 66 to 70 of the General Tax Law.

• DOCUMENT: Access control to buildings

  • PERIOD: 1 month
  • LEGAL REFERENCE: Instruction 1/1996 of the AEPD.

• DOCUMENT: Video surveillance

  • PERIOD: 1 month
  • LEGAL REFERENCE: Instruction 1/2006 of the AEPD Organic Law 4/1997.

Navigation Data

Regarding navigation data that may be processed through the website, if data subject to regulations are collected, it is recommended to consult the Cookies Policy published on our website.

Rights of Data Subjects

Data protection regulations grant certain rights to data subjects, users of the website, or users of the social media profiles of INSTITUTO ESPECIALIDADES VETERINARIAS S.L.U.

These rights available to data subjects are as follows:

• Right of Access: Right to obtain information about whether their own data are being processed, the purpose of the processing being carried out, the categories of data being processed, the recipients or categories of recipients, the retention period, and the origin of such data.

• Right of Rectification: Right to obtain the rectification of inaccurate or incomplete personal data.

• Right of Erasure: Right to obtain the erasure of data in the following cases:

  • When the data are no longer necessary for the purposes for which they were collected
  • When the data subject withdraws consent
  • When the data subject objects to the processing
  • When the data must be deleted to comply with a legal obligation
  • When the data have been obtained based on a service of the information society under the provisions of Article 8(1) of the European Data Protection Regulation.

• Right of Objection: Right to object to certain processing based on the data subject’s consent.

• Right of Restriction: Right to obtain restriction of processing in the following cases:

  • When the data subject disputes the accuracy of personal data, for a period allowing the company to verify the accuracy of the data
  • When the processing is unlawful and the data subject opposes the erasure of the data
  • When the company no longer needs the data for the purposes for which they were collected, but the data subject needs them for the establishment, exercise, or defense of legal claims
  • When the data subject has objected to the processing while it is being verified whether the legitimate grounds of the company override those of the data subject.

• Right to Data Portability: Right to receive personal data concerning them in a structured, commonly used, and machine-readable format and to transmit those data to another controller when:

  • The processing is based on consent
  • The processing is carried out by automated means.

• Right to Lodge a Complaint with the Competent Supervisory Authority.

Data subjects may exercise the rights indicated by addressing INSTITUTO ESPECIALIDADES VETERINARIAS S.L.U. in writing, sent to the following address: [email protected], indicating the right they wish to exercise in the subject line.

In this regard, INSTITUTO ESPECIALIDADES VETERINARIAS S.L.U. will attend to your request as soon as possible, taking into account the deadlines provided for in data protection regulations.

Security

The security measures adopted by INSTITUTO ESPECIALIDADES VETERINARIAS S.L.U. are those required in accordance with Article 32 of the GDPR. In this regard, INSTITUTO ESPECIALIDADES VETERINARIAS S.L.U., taking into account the state of the art, the costs of implementation, and the nature, scope, context, and purposes of the processing, as well as the varying likelihood and severity of risks to the rights and freedoms of natural persons, has established appropriate technical and organizational measures to ensure the appropriate level of security for the existing risk.

In any case, INSTITUTO ESPECIALIDADES VETERINARIAS S.L.U. has implemented sufficient mechanisms to:

• Ensure the ongoing confidentiality, integrity, availability, and resilience of processing systems and services.
• Restore the availability and access to personal data quickly in the event of a physical or technical incident.
• Regularly verify, assess, and evaluate the effectiveness of the technical and organizational measures implemented to ensure the security of processing.
• Pseudonymize and encrypt personal data, where appropriate.