Privacy Policy

This Privacy Policy has been developed in accordance with the provisions of the Organic Law on Personal Data Protection currently in force, as well as Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, hereinafter the GDPR.

The purpose of this Privacy Policy is to inform the owners of personal data, in respect of whom information is being collected, of the specific aspects relating to the processing of their data, including, among other things, the purposes of the processing, contact details for exercising their rights, data retention periods and security measures.

Data Controller

Name: HIGUERASDENT, S.L.P.
Address: C. Pujades, 214 – 08005, Barcelona
Contact telephone: 933 569 098 – 669 337 346
Email: info@alejandrahigueras.com
Data Protection Officer: TECNODOSIS, S.L. dpd@utpr.es

Data Processing:

The personal data requested, where applicable, will consist solely of information strictly necessary to identify and handle the request made by the data subject, hereinafter the interested party. Such information will be processed fairly, lawfully and transparently in relation to the interested party. Furthermore, personal data will be collected for specified, explicit and legitimate purposes and will not be processed in a manner incompatible with those purposes.

The data collected from each interested party will be adequate, relevant and not excessive in relation to the purposes for which they are collected, and will be updated whenever necessary.

The data subject will be informed, prior to the collection of their data, of the general aspects regulated in this policy so that they may provide express, precise and unambiguous consent to the processing of their data, in accordance with the following aspects.

Purposes of Processing.

The explicit purposes for which each processing activity is carried out are set out in the informational clauses incorporated in each of the data collection channels (web forms, newsletter, etc.).

However, the personal data of the interested party will be processed for the sole purpose of providing an effective response and handling the requests made by the user, as specified alongside the option, service, form or data collection system used by the data subject.

Legal Basis

As a general rule, prior to the processing of personal data, HIGUERASDENT, S.L.P. obtains the express and unambiguous consent of the data subject, by incorporating informed consent clauses in the various data collection systems.

However, in cases where the consent of the interested party is not required, the legal basis for the processing relied upon by HIGUERASDENT, S.L.P. is the existence of a law or specific regulation that authorises or requires the processing of the interested party’s data.

Recipients

As a general rule, HIGUERASDENT, S.L.P. does not transfer or communicate data to third parties, except where legally required. However, should this be necessary, such transfers or communications of data will be communicated to the interested party through the informed consent clauses contained in the various personal data collection channels.

Source

As a general rule, personal data is always collected directly from the interested party. However, in certain exceptional cases, data may be collected through third parties, entities or services other than the interested party. In such cases, this will be communicated to the interested party through the informed consent clauses contained in the various data collection channels, within a reasonable period after the data has been obtained, and at the latest within one month.

Retention Periods

The information collected from the interested party will be retained for as long as necessary to fulfil the purpose for which the personal data was collected. Once that purpose has been fulfilled, the data will be cancelled. Such cancellation will result in the data being blocked, retained solely at the disposal of Public Authorities, Judges and Courts to address any liabilities arising from the processing, for the applicable limitation period. Once that period has elapsed, the information will be destroyed.

Browsing Data:

Regarding browsing data that may be processed through the website, should data subject to applicable regulations be collected, we recommend consulting the Cookie Policy published on our website.

Rights of Interested Parties:

Data protection regulations grant a series of rights to interested parties or data subjects, users of the website or users of HIGUERASDENT, S.L.P.’s social media profiles.

The rights available to interested parties are as follows:

  • Right of access: the right to obtain information on whether their own data is being processed, the purpose of the processing being carried out, the categories of data being processed, the recipients or categories of recipients, the retention period and the origin of said data.
  • Right of rectification: the right to obtain the rectification of inaccurate or incomplete personal data.
  • Right of erasure: the right to obtain the deletion of personal data.
  • Right to object: the right to object to a specific processing activity based on the consent of the interested party.
  • Right of restriction: the right to obtain the restriction of the processing of data.
  • Right to data portability: the right to obtain data in a structured, commonly used and machine-readable format, and to transmit it to another data controller in accordance with data protection regulations.

The interested party also has the right to lodge a complaint with the competent supervisory authority.

Interested parties may exercise the rights indicated above by contacting info@alejandrahigueras.com in writing, sent to the following address: C. Pujades, 214 – 08005, Barcelona, indicating in the Subject line the right they wish to exercise and attaching a document proving their identity (e.g. national ID card).

In this regard, HIGUERASDENT, S.L.P. will handle your request as soon as possible, taking into account the deadlines set out in data protection regulations.