Privacy Policy

RESPONSIBLE

Who is responsible for the processing of your data?

• Company Name: VEKI LASH, S.L.
• Tax Identification Number (CIF): B88548524
• Address: C/ Antonio Lopez 70 3D 28019 Madrid Spain
• Phone: +34635219219
• Email: info@veki.es

PURPOSE

What will we use your personal data for?

• Maintenance of the business relationship and provision of contracted services.
• Managing email communications with interested parties.
• Provision of healthcare or medical services.
• Management of employees and human resources of the company.

DATA RETENTION

The personal data you provide to us will be kept as long as the business relationship is in force. However, for maximum transparency, we inform you of the general retention periods we work with:

• Accounting, tax, and labor records: six (6) years.
• Labor records: ten (10) years.
• Healthcare records: five (5) years from the date of each healthcare process.

However, despite these general periods, we will periodically review our systems to delete data that is no longer legally required.

LEGITIMATION

What is the legal basis for processing your data?

Based on the purposes of data collection, the processing of your data is necessary:

• To manage the business relationship you have entered into and contracted with us.
• Contractual execution (authorized by Article 6.1.b GDPR)
• With your consent as an interested party (authorized by Article 6.1.a GDPR)
• To manage email communications with interested parties.
• With your consent as an interested party (authorized by Article 6.1.a GDPR)
• Based on our legitimate interest (authorized by Article 6.1.f GDPR)
• To provide healthcare or medical services.
• With your consent as an interested party (authorized by Article 6.1.a GDPR)
• To manage employees and internal human resources of the company.
• Contractual execution (authorized by Article 6.1.b GDPR)

Furthermore, all collected data is necessary for the provision of the service. However, data marked with an asterisk (*) is mandatory. If the mandatory data is not provided, VEKI LASH, S.L. will not be able to provide the contracted service.

RIGHTS OF THE INTERESTED PARTIES

What rights do I have regarding data protection?

You can exercise any of the following rights by communicating with us at the postal address C/ Antonio Lopez 70 3D 28019, Madrid or the email address provided in the header info@veki.es. In any case, according to current regulations, you have the right to:

• Request access to personal data concerning the data subject.
• Request rectification or erasure of personal data.
• Request restriction of processing.
• Object to processing.
• Request data portability.

You can use the following forms to exercise your rights more easily. You can download them by clicking here. Additionally, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD). More information in Section VII of this document.

RECIPIENTS

Who will your data be disclosed to?

Your data will not be disclosed to third-party companies. We also inform you that your data will not be transferred internationally to any third country.

OTHER OPTIONS. BIS 1

However, for maximum transparency, we inform you that our email service is outsourced to Google, which entails an international transfer of personal data outside the European Economic Area. Nevertheless, Google provides sufficient guarantees as it adheres to the EU-US Privacy Shield Agreement (more information by clicking here).

OTHER OPTIONS. TER 1

Data will not be transferred to third parties, except where required by law. However, our website is currently hosted on servers provided by Google, which entails an international transfer of personal data outside the European Economic Area. Nevertheless, Google provides sufficient guarantees as it adheres to the Privacy Shield framework (more information by clicking here).

OTHER OPTIONS. TER 2

Data will not be transferred to third parties, except where required by law. However, our website is currently hosted on servers provided by Amazon, which entails an international transfer of personal data outside the European Economic Area. Nevertheless, Amazon provides sufficient guarantees as it adheres to the EU-US Privacy Shield framework (more information by clicking here). Additionally, you can read Amazon Web Services' privacy policy by clicking here.

DATA ORIGIN

How did we obtain your data?

The personal data used by VEKI LASH, S.L. comes directly from the data subject.

What categories of data do we process?

The categories of personal data that are processed:

• Identification data
• Name
• Surname
• ID / NIE / Passport or equivalent document
• Postal addresses
• Email addresses
• Gender
• Date of birth
• Place of birth
• Commercial information
• Economic data
• Bank account number
• Credit card number

Based on the healthcare and/or medical services provided by VEKI LASH, S.L., sensitive data is processed only with the explicit consent of the data subject. The collected data are solely derived from the service contracted and/or provided to the user.

CONTROL AUTHORITY

At VEKI LASH, S.L., we make every effort to comply with data protection regulations as it is our most valuable asset. However, if you believe that your rights have been violated, you can lodge a complaint with the Spanish Data Protection Agency (AEPD), located at C/ Jorge Juan, 6, 28001 - Madrid. More information about the AEPD can be found at http://www.agpd.es/.