At Disop, S.A. (hereinafter, Disop), we respect your privacy and protect your personal data. This policy details how we collect, use and share your information in accordance with applicable data protection regulations, including the General Data Protection Regulation (GDPR).
This privacy policy applies to the website .
This privacy policy applies to the www.disop.com website. If you do not provide us with your personal data, no processing of your information will be carried out.
We will inform you about the purposes of the processing, the entities that could access your data and your rights as data subject. Some processing may be based on legal obligations, contracts or legitimate interests, without requiring your express consent.
If the website uses cookies, we will clearly notify you in our Cookie Policy, where you can learn more about the use of cookies and how to manage your preferences.
If the website uses cookies, we will clearly notify you in our Cookie Policy, where you can learn more about the use of cookies and how to manage your preferences.
This policy ensures transparency and is designed for you to clearly know and exercise your rights.
The Data Controller is: Disop, S.A NIF/DNI A28423879
At Disop we have a Data Protection Officer (DPO), whose role is to ensure compliance with current data protection regulations within our organization. If you have any queries or need assistance regarding the processing of your personal data, you can contact our DPO through the following means:
This Privacy and Data Protection Policy is developed on the basis of the following data protection laws and regulations:
At Disop we treat personal data in accordance with the principles established in the current regulations, guaranteeing that the treatment is:
At Disop, we have implemented the necessary technical and organizational measures to ensure the security of the personal data we process. These measures are designed to prevent alteration, loss, unauthorized access or improper processing of data, adapting to the state of technology and potential risks.
Among the measures we highlight:
The following are the intended uses and purposes:
To facilitate direct communication with users and customers interested in ophthalmic products
To manage requests from distributors and potential customers
Respond to queries related to the products and services offered by Disop
User session management cookie
Manages cookie consent preferences, without collecting personally identifiable information
Improves website security, preventing cross-site request forgery
attacks.We use your data for the time strictly necessary to fulfill the purposes stated above. Unless there is a legal obligation or requirement, the expected retention periods are as follows:
The collection and processing of your data is always legitimated by one or more legal bases, which we detail below:
We may share your personal data with members of our corporate group (you can view the details of our group here) in order to provide you with the products, services or information you have requested from us. We may also share your data with other entities within our group for the purposes of IT support and maintenance, internal governance, administration and compliance with our legal or regulatory obligations.
We will not share your personal data with other entities within our group.
We will not share your personal data with third parties outside our corporate group, except in the following cases:
The data we process is primarily stored on servers located within the European Economic Area (EEA). However, some of our service providers and group companies may be located outside the EEA, in countries such as the United States, China or Australia. These international transfers are carried out with appropriate safeguards, either through adequacy decisions, such as the EU-US Data Privacy Framework (DPF), or through the use of standard contractual clauses, approved by the European Commission, which ensure an adequate level of data protection.
In some cases, we may also use external providers who need to process or store data outside the European Union, always with the necessary measures to ensure the security and confidentiality of the data.
The following is a description of the data processing activities carried out through www.disop.com , specifying:
These are those data processing activities whose purposes are necessary for the provision of the services.
| Inquiries and contacts web forms disop.com | |
|---|---|
| Legal basis | (Art. 6.1.a RGPD) Consent of the data subject (RGPD and LOPDGDDD. Compliance with legal obligation: General Data Protection Regulation (RGPD) and Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights (LOPDYGDD)) |
| Purposes | To facilitate direct communication with users and customers interested in ophthalmological products; To manage requests from distributors and potential customers; To respond to queries related to the products and services offered by Disop |
| Data categories and groups | Web users (Identifying data; Other categories) |
| Data source | The data subject himself or his legal representative |
| Category of recipients | Entities of the corporate group |
| International transfer | Not foreseen |
| Shelf life | For a period of 5 years from the last confirmation of interest. The data will be kept for as long as they are necessary for the stated purpose or until the interested party requests their deletion. The period of 5 years will be the maximum, unless there is a legal obligation to keep the data for longer |
| Security measures |
|
| Cookies, pixels and tracking - disop.com | |
|---|---|
| Legal basis | (Art. 6.1.a RGPD) Consent of the data subject (RGPD and LOPDGDDD. Compliance with legal obligation: General Data Protection Regulation (RGPD) and Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPDYGDD)); (Art. 6.1.f RGPD) Legitimate interest of the Data Controller or third parties |
| Purposes | User session management cookie; Manages cookie consent preferences, without collecting personally identifiable information; Improves website security, preventing cross-site request forgery type attacks |
| Data categories and groups | Web users (Identifying data; Other categories) |
| Data source | The data subject himself or his legal representative |
| Category of recipients | Not foreseen |
| International transfer | Not foreseen |
| Shelf life | XSRF-TOKEN: 2 hours disop_session: 2 hours cookieyes-consent: 1 year |
| Security measures |
|
Minors under 14 years of age may not use the services offered through our website without the prior authorization of their parents, guardians or legal representatives. These will be solely responsible for all actions performed through the website by minors in their care, including the completion of online forms with the personal data of minors and, where appropriate, the selection of the corresponding boxes.
In accordance with the provisions of Article 8 of the RGPD and Article 7 of the LOPD/GDD, only those over 14 years of age may grant their consent to the lawful processing of their personal data by Disop.
Data protection regulations give you specific rights that you can exercise in relation to the processing of your data. These rights are personal and non-transferable, which means that only you, as the data subject, can exercise them after verification of your identity.
The following describes your rights:
•Right of access: You may request confirmation as to whether Disop is processing your data and access information related to its processing.
•Right of rectification: If your personal data is inaccurate or incomplete, you may request its correction.
•Right to erasure (“right to be forgotten”): You may request the deletion of your data when it is no longer necessary for the purposes for which it was collected, or if you withdraw your consent.
•Right to limitation of processing: You may request limitation of the processing of your data, for example, while their accuracy is being verified or in other cases provided for by law.
•Right to data portability: You have the right to receive your data in a structured, commonly used and machine-readable format, and to transmit it to another data controller.
•Right to object: Right to object to the processing of your data on grounds relating to your particular situation, or where the processing is based on a legitimate interest.
•Right not to be subject to automated decisions: You may request not to be subject to decisions based solely on automated processing of your data, including profiling.
•Right to withdraw your consent: You may withdraw your consent at any time, without affecting the lawfulness of the processing based on the prior consent.
•Right to file a complaint: If you consider that your rights have not been respected, you may file a complaint with the corresponding supervisory authority: Spanish Data Protection Agency info@aepd.es https://www.aepd.es
To exercise any of these rights, you may contact Disop using the following contact information:
You can also exercise your rights before the Data Protection Delegate:
Email: rgpd@auratechlegal.es - Phone: 647633242
To exercise your rights of access, rectification, deletion, limitation or opposition, portability and withdrawal of consent, you can do so by sending an email to these addresses: rgpd@auratechlegal.es / marketing@disop.com or a postal mail to : Avda Valdelaparra Num. 31 A. 28108, Alcobendas (Madrid), Spain
If you believe that the processing of your personal data does not comply with data protection regulations, you have the right to lodge a complaint with the relevant Control Authority in your country of residence or place of business.
Depending on your location, you can address the competent authority in your country. For example:
•In Germany, you can contact the Berliner Beauftragte für Datenschutz und Informationsfreiheit
•In France, the competent authority is the Commission Nationale de l'Informatique et des Libertés (CNIL).
Specific contact details for Spain are as follows:
If you are not sure which authority corresponds to you or need information about other supervisory authorities, you can consult the article on Data Protection Supervisory Authorities, where you will find contact details and links according to your location.
This document ensures that you understand how we process your personal data. By using our website or services, you confirm that you have been informed about the terms of our Privacy Policy, in accordance with the information principle set out in Article 13 of the GDPR. The lawful bases for processing your personal data are set out in Article 6 of the GDPR, and may include the performance of a contract, compliance with legal obligations or legitimate interest, among others.
This policy has been developed with the collaboration of Auratech Legal, a specialist data protection firm, and will be reviewed periodically to ensure its adequacy and compliance.
Disop reserves the right to modify this policy at any time.
Disop reserves the right to modify this Privacy Policy based on changes in legislation, jurisprudence or guidelines from the supervisory authorities. Any relevant modification that affects the purposes of the processing, storage periods or users' rights will be explicitly communicated.
Last updated: November 22, 2024