Data Controller The company responsible for processing your data under this Privacy Policy is: PALEX MEDICAL, S.A.U.

Tax ID (NIF): A58710740

Address: Jesús Serra Santamans, 5 - 08174 SANT CUGAT DEL VALLÈS (Barcelona)

Email address: lopd@palex.es

Website: www.palexhealth.com

Phone number: 934006603

Registered in the Barcelona Mercantile Registry, Volume 32475, Folio 134, Sheet Number B4953, Entry 96.

At PALEX MEDICAL, S.A.U., we recognize the importance of protecting your personal information and are committed to processing it responsibly and in accordance with data protection laws. This privacy policy aims to regulate all aspects related to the processing of data from various users who browse or provide personal data through different forms on the website.

Personal Data Personal data refers to information that identifies or makes you identifiable. Through the website, we collect the personal data that the user provides through designated fields: name, surname, email, phone number, postal address, city, etc. The user's visit to the website does not imply any obligation to provide personal information. However, if the user provides such information, it will be processed lawfully, adhering at all times to the principles and rights set forth in GDPR 2016/679 of April 27, 2016, and LOPDGDD 3/2018 of December 5.

Purpose, duration, and legal basis for processing: The data provided by the user will be processed for the following purposes:

• To respond to the user’s request or inquiry submitted through the contact form on the website. We collect and process the user’s personal data to handle and manage their request, inquiry, or any other request made via the form. These data will be retained for the time necessary to fulfill the request and for the legally established time, with a minimum duration of 3 years. The legal basis for processing is the user’s consent, which is granted by checking the box accepting our privacy policy before submitting the request. The user has the right to revoke their consent at any time, without affecting the lawfulness of the processing carried out prior to its withdrawal.

• Providing training and information to users registered on the Website, and, if applicable, managing the necessary actions to allow them to register for courses, attend or follow them, as well as for conferences, events, and any other training, social, informative, and/or educational activities offered through the website in which the user is interested. These data will be kept for the duration of the training activity and for the legally established period, with a minimum of 3 years. The legitimate basis for this purpose is the execution of the contract in which the user is a party, i.e., for maintaining, fulfilling, developing, controlling, and executing the established contractual relationship.

• Managing the curriculum vitae sent by the user through the form designed for that purpose and including it in the company’s candidate database. These data will be kept for a maximum of one year, after which they will be blocked for the legally established time, ensuring total confidentiality during processing and subsequent destruction. The legal basis for processing the user’s CV is their consent, granted when submitting it by checking the box accepting our privacy policy before sending it. The user has the right to revoke their consent at any time, without affecting the lawfulness of the processing based on the prior consent.

• Improving the user's experience when browsing the website. These data will be retained as long as the user does not revoke their consent by deleting cookies and for the legally established period, with a minimum duration of 3 years. The legal basis for improving the user’s browsing experience is the user’s consent when accepting cookies. The user has the right to revoke their consent at any time, without affecting the lawfulness of the processing based on prior consent.

• Managing our social networks and sending information about our activities and products. These data will be kept as long as the user does not revoke their consent and for the legally established period, with a minimum duration of 3 years. The legal basis for managing our social networks and sending information about our activities is the user’s consent. The user has the right to revoke their consent at any time, without affecting the lawfulness of the processing based on prior consent.

• Sending satisfaction surveys based on the purchase of the requested product or service to improve the customer experience. Personal data will be deleted once the survey is completed, along with a reasonable period for making improvements, activating new services, and meeting applicable legal requirements. Processing will be based on the legitimate interest of improving service quality when the user has acquired goods and/or services. If no contractual relationship exists, the processing will be based on the user’s consent. Withdrawal of consent will not affect the lawfulness of previous processing.

Data transfer or disclosure to third parties and international transfers: Your data will not be disclosed or transferred to third parties unless there is a legal obligation, or to service providers linked to the Controller who act as data processors. No international transfers are made. If any are to be made, you will be informed to obtain your consent.

Data updates: To keep personal data updated, users should inform us of any changes, as we are not responsible for the accuracy of the data provided. The user guarantees that the personal data provided is accurate and up-to-date and agrees to notify any changes.

Third-Party Data: If the user provides data from third parties for any purpose to PALEX MEDICAL, S.A.U., they guarantee that they have lawfully obtained such data, have informed the data subjects in advance, obtained their consent, and that the information provided is accurate and truthful.

Mandatory Information: All forms include an asterisk (*) for mandatory fields. If the user does not provide the required fields or does not check the privacy policy acceptance box, submission of the information will not be allowed.

Rights of the Data Subject: You have the right to access your data and obtain confirmation of its processing, as well as to receive a copy of the personal data being processed. You have the right to update or rectify inaccurate data or request the deletion of data when no longer needed for the purposes they were collected for. You can request the restriction of processing, object to it, revoke your consent, and exercise the right to data portability. Additionally, you have the right not to be subject to automated decision-making based solely on your personal data. You can exercise your rights by contacting us at: Jesús Serra Santamans, 5 - 08174 SANT CUGAT DEL VALLÈS (Barcelona), or via email: lopd@palex.es. If you believe your rights have not been properly addressed, you have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es).

Processing of Data from Minors: Those who provide data via this website and accept its processing declare they are over 14 years old. Access and use of the portal are prohibited to minors under this age. If at any time the Controller detects that a minor under 14 has provided personal data, those data will be deleted. Parents or guardians may also contact PALEX MEDICAL, S.A.U. to block the access account of minors under their responsibility who have registered with false information.

Cookie Policy: A cookie is a small file that is downloaded and stored on the user’s computer when accessing a website. Cookies allow the website, among other things, to store and retrieve information about the user’s browsing habits or their device and, depending on the information they contain and the way the device is used, they can be used to recognize the user. The user has the option to prevent cookies from being generated by selecting the appropriate option in their browser settings. You can learn more by reading our Cookie Policy