Privacy policy
BM2 HEALTH

BM2 HEALTH S.L. informs users that they may exercise their rights of access, rectification, limitation, deletion, portability, opposition to the processing of their personal data and the right not to be subject to automated decisions, including profiling, before the data controller, as well as the right to withdraw the consent given.

• Right of access: It is the user’s right to obtain confirmation as to whether their data are being processed and, if so, the specific personal data processed and legal information regarding the processing (purposes, legitimate basis, retention periods, transfers, origin of the data, etc.).
• Right of rectification: It is the right of the data subject to have data that are found to be inaccurate or incomplete modified. In relation to the website, it may only be satisfied in relation to that information that is under the control of the website, for example, deleting comments published on the page itself, images or web content containing personal data of the user.
• Right to limitation of processing: It is the right to have the purposes of processing originally intended by the data controller limited in certain cases.
• Right to deletion: It is the right to delete the personal data of the user, except as provided in the GDPR itself (freedom of expression and information, retention obligations, formulation, exercise or defence of claims, etc.).
• Right to portability: The right to receive the personal data that the user has provided, in a structured, commonly used and machine-readable format, and to transmit them to another controller when the processing is based on consent or the execution of a contract and is carried out by automated means.
• Right of objection: It is the user’s right not to have their personal data processed or to stop the processing of their personal data by the website when the processing is based on the legitimate interest or public interest or when it concerns direct marketing processing.
• Right not to be subject to automated decisions, including profiling: Where processing is not necessary for entering into, or the performance of a contract, is not authorised by Union or Member State law and is not based on consent, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects on you or similarly significantly affects you.
• Right to withdraw consent: For any processing based on your consent, you have the right to withdraw it at any time and free of charge.
•  

To exercise any of the data protection rights described above, you must follow these instructions:

• Submit a letter to the address BARRIO ZIKUÑAGA 57-F, POL. IND. IBARLUZE,20120 HERNANI(GUIPÚZCOA) (for the attention of BM2 HEALTH S.L.) or by email to info@bm2health.com.
• The document sent by the owner of the personal data (data subject) requesting the exercise of rights must take into account the following:
  • The applicant must provide reliable identification and, if there are any doubts about the identity of the applicant, he/she will be asked to correct the request (e.g. by requesting more information, such as the ID number, the ID document, the email address provided, etc.)
  • The request may be made by the representative, legal or voluntary, when he or she is duly identified and authorised by the owner of the data (through express authorisation from the owner to exercise the very personal rights regulated in the regulations on the protection of personal data).
  • Petition in which the request is specified (right/s that are intended to be exercised). If you do not refer to specific processing, you will be provided with a response in relation to all the processing that affect your personal data. If you request information about specific processing, only the information about that processing. If you make the request by telephone, you will be asked to do so in writing and will be informed of how you can do so and the address to which you must send it. You will never be given information over the telephone.
  • Postal or electronic address for notification purposes.
  • Accrediting documents of the request you make, if applicable that are necessary.
  • The applicant must use any means that allows proof of the sending and receipt of the application.