Privacy Policy

“Derma Calàbria” is deeply committed to complying with Spanish and European regulations on the protection of personal data, and guarantees full compliance with the obligations set forth, as well as the implementation of the security measures set forth in the General Data Protection Regulation (GDPR) (EU) 2016/679, of April 27, and in Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD and GDD, hereinafter LOPD).

In accordance with these regulations, we inform you that the use of our website may require you to provide certain personal data through contact forms, or by sending emails, and that this data will be processed by “"Derma Calabria", Data Controller, whose details are:

Company Name: MYDERM BCN, SLP
CIFB19786367
Registered Office: C/ Calabria 241, Baixos, Consulta 11, 08029, Barcelona, Spain
Telephone: 935 24 12 34 – 931 40 69 50
eMail: privacidad@dermacalabria.com

Obtaining and Processing Personal Data

Personal data is any information relating to a person: name, email, home address, telephone number, NIF/NIE… Additionally, when a User visits our website, certain information is automatically stored for technical reasons, such as the IP address assigned by their Internet access provider.

“Derma Calàbria”, as the Data Controller, has the duty to inform Users of its website about the collection of personal data that may be carried out, either by sending an email or by completing the forms included on the website.

Only the data necessary to provide the contracted service or to adequately respond to the User's request for information will be obtained. The data collected is identifying information and corresponds to the minimum reasonably required to complete the activity. Under no circumstances will the data be used for any purpose other than that for which it was collected.

Contact forms/email

Purpose: To respond to your request for information made through our contact form(s).

LegitimationThe legal basis that legitimizes this processing is the User's consent, which may be revoked at any time.

Data transferPersonal data will be processed through servers managed by Servicebox, who will be considered as the Data Processor.

Minors

Only individuals aged 14 and over may provide personal data on this website. In accordance with the Spanish Data Protection Act (LOPD) and the General Data Protection Regulation (GDPR), for individuals under 14 years of age, parental or guardian consent is mandatory for us to process their personal data.

Furthermore, only individuals over 18 years of age may contract our services. In the case of individuals under 18 years of age, parental or legal guardian consent is mandatory for us to provide the services offered, unless the minor is emancipated.

Security Measures

Users of the “Derma Calàbria” website are hereby informed that all available technical and organizational security measures have been adopted to prevent the loss, misuse, alteration, unauthorized access, and theft of data, thereby guaranteeing the confidentiality, integrity, and quality of the information contained therein, in accordance with current data protection regulations. The personal data collected in the forms is processed solely by “Derma Calàbria” staff or designated Data Processors.

The “Derma Calàbria” website also features SSL encryption, which allows the User to securely send their personal data through the website's contact or registration forms.

Data accuracy

The User declares that all data provided is true and correct and undertakes to keep it updated. The User is responsible for the accuracy of their data and will be solely liable for any disputes or litigation that may arise from its falsity. It is important that, in order for us to keep personal data up to date, the User informs “Derma Calàbria” whenever there is any change to it.

Data transfer

“Derma Calàbria” will not share or disclose your data to any third party, except as legally required or when strictly necessary for the provision of a service. Specifically, data may be shared with:

Providers of technological or IT services
Payment service providers
Courier and parcel delivery companies
Third parties or intermediaries, as service providers, operating in our own name (management, consulting, etc.).

Data transfers will be carried out respecting the strictest confidentiality, employing the necessary measures, such as the signing of confidentiality agreements or adherence to the privacy policies established on their respective websites. Users may refuse the transfer of their data to Data Processors by submitting a written request through any of the aforementioned means.

Furthermore, where necessary, Customer data may be transferred to certain bodies, in compliance with a legal obligation: Spanish Tax Agency, Labor Inspectorate, etc.

Exercising User Rights

The Spanish Data Protection Act (LOPD) and the General Data Protection Regulation (GDPR) grant data subjects the right to exercise a series of rights related to the processing of their personal data. To do so, the User must contact us by email at privacidad@dermacalabria.com, or by written communication to the address shown in our Legal Notice, properly identifying themselves. This communication must include the following information: the User's full name, the purpose of the request, their address, and supporting documentation.

The exercise of rights must be carried out by the User himself. However, they may be carried out by a person authorized as the User's legal representative, provided that documentation proving such representation is submitted.

The User may request to exercise the following rights:

Right to request the access to personal data, which is the right to obtain information about whether your own personal data is being processed, the purpose of the processing, if any, as well as the information available about the origin of said data and the communications made or planned regarding them.
Right to request their rectification, in case the personal data is incorrect or inaccurate, or suppression of the data that turns out to be inadequate or excessive.
Right to request the limitation of its treatment, in which case only the data strictly necessary for the exercise or defense of claims will be kept by “Derma Calàbria”.
Right to object to the processing: refers to the right of the interested party to prevent the processing of their personal data or to have it stopped in cases where their consent is not necessary for the processing, which involves commercial prospecting files or files that have the purpose of making decisions relating to the interested party and based solely on the automated processing of their data, unless for legitimate reasons or the exercise or defense of possible claims they have to continue processing.
Right to portability Regarding the data: if you want your data to be processed by another company, “Derma Calàbria” will facilitate the portability of your data in an exportable format.

If consent has been given for a specific purpose, The User has the right to withdraw consent at any timewithout affecting the lawfulness of the processing based on the consent prior to its withdrawal.

We undertake to exercise all these rights within the maximum legal period (1 month).

If a User believes there is a problem with the way “Derma Calàbria” is handling their data, they can direct their complaints to the Security Officer or the relevant data protection authority, which in the case of Spain is the Spanish Data Protection Agency.

Data retention

The personal data of Users who use the contact form or who send us an email requesting information will be processed for the time strictly necessary to respond to the request for information, or until the consent given is revoked.

Customers' personal data will be processed until the contractual relationship ends. The retention period for personal data will be the minimum necessary, and may be kept until:

4 years: Law on Infringements and Sanctions in the Social Order (obligations regarding affiliation, registrations, terminations, contributions, payment of wages…); Arts. 66 et seq. General Tax Law (accounting books…)
5 years: Art. 1964 Civil Code (personal actions without a special time limit)
6 years: Art. 30 Commercial Code (accounting books, invoices…)
10 years: Art. 25 Law on the Prevention of Money Laundering and Financing of Terrorism.
No deadline: disaggregated and anonymized data.

Confidentiality

The information provided by the User will, in all cases, be considered confidential and may not be used for any purpose other than those described herein. “Derma Calàbria” undertakes not to disclose or reveal any information about the User's claims, the reasons for the requested advice, or the duration of their relationship.

Validity

This privacy and data protection policy was drafted on December 9, 2025. It may vary depending on changes in regulations and case law, and it is the responsibility of the data subject to read the updated document in order to know their rights and obligations in this regard at any given time.