HMM Global

Privacy policy

In accordance with the data protection laws and Law 34/2002 on Information Society Services and Electronic Commerce, the owner of the app is GLIN TECHNOLOGIES, S.L., with Tax Identification Number B16838096. Given the nature of the relationship and the service provided by GLIN TECHNOLOGIES, S.L., we will be responsible for the processing of questions that we receive from users of the website, such as, for instance, information requests or inquiries through the use of a form on the website.

Regarding the processing of end client data, we comply with the figure of data processor, providing a management and maintenance service of the app to the data controller.

DATA PROCESSOR

  • GLIN TECHNOLOGIES, S.L, Tax Identification Number B16838096.
  • Rambla de Catalunya 77, 1º, 1ª, 08007 – Barcelona - Spain.
  • Email: dpo@hmmglobal.com

The data processor applies the principle of transparency in the processing of personal data at all times, providing individuals with information on the processing of their data in a concise, easily accessible, complete and easy-to-understand language while, at the same time, facilitating the exercise of rights established by the current regulations.

Purpose of the processing

The data collected are those necessary to comply with the purpose of processing the request you have made, as well as to manage and provide the service contracted. The data processor processes personal data for the following purposes:

  • Management and contracting of the products and services offered by the data controller.
  • Informing on the activity developed by the data controller.
  • Management and processing of the request received.

Legal bases

The legal bases that legitimize the processing of personal data of the interested persons, based on the powers and functions of the data processor, are the following:

1. Purpose of the management and provision of the Services.

  • Consent of the interested party: GDPR: 6.1. a) The interested party gave his/her consent for the processing of his/her personal data for one or several specific purposes.
  • Performance of an agreement: GDPR: 6.1.b) Processing necessary for the performance of an agreement to which the interested party is subject or for the implementation of pre-contractual measures at the request of the former.
  • Compliance of a legal obligation: GDPR: 6.1.c) The processing is necessary for compliance with a legal obligation applicable to the data processor.

2. Management purpose of the request made.

  • Consent of the interested party: GDPR: 6.1. a) The interested party gave his/her consent for the processing of his/her personal data for one or several specific purposes.

The mandatory data are specified in the different forms available on the web platform, your refusal to provide them will mean that we will not be able to process your request.

You assure us that all the data provided are true, accurate and pertinent to the purpose for which we request it. In order for us to keep your personal data up to date, it is important that you inform us whenever there are any changes to your personal information. Otherwise, we are not responsible for their accuracy. We consider that, if you do not expressly cancel your personal data from our files, you are still interested in remaining included in therein until the data controller deems it appropriate and as long as it is appropriate for the purpose for which they were obtained.

Conservation

The personal data provided will be kept as long as there is a business relationship, and once the aforementioned relationship ends, they will remain blocked for the legally established period of time, prior to being destroyed.

Origin of the data

The personal data processed by the data processor comes directly from the interested parties or their representatives, or from other public administrations in accordance with legal provisions. We collect your personal information through different existing forms. You will always be informed at the time of collection regarding the characteristics of the processing of your data. The data collected are adequate, pertinent and strictly necessary for the purpose of managing and processing your request.

Transfer of data

Please note that your data will not be transferred to third parties without your express consent, except for those transfers necessary to comply with a legal obligation.

Furthermore, if it is necessary or useful to achieve the aforementioned purposes, we reserve the right to disclose or grant access to personal data to the following recipients, if authorized or required by law: Public administrations, government administrations, courts, competent authorities.

International data transfer

Please note that the data collected through the forms available on the website may be transferred to third countries outside the European Economic Area. To be exact, to the Republic of Argentina, a country declared as adequate regarding the level of security proclaimed by the European Commission (Commission Decision 2003/490/EC, of June 3, 2003).

Children under 14 years of age

For minors under the age of 14, the consent of the parents or guardians will be necessary to process the minors’ data. In case the data processor detects users who may be under the indicated age, we reserve the right to request a copy of your ID card or equivalent document, or, where applicable, the authorization of their parents or guardians.

Rights of the interested parties

The owner of the personal data has the right to:

  • Obtain confirmation as to whether the data processor is processing personal data concerning them or not.
  • Access their personal data, as well as to request rectification of inaccurate data or, where applicable, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which they were collected.
  • In certain circumstances, the interested parties may request the limitation on the processing of their data, in which case the data controller will keep them solely for the exercise or defense of claims.
  • In certain circumstances and for reasons related with your specific situation, the interested parties may oppose the processing of their data.
  • In certain circumstances, by virtue of the right of portability, the interested parties will have the right to obtain their personal data in a structured, commonly used, machine-readable format and transmit it to another data controller.
  • Not be subject to automated decisions based solely on the processing of your data, including profiling, that produces legal effects on the owner of the data or may significantly affect him/her.

The owner may exercise his/her rights:

  • By writing to the data controller at Rambla de Catalunya 77, 1º, 1ª, 08007 – Barcelona - España. Reference “Protección de Datos” (Data Protection).
  • By email to dpo@hmmglobal.com indicating “Protección de Datos” (Data Protection) in the subject.

If you are unsatisfied with the response when exercising your rights, and in any case, whenever you consider it appropriate, you may submit a claim to the Spanish Data Protection Agency.

DATA PROCESSING BY THIRD PARTIES. - GLIN TECHNOLOGIES, S.L has access to your data due to being the owner of the app and provides the service of maintenance and management of the app in favor of the data processor. The latter is responsible for complying with the duty of information and with the obligations set forth in the applicable regulations on data protection. In this case, the data controller will be the PROMOTER (see definition in the contracting conditions), being the company that hires the services of GLIN TECHNOLOGIES and the client or collaborator of the promoter that offers the service to the end client.

The existing data protection relationship between the data processor and GLIN TECHNOLOGIES, S.L. is regulated by the existence of a data processing agreement, which details the obligations of both parties with the sole purpose of protecting the rights of the data owner.

For additional information on the processing of your data by the data processor, please refer to its Privacy Policy.

Purpose of the processing

The data collected are necessary in order to become registered in the app and process the service. Those data include health data, declared in the regulations as special data. The data are treated following the instructions of the data controller. GLIN TECHNOLOGIES, S.L will not process your data for purposes other than those determined by the data controller. It will only access your data when necessary to carry out maintenance activities and for troubleshooting.

Legal bases

The legal bases that legitimize the processing of personal data of the interested persons, based on the powers and functions of the data processor, are the following:

3. Management purpose of the app.

  • Consent of the interested party: GDPR: 6.1. a) The interested party gave his/her consent for the processing of his/her personal data for one or several specific purposes.
  • Performance of an agreement with the data processor: GDPR: 6.1.b) Processing necessary for the performance of an agreement to which the interested party is subject or for the implementation of pre-contractual measures at the request of the former.

You assure us that all the data provided are true, accurate and pertinent to the purpose for which we request it. In order for us to keep your personal data up to date, it is important that you inform the data controller whenever there are any changes to your personal information. Otherwise, we are not responsible for their accuracy. Your data will not be canceled until we receive the order from the data controller.

Conservation

The personal data provided will be kept as long as there is a business relationship with the data controller, and once said relationship ends, it will be deleted by order of the data controller. For additional information on the processing of your data by the data controller, please refer to its Privacy Policy.

Origin of the data

The personal data that appears in the app comes directly from the persons interested or has been provided by the data processor. The owner of the data states that he/she has not supplanted the identity of third parties. The data collected is adequate, pertinent and strictly necessary for the purpose of managing and providing the service.

Transfer of data

Please note that your data will not be transferred to third parties without your express consent, except for those transfers necessary to comply with a legal obligation.

International data transfer

Please note that the company that developed the software is located in the Republic of Argentina, a country declared as adequate regarding the level of security proclaimed by the European Commission (Commission Decision 2003/490/EC of June 3, 2003).

Children under 14 years of age

The app has been developed for adults. Any person who is underage according to Spanish Law may not use the app. The owner of the data states that he/she has not supplanted the identity of third parties, being the sole party responsible in case of supplanting the identity of a third party.

Additional information

Once your data has been collected, a personal profile will be created in which your health data will appear. This processing is aimed neither at creating user profiles for the purpose of evaluating aspects related with the owner, nor for predicting the owner's behavior.

As to the evaluation of subjects, your personal data will not be evaluated for commercial purposes, it will only be evaluated to be included in groups of higher or lower health risk and creating work areas for logistical purposes to provide a service adequate to the needs of the owner.

Your data will not be subject to automated decisions without human control. Automated decisions are related with the assignment of medical professionals to end users. These decisions are accepted and modified subsequently by the competent staff of the data processor.

Rights of the interested parties

The owner of the personal data has the right to:

  • Obtain confirmation as to whether the data processor is processing personal data concerning them or not.
  • Access their personal data, as well as to request rectification of inaccurate data or, where applicable, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which they were collected.
  • In certain circumstances, the interested parties may request the limitation on the processing of their data, in which case the data controller will keep them solely for the exercise or defense of claims.
  • In certain circumstances and for reasons related with your specific situation, the interested parties may oppose the processing of their data.
  • In certain circumstances, by virtue of the right of portability, the interested parties will have the right to obtain their personal data in a structured, commonly used, machine-readable format and transmit it to another data controller.
  • Not be subject to automated decisions based solely on the processing of your data, including profiling, that produces legal effects on the owner of the data or may significantly affect him/her.

The owner may exercise his/her rights by contacting the data processor as indicated by the data controller in its privacy policy. The data controller will be in charge of notifying dpo@hmmglobal.com whenever appropriate for them to exercise their rights.

Whenever appropriate, you may submit a claim to the Spanish Data Protection Agency.

Contacto