Privacy Policy

I. PRIVACY POLICY AND DATA PROTECTION

In compliance with current legislation, Creatin Kinase (hereinafter also referred to as the Website) is committed to adopting the necessary technical and organizational measures, according to the security level appropriate to the risk of the collected data.

Laws incorporated into this privacy policy

This privacy policy is adapted to current Spanish and European regulations on the protection of personal data on the internet. Specifically, it complies with the following standards:

  • Regulation (EU) 2016/679 of the European Parliament and Council, dated April 27, 2016, regarding the protection of natural persons concerning the processing of personal data and the free movement of such data (GDPR).
  • Organic Law 3/2018, of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPD-GDD).
  • Royal Decree 1720/2007, of December 21, approving the Regulation for the Development of Organic Law 15/1999, of December 13, on the Protection of Personal Data (RDLOPD).
  • Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the data controller

The entity responsible for processing the personal data collected by Creatin Kinase is: Busimedic S.L., with NIF/CIF: B20955480, registered at the Gipuzkoa Mercantile Registry with the following registration details: [insert details here], represented by: Busimedic S.L. (hereinafter referred to as the Data Controller). Their contact details are as follows:

  • Address: Mons Pasealekua, 102, 6C, Donostia, Gipuzkoa
  • Contact phone: 619284022
  • Contact email: info@creatinkinase.com

Personal Data Registration

In compliance with the provisions of the GDPR and LOPD-GDD, we inform you that the personal data collected by Creatin Kinase through the forms provided on its pages will be incorporated and processed in our file to facilitate, expedite, and fulfill the commitments established between Creatin Kinase and the User or to maintain the relationship established in the forms completed by the User or to address a request or inquiry from them.

Additionally, in accordance with the provisions of the GDPR and LOPD-GDD, unless the exception provided in article 30.5 of the GDPR applies, a record of processing activities is maintained, specifying the processing activities carried out according to their purposes and the other circumstances established in the GDPR.

Principles applicable to the processing of personal data

The processing of the User’s personal data will be subject to the following principles set out in Article 5 of the GDPR and Article 4 and following of Organic Law 3/2018, of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights:

  1. Principle of lawfulness, fairness, and transparency: The User’s consent will always be required, with fully transparent information regarding the purposes for which personal data is collected.
  2. Principle of purpose limitation: Personal data will be collected for specified, legitimate, and explicit purposes.
  3. Principle of data minimization: Only the personal data strictly necessary for the purposes for which it is processed will be collected.
  4. Principle of accuracy: Personal data must be accurate and kept up to date.
  5. Principle of storage limitation: Personal data will only be kept in a way that permits identification of the User for the period necessary for the purposes of its processing.
  6. Principle of integrity and confidentiality: Personal data will be processed in a way that ensures its security and confidentiality.
  7. Principle of proactive responsibility: The Data Controller will ensure that the above principles are adhered to.

Categories of personal data

The categories of data processed by Creatin Kinase are only identifying data. Under no circumstances are special categories of personal data, as defined in Article 9 of the GDPR, processed.

Legal basis for processing personal data

The legal basis for processing personal data is consent. Creatin Kinase commits to obtaining the explicit and verifiable consent of the User for processing their personal data for one or more specific purposes. The User has the right to withdraw their consent at any time. Withdrawing consent will be as easy as giving it. As a general rule, the withdrawal of consent will not affect the use of the Website.

In cases where the User must or may provide their data via forms to make inquiries, request information, or for reasons related to the Website’s content, they will be informed if the completion of any form is mandatory due to its necessity for the proper conduct of the operation.

Purposes of processing personal data

Personal data is collected and managed by Creatin Kinase to facilitate, expedite, and fulfill the commitments established between the Website and the User or to maintain the relationship established in the forms completed by the User or to address a request or inquiry.

Similarly, data may be used for commercial purposes such as personalization, operational and statistical purposes, and activities related to Creatin Kinase’s business objectives, as well as for data extraction, storage, and marketing studies to tailor the Content offered to the User, and improve the quality, functionality, and navigation of the Website.

At the time the personal data is obtained, the User will be informed about the specific purpose(s) for which the personal data will be processed; that is, how the collected information will be used.

Retention periods for personal data

Personal data will only be retained for the minimum time necessary for the purposes of its processing and, in any case, only for the following period: 12 months, or until the User requests its deletion.

At the time the personal data is obtained, the User will be informed about the period for which their personal data will be retained, or, if this is not possible, the criteria used to determine this period.

Recipients of personal data

The User’s personal data will be shared with the following recipients or categories of recipients:

In the event that the Data Controller intends to transfer personal data to a third country or international organization, at the time the personal data is obtained, the User will be informed about the third country or international organization to which the data is intended to be transferred, as well as the existence or absence of an adequacy decision by the Commission.

Personal data of minors

In compliance with Articles 8 of the GDPR and 7 of Organic Law 3/2018, of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights, only individuals over 14 years of age may give consent for the processing of their personal data lawfully by Creatin Kinase. If the individual is under 14 years of age, consent from parents or guardians will be required for processing, and this will only be considered lawful to the extent that they have authorized it.

Confidentiality and security of personal data

Creatin Kinase is committed to adopting the necessary technical and organizational measures, according to the security level appropriate to the risk of the collected data, to guarantee the security of personal data and prevent its accidental or unlawful destruction, loss, alteration, unauthorized communication, or access. However, since Creatin Kinase cannot guarantee the invulnerability of the internet or the complete absence of hackers or others accessing personal data fraudulently, the Data Controller is committed to informing the User without undue delay if a security breach occurs that is likely to result in a high risk to the rights and freedoms of individuals.

Rights arising from the processing of personal data

The User has the following rights regarding their personal data processed by Creatin Kinase, which they can exercise before the Data Controller:

  • Right of access: The User has the right to confirm whether or not Creatin Kinase is processing their personal data and, if so, to obtain information about their specific personal data and the processing carried out by Creatin Kinase.
  • Right to rectification: The User has the right to have inaccurate personal data rectified or completed if it is incomplete.
  • Right to deletion (“right to be forgotten”): The User has the right, unless otherwise provided by applicable law, to obtain the deletion of their personal data when they are no longer necessary for the purposes for which they were collected or processed…

CONTACTO
CONTACTO