Privacy Policy

In compliance with the provisions of the General Data Protection Regulation 2016/679 (GDPR) and Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights (LOPDGDD) of December 5, 2018, we inform you:

1. DATA CONTROLLER

  • Identity: COLUMNAQUIRO S.L. with NIF B16365504, owner of QuiroFlow, hereinafter "the Owner"
  • Address: Calle dels vivons, 29 - 0 iz, 46006, Valencia
  • Telephone: 744735363
  • Contact email: hola@quiroflow.com

2. PURPOSE OF DATA PROCESSING

We inform you that the data you provide us through this website will be processed for the purpose of:

  • Managing the services provided through this website.
  • Keeping you informed about QuiroFlow's activities, features and updates.
  • Development, compliance and execution of the software subscription agreement and inquiries related to the service requested through the website.
  • Customer support.

In addition, in accordance with the GDPR, a record of processing activities is kept that specifies, according to their purposes, the processing activities carried out and the other circumstances established in the GDPR.

Personal information may not be used for purposes other than those related to the contracted services. No automated decisions will be made based on that profile.

This policy covers data collected through this website (contact forms, demo bookings, browsing). The processing of patient data that customer clinics enter within the QuiroFlow application is governed by the data processing agreement signed with each clinic, in its capacity as controller of that data.

3. LEGAL BASIS FOR DATA PROCESSING

The legal basis for the processing of your data is:

  • The consent granted by the User through acceptance of this Policy and the corresponding checkbox.
  • Legitimate interest to respond to requests or queries raised through the different means of contact.
  • The User has provided their personal data within the framework of a contractual or pre-contractual relationship to respond to their request and/or query, and therefore its processing is necessary for the maintenance of that relationship.
  • Legal obligations applicable to the Owner that require the processing of personal data in accordance with the services provided or those related to tax matters.

The User may, at any time, revoke their consent to the processing of their personal data. Under no circumstances does the withdrawal of this consent condition the provision of the service and/or the execution of contracts with the Owner.

4. PERSONAL DATA PROCESSED AND ITS SOURCE

The personal data we process through this website is identifying in nature and has been provided by the User themselves by filling out the contact form, booking a demo, sending emails, or using the features offered on the website.

The use of the contact sections, filling out forms and/or the features offered on the Portal is voluntary. However, filling in certain fields of the form or providing them through the use of other features is necessary to properly respond to and manage your request, so the User's refusal to provide the required information will prevent the Owner from responding to and managing it correctly.

The User guarantees that the data provided to us is truthful, accurate and complete. Data will be cancelled, deleted or blocked when it is inaccurate, incomplete, or is no longer necessary or relevant to its purpose in accordance with current legislation.

5. PROTECTION OF MINORS' DATA

As established in the GDPR and the LOPDGDD, only those over 14 years of age may lawfully grant their consent for the processing of their personal data. Only people over 14 years of age may provide personal data on this website. For children under 14, the consent of their parents or guardians is mandatory in order to process their personal data.

6. DATA RETENTION PERIODS

The personal data provided by the User will be kept for as long as the relationship with QuiroFlow is maintained, as long as the User does not request its deletion, or for the legally established period. It may also be kept when necessary for compliance with a legal obligation or for the formulation, exercise and defence of claims.

If the User withdraws their consent or exercises their rights of objection or deletion, their data will be kept blocked and available to the Administration of Justice for the periods legally established to address any liabilities arising from the processing of personal data.

7. SECRECY AND SECURITY OF PERSONAL DATA

The Owner undertakes to adopt the necessary technical and organizational measures, appropriate to the level of risk of the data collected, so as to guarantee the security of personal data and avoid its accidental or unlawful destruction, loss or alteration, or unauthorized communication or access.

Personal data will be treated as confidential by the Owner, who undertakes to inform and guarantee, by way of a legal or contractual obligation, that such confidentiality is respected by its employees, collaborators and anyone to whom the information is made accessible.

8. DATA TRANSFERS AND RECIPIENTS

Your personal data will be disclosed in legally established cases, for example to Public Administrations for compliance with obligations directly required of the Owner, or when necessary to fulfil the purposes indicated above, or to provide services strictly necessary for the operation of the business (for example, hosting providers, WhatsApp/email delivery, or payment processing).

9. USER RIGHTS

What are your rights when you provide us with your data?

  • You have the right to obtain confirmation as to whether we are processing personal data concerning you, or not.
  • You have the right to access your personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
  • Under certain circumstances, you may request the restriction of the processing of your data, in which case we will only keep it for the exercise or defence of claims.
  • Under certain circumstances and for reasons related to your particular situation, you may object to the processing of your data, in which case the Owner will stop processing it, except for compelling legitimate reasons, or the exercise or defence of possible claims.
  • Where legally applicable, you have the right to data portability, which means you have the right to receive the personal data concerning you that we are processing and store it on your own device.

You may exercise, where applicable, your rights of access, rectification, objection, deletion, restriction of processing, portability and objection to automated individual decisions before the Owner, by written communication accompanied by a photocopy of your ID to prove your identity, with the reference "GDPR Rights" addressed to: Calle dels vivons, 29 - 0 iz, 46006, Valencia, or to the email address: hola@quiroflow.com.

We also inform you that you can file any type of complaint regarding the protection of personal data with the Spanish Data Protection Agency (www.aepd.es), the Spanish Supervisory Authority.