Privacy policy

01Data controller

• Controller: Full name (Kemper Group)
• Tax ID (NIF/CIF): Tax ID
• Address: Address
• Email: paula@kempergroup.es
• Phone: +34 687 313 641

02What data we process

• “Request a meeting” form: the type of practice you work in, your answers to the questionnaire, the areas you are interested in, your professional email and, if you write one, your free-text comment. They are only sent when you click “Send” after accepting this policy.
• Email, phone, WhatsApp or LinkedIn: the data and content of the messages you send us through these channels.
• Technical connection data: the hosting service temporarily logs data such as your IP address, for security and to prevent misuse of the form.
• Web analytics, only if you accept analytics cookies: browsing data such as pages visited, device type, traffic source and an online identifier. We do not use it to identify you.

Please do not include patient health data or any other clinical information in the form or in your messages.

03Why we use it and on what legal basis

• To reply to your request and, if you ask us to, arrange a meeting or prepare a proposal. Legal basis: your consent (Art. 6(1)(a) GDPR) and pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).
• To protect the website and the form against misuse. Legal basis: our legitimate interest in the security of the service (Art. 6(1)(f) GDPR).
• To measure, in aggregate, how the website is used in order to improve it. Legal basis: your consent to analytics cookies (Art. 6(1)(a) GDPR and Art. 22.2 LSSI-CE), which you can withdraw at any time via “Cookie settings”.

We do not use your data to send you advertising, and we make no automated decisions with it.

04How long we keep it

Contact data is kept for as long as needed to handle your request and then for the applicable legal periods. If we do not go on to work together, we will delete it within a maximum of twelve months. Technical connection data is kept only for the period set by the hosting service for security reasons. Analytics data is kept for a maximum of 14 months.

05Recipients and processors

We do not share your data with third parties unless legally required. We rely on these providers, who process data on our behalf:

• Cloudflare, Inc. (USA): website hosting, protection against attacks and receipt of the form.
• Resend (USA): delivery of form requests to our inbox by email.
• ntfy (ntfy.sh): instant internal notification of incoming requests.
• Google Ireland Ltd. (Google Analytics 4): web analytics, only with your consent.
• Email provider: management of our email.

Some of these providers may transfer data outside the European Economic Area. These transfers are covered by the safeguards provided for in the GDPR (EU-US Data Privacy Framework or standard contractual clauses).

06Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to paula@kempergroup.es stating the right you wish to exercise. You may also withdraw your consent at any time.

If you believe we have not handled your data correctly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

07Security

The website is always served over an encrypted connection (HTTPS), and we apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration.