SALUT MATCH, S.L. must verify that the personal data of the interested party collected on the website are processed in accordance with the principles relating to processing:

• Processed lawfully, fairly and transparently in relation to the interested party (“lawfulness, fairness and transparency”).

• Collected for specified, explicit and legitimate purposes, without being able to be processed in a manner incompatible with those purposes (“purpose limitation”).

• Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (“data minimization”).

• Accurate and, if necessary, updated by adopting reasonable technical and organizational measures so that they are deleted or rectified when they are inaccurate with respect to the purposes for which they are processed (“accuracy”).

• Maintained in a way that allows identification for no longer than is necessary for the purposes of the processing (“storage limitation”).

• Processed in such a way that adequate security is guaranteed through the application of appropriate technical or organizational measures (“integrity and confidentiality”).

• Thus, SALUT MATCH, S.L. will be responsible for compliance with the above provisions and must be able to prove it subsequently (“proactive responsibility”).

Similarly, the processing carried out by the entity will only be lawful if it meets at least one of the following conditions (“lawfulness of the processing”):

• The interested party gave their consent to the processing of their personal data for one or more specific purposes;

• The processing is necessary for the execution of a contract to which the interested party is a party or for the application at the request of the latter of pre-contractual measures;

• The processing is necessary for the fulfillment of a legal obligation applicable to the controller;

• The processing is necessary to protect the vital interests of the interested party or of another natural person;

• The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

• The processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child. This legitimate basis shall not apply to processing carried out by public authorities in the exercise of their functions.

Where the processing is based on the consent of the data subject, the controller shall be able to demonstrate that the data subject has consented to the processing of his or her personal data.

If the data subject’s consent is given in the context of a written statement which also concerns other matters, the request for consent shall be presented in such a way that it is clearly distinguishable from the other matters, in an intelligible and easily accessible form and using clear and plain language.
The interested party will have the right to withdraw their consent at any time. The withdrawal of consent will not affect the lawfulness of the processing based on the consent prior to its withdrawal. Before giving their consent, the interested party will be informed of this. It will be as easy to withdraw consent as to give it.

SALUT MATCH, S.L. must include in the forms used for the collection of personal data, the information to comply with the duty to inform contained in articles 13 and 14 of the General Data Protection Regulation (hereinafter RGPD).

In this sense, and in order to adapt to the applicable and current regulations on data protection, when SALUT MATCH, S.L. obtains personal data directly from an interested party, you must:

1. Provide the identity and contact details of the Data Controller and, where applicable, of their representative, the contact details of the Data Protection Officer, where applicable, and the purposes of the processing for which the personal data are intended, as well as the legal basis for the processing.

2. Specify the legitimate interests of the controller or a third party when the processing is necessary for the satisfaction of those interests. Provided that they are not overridden by the interests or fundamental rights and freedoms of the data subject.

3. Provide the recipients or categories of recipients of the personal data and, where applicable, the controller’s intention to transfer personal data to a third country or international organisation and the existence or absence of an adequacy decision by the Commission.

4. Indicate the period for which the personal data will be kept or the criteria used to determine the retention period.

5. Inform the existence of the right to request from the Controller access to personal data relating to the data subject, their rectification or deletion (“right to be forgotten”), the limitation of their processing or the right to object to processing, as well as the portability of their data.

6. Inform about the possibility of withdrawing consent at any time, without this affecting the lawfulness of the treatment based on consent prior to its withdrawal. As well as, inform them of the possibility of filing a complaint with a Control Authority.

7. Specify whether the communication of personal data is a legal or contractual requirement, or a necessary requirement to enter into a contract and whether the interested party is obliged to provide personal data and inform them of the possible consequences of not providing such data.

8. Inform about the existence of automated decisions, including the development of profiles and, at least in these cases, inform them about the logic applied, as well as the importance and the envisaged consequences of this treatment for the interested party.

When SALUT MATCH, S.L. does not obtain the personal data of the interested party, it must provide them with the information described in the previous section. As well as the categories of personal data in question, the source from which they come and, where applicable, whether they come from publicly accessible sources.

SALUT MATCH, S.L. must include in the forms or documents used to collect personal data, including those established on the website owned by SALUT MATCH, S.L., the information to comply with the duty to inform contained in articles 13 and 14 of the General Data Protection Regulation (hereinafter RGPD), and, if necessary, record the consent granted by the interested party.

To make compatible the greater requirement of information that must be provided to the interested party whose personal data will be processed, the possibility of presenting the information is established by adopting an information model by layers or levels, this must be in line with the fact that the information must be provided in clear, simple language and in a concise, transparent, intelligible and easily accessible form.
Article 11 of Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (hereinafter LOPDGDD), regulates the basic information that is required in a first layer.

The information by layers consists of:

• Presentation of Basic Information (1st layer): consists of presenting basic information at a first level, in a summarized form, at the same time and in the same medium in which the data is collected.

• Reference to Additional Information (2nd layer): This consists of presenting the information in a detailed and complete manner, in an appropriate, structured, concise and precise medium. The way in which this additional information is presented depends on the characteristics of the medium used to inform, it may be presented in paper or electronic format.