Privacy policy
How we process and protect your personal data.
Your privacy matters to us. This privacy policy explains what personal data we collect and how we use it.
UpRetina is committed to respecting and protecting the personal data of users and customers.
Data controller
- Controller
- OPT RETINA S.L.
- Trade names
- UpRetina and OPTretina
- Tax ID
- B66289117
- Address
- Calle Las Palmas, 11 - 08195 Sant Cugat del Valles, Barcelona, Spain
- info@upretina.com
- Telephone
- +34 937 37 00 44
- Privacy contact / DPO contact
- privacidad@upretina.com
Principles applied to personal data
- Lawfulness, fairness, and transparency.
- Data minimization.
- Storage limitation.
- Integrity and confidentiality.
Why we process personal data
- Respond to requests sent through the website or email.
- Manage contractual and commercial relationships.
- Provide contracted telemedicine services.
- Send service communications where there is legal basis or consent.
- Comply with legal and regulatory obligations.
Legal basis by purpose
- Enquiries sent through forms, phone or email: pre-contractual steps and, where applicable, consent.
- Customer relationship management and service delivery: performance of a contract.
- Commercial communications to non-customers: consent.
- Legal, regulatory and traceability obligations: compliance with legal obligations.
- Website security and abuse prevention: legitimate interest.
Recipients and international transfers
Personal data may be shared with service providers acting as processors for hosting, technical support, corporate email or administrative management, always under written agreements and following OPT RETINA S.L. instructions.
Under the current website configuration, no international transfers derived from third-party analytics cookies are carried out. If this changes, this policy will be updated before such services are activated.
Your rights
You may exercise your rights of access, rectification, erasure, restriction, objection, and data portability.
To exercise your rights, contact us at info@upretina.com.
You may also file a complaint with the Spanish Data Protection Authority (AEPD).
Legal basis and retention
Processing is based on contractual necessity, legitimate interest, legal obligations, or consent, depending on each case.
Data is retained while the relationship remains active and for the period required by law.
Retention periods
- General enquiries: for as long as needed to answer the request and, at most, for 12 months if no further relationship is formalized.
- Customer and invoicing data: during the contractual relationship and the statutory accounting and tax retention periods.
- Data linked to healthcare services or regulatory traceability: for the periods required by applicable healthcare and medical-device regulations.
- Commercial communications based on consent: until consent is withdrawn or an unsubscribe request is received.
Automated decisions
No solely automated decision-making with legal or similarly significant effects is carried out based on the data collected through this website.