Privacy Policy

1. IDENTIFICATION AND CONTACT DETAILS OF THE DATA CONTROLLER.

RENÉ QUINTON FOUNDATION (hereinafter, the “Foundation” or “we”) is the data controller responsible for the processing of the personal data that you provide through the website: https://www.fundacionrenequinton.org/en/

We have made every effort to ensure that this Privacy Policy is as concise and easy to understand as possible. However, if any of the information provided herein is unclear or if you require further information, you may contact us at any time using any of the following methods:

• RENÉ QUINTON FOUNDATION
• Plaza Navarro Rodrigo, 9, 03007, Alicante, Spain.
• Spanish Tax ID (NIF): G54493366
• Email: derechosley@fundacionrenequinton.org
• Data Protection Officer (DPO): SEGURIDAD Y PRIVACIDAD DE DATOS, S.L. Telephone: +34 963 122 868. Email: derechosley@fundacionrenequinton.org

This Privacy Policy governs the services provided through the RENÉ QUINTON FOUNDATION website and any other platform that may be used to access our Services (hereinafter, the “Services”). This Privacy Policy applies to volunteers wishing to participate in the Foundation, customers who accept the General Terms and Conditions, and candidates applying for recruitment processes.

2. CATEGORIES OF PERSONAL DATA

3. PURPOSES OF THE PROCESSING OF YOUR PERSONAL DATA.

3.1. PROCESSING NECESSARY TO PROVIDE THE SERVICES YOU REQUEST

There are certain data that we require and therefore request from you as “mandatory”, as they are necessary to process your purchase of the selected product or to provide the services you request. Failure to provide such information will prevent us from processing your request or completing the purchase of the product. More specifically, this includes the following:

(i) Registering you as a customer and registered user. If you register on the Foundation’s website, we will process your personal data in order to create your customer and registered user account, as well as to send you any communications relating to the operation of your account (including the management and resolution of technical issues, notifications regarding amendments to the General Terms and Conditions, or the handling of any complaints you may submit). For these purposes, we will process your identification and contact data. Please note that, in order to send you the welcome pack, your identification and contact data will be disclosed to LABORATOIRES QUINTON INTERNATIONAL, S.L., so that it can deliver your order. (ii) Managing your purchases on the website. If you make a purchase through the website, the Foundation will process your personal data in order to manage your purchases, including processing your orders, preparing them, delivering them to the address you provide, issuing invoices and collecting payment, keeping you informed about the delivery status of your order, and handling any returns or complaints. For these purposes, we will process your identification, financial, contact and purchase-related data. (iii) Managing your participation in courses, seminars and events. If you register for any of our activities, the Foundation will process your personal data to manage your participation, including processing your registration, reserving your place, providing you with access to the sessions or content, sending you communications related to the activity, and monitoring your participation. For these purposes, we will process your identification, contact, academic and professional data, together with any additional information required to manage the activity in which you participate. (iv) Managing appointment scheduling for advisory services. If you request an appointment to receive advice or guidance, the Foundation will process your personal data in order to schedule and manage the appointment, including coordinating the date and time, assigning an advisor, sending appointment reminders or notifications of changes, and responding to your enquiry. For these purposes, we will process your identification and contact data, together with any information you provide in connection with your request for advice. (v) Medical assistance services. The Foundation will process your personal data for the purpose of managing and providing the medical and healthcare services offered by the Foundation as part of its activities, in accordance with the contractual relationship between you and the Foundation. In particular, as the provision of these services may involve the processing of health data (which constitute special categories of personal data under applicable data protection legislation), we hereby inform you that such processing is carried out pursuant to the exemption provided for in Article 9(2)(h) of the General Data Protection Regulation (GDPR), as it is necessary for the purposes of medical diagnosis, the provision of health or social care, or medical treatment. (vi) Issuing certificates, qualifications and diplomas. If you submit your application for any training programme or educational activity that provides an official or internal certificate, qualification or diploma, the Foundation will process your personal data in order to manage the issuance of the relevant document, verify that the applicable requirements have been met, maintain the corresponding records, and deliver the certificate, qualification or diploma where appropriate. For these purposes, we will process your identification, contact, academic and any other data necessary for the management and certification of the relevant activity. (vii) Managing your registration and status as a volunteer of the Foundation. If you register as a volunteer, the Foundation will process your personal data in order to manage your relationship with the Foundation, including processing your registration as a volunteer, coordinating your participation in activities, keeping you informed about initiatives and projects, managing your availability and, where applicable, recognising and certifying your collaboration. For these purposes, we will process your identification and contact data, as well as any information relating to your volunteer profile, availability and areas of interest.

3.2. PROCESSING BASED ON THE FOUNDATION’S LEGITIMATE INTEREST

There are other processing activities that the Foundation wishes to carry out because it has a legitimate interest in doing so and because we consider that such processing does not adversely affect your privacy. In relation to these processing activities, you have the right at any time to: (i) obtain further information about the legitimate interest on which the processing is based; (ii) understand how we have concluded that such processing does not adversely affect your privacy; and (iii) object to the processing. You may exercise these rights as described in Section 10 below, specifying the particular processing activity to which you object and the grounds on which your request is based. These processing activities are as follows:

(i) Conducting quality surveys. The Foundation may process your personal data in order to send you voluntary surveys designed to obtain your opinion regarding the quality of our services, communications and products. These surveys may be sent through our usual communication channels (email, telephone, etc.). For these purposes, we will process only the data that are strictly necessary: your first name, surname, contact details and the opinions you provide in the surveys.

These processing activities are based on our legitimate interest in improving our relationship with you and obtaining your assessment of our services. We have carried out a legitimate interest assessment (balancing test) and concluded that your privacy is not adversely affected, since participation in these surveys is entirely voluntary and the survey results are anonymous. Please also note that if you opt out of receiving commercial communications, you will no longer receive communications relating to these surveys.

3.3. PROCESSING NECESSARY TO COMPLY WITH LEGAL OBLIGATIONS

The Foundation must also process your personal data in order to comply with the various legal obligations applicable to it from time to time. These include, among others, the obligations established under the following legislation:

(i) Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the “General Data Protection Regulation” or “GDPR”).

(ii) Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (“LOPDGDD”), which requires the Foundation, as the data controller responsible for processing your personal data, to handle requests, the exercise of data protection rights and complaints submitted in relation to data protection matters.

(iii) We may also be required to disclose your personal data if requested to do so by any Court or Tribunal, the State Security Forces and Corps, or any other competent public authority or public administration, where we are under a legal obligation to comply with such request.

(iv) Royal Legislative Decree 1/2007 of 16 November, approving the revised text of the General Law for the Protection of Consumers and Users and other complementary laws, in order to deal with any requests, the exercise of rights and complaints submitted by you where you act as a consumer.

(v) Law 41/2002 of 14 November, regulating patient autonomy and the rights and obligations concerning clinical information and documentation, together with any other complementary legislation applicable to medical devices and food supplements.

These legal obligations shall remain applicable and must be complied with by the Foundation even after you cease to be a student or deregister from the website and have no outstanding orders, for the periods required under the applicable legislation in force.

In addition, your personal data may also be processed in order to comply with judicial or administrative requests.

3.4. PROCESSING ACTIVITIES REQUIRING YOUR CONSENT

The Foundation is interested in carrying out certain processing activities that require your prior consent. These processing activities are based on Article 6(1)(a) of the GDPR, which permits the processing of personal data only where “the data subject has given consent to the processing of his or her personal data for one or more specific purposes.”

Accordingly, the processing activities described in the following sections will only apply if you have given us your consent. If we have never requested your consent, or if you refused to grant it (or granted it and subsequently withdrew it), these processing activities will not apply to you.

(i) Responding to enquiries submitted through the contact forms and live chat: The Foundation provides contact forms and a live chat service on its website through which you may submit questions or enquiries regarding the Services. If you voluntarily contact us via the live chat or through any other communication channel (such as the contact form), we understand that you consent to the processing of your personal data for the purpose of responding to your enquiry. If your enquiry relates to marine therapy, your personal data will be disclosed to LABORATOIRES QUINTON INTERNATIONAL, S.L. so that it can respond to your enquiry. For this purpose, we will process your identification and contact data, together with any other information you include in your enquiry.

(ii) Sending Newsletters about products and Services: The Foundation may process your personal data for the purpose of sending you newsletters and other informational or marketing communications relating to events, products, Services, activities, promotions and benefits offered by the Foundation. These communications may be sent through any automated channel, including, but not limited to, email, SMS, instant messaging applications, push notifications, social media platforms or any other available electronic means. This processing will only take place if you have previously given your consent. You may withdraw your consent at any time, easily and free of charge, by using the mechanisms provided in each communication or by following the procedures described in Section 10 of this Privacy Policy. Withdrawal of consent shall not affect the lawfulness of any processing carried out prior to such withdrawal.

For this processing activity, we will use your identification and contact data, together with any other information that you provide to us in your enquiry.

(iii) Use of your image in presentations and/or webinars. The Foundation may use your image (including your voice and/or recorded image) in connection with your participation in presentations, training sessions or webinars organised by the Foundation, for the purpose of conducting, documenting and, where appropriate, promoting such activities through its corporate channels (such as its website and social media accounts).

(iv) Disclosure of data to Laboratoires Quinton. The Foundation may disclose your identification and contact data to LABORATOIRES QUINTON INTERNATIONAL, S.L. so that it may send you marketing communications, by electronic or non-electronic means, regarding the marine therapy products and services it offers. For this processing activity, we will process your identification and contact data.

(v) Scientific purposes related to the advice provided. The Foundation may use data derived from your visits and the treatments you have received for the purpose of conducting medical and clinical research. In all cases, such data will be anonymised in advance so that it is impossible to identify the individual to whom the data relates.

4. SOURCE OF PERSONAL DATA

We process the personal data that you provide to us directly through any of the following means:

• By submitting a request for information to the Foundation.
• By completing any of the forms available on our website or at our facilities.
• Through partner associations that have entered into collaboration agreements with the Foundation, under which they may provide us with your identification and contact details in order to arrange an appointment and provide you with advice or guidance.

Please note that if the Patient is under 14 years of age, their personal data must be provided by their legal representative, who must also give any required consent on the Patient’s behalf, in accordance with the applicable data protection legislation. The Foundation will make reasonable efforts to verify that such consent has been obtained in compliance with the guarantees required by the applicable data protection regulations.

5. DATA RETENTION PERIODS AND CRITERIA

The personal data provided will be retained for as long as necessary to fulfill the purposes for which they were originally collected and, in any event, for a maximum period of five (5) years following the end of the contractual relationship. In general, we will retain your data for as long as you maintain a contractual and/or business relationship with us and/or until you withdraw your consent, where the processing is based on consent.

Once the data are no longer necessary for the relevant processing activity, they will be duly blocked in accordance with applicable legal requirements. We will retain them only (i) for the periods established by the applicable legislation in each case, (ii) to respond to potential legal claims, or (iii) to make them available to the competent authorities. Once these periods have elapsed, the data will be securely deleted.

If you have provided us with your curriculum vitae (CV), we will retain your personal data for a maximum period of two years from the date of receipt. After this period, your data will be deleted unless you have updated your information or expressly authorized us to retain it for a longer period. Please note that you may withdraw your consent at any time.

6. AUTOMATED DECISION-MAKING AND PROFILING

This website does not carry out automated decision-making or profiling.

7. RECIPIENTS

As a general rule, your personal data will only be processed by the Foundation. However, in certain circumstances and for the duration of the processing activities, we may disclose your personal data to the following recipients:

• Courts and Tribunals.
• State Security Forces and Corps.
• Other competent public authorities or bodies, where the data controller is legally required to disclose personal data.
• Banks and Financial Institutions.
• Courier and delivery companies for the shipment of purchased products.
• SEPBLAC (Executive Service of the Commission for the Prevention of Money Laundering and Monetary Offences).
• LABORATOIRES QUINTON INTERNATIONAL, S.L., in order to respond to enquiries related to marine therapy and, where you have given your consent, for commercial purposes.

Apart from the above data disclosures, the Foundation may engage third-party service providers who, in the course of providing their services, may have access to your personal data and process it on our behalf and under our instructions.

The Foundation applies appropriate criteria when selecting service providers to ensure compliance with its data protection obligations and undertakes to enter into the corresponding data processing agreement with each provider. Such agreements require, among other obligations, that providers implement appropriate technical and organisational measures, process personal data solely for the agreed purposes and in accordance with the Foundation’s documented instructions, and delete or return the data once the provision of services has ended.

8. INTERNATIONAL DATA TRANSFERS.

The organisation does not carry out any International Data Transfers. Should it become necessary to transfer personal data internationally in the future, the level of data protection in the destination country will be assessed, and the safeguards required by the applicable legislation will be implemented.

9. SOCIAL MEDIA

To keep you informed about our activities and latest news, we would like to inform you that FUNDACIÓN RENÉ QUINTON maintains profiles on various social media platforms.

All users have the opportunity to join our social media pages or groups. However, please note that, unless we request your data directly (for example, through marketing campaigns, competitions, promotions, or any other lawful means), your personal data will be processed by the relevant social media platform. We therefore recommend that you carefully read the applicable terms of use and privacy policies and ensure that you configure your privacy settings and data processing preferences appropriately.

Below you will find links to the privacy policies of the social media platforms on which we are present, so that you can access them at any time and configure your profile to protect your privacy:

Facebook: https://www.facebook.com/privacy/policy/?locale=en_GB

X: https://x.com/en/privacy

LinkedIn: https://www.linkedin.com/legal/privacy-policy

YouTube: https://policies.google.com/privacy?hl=en

10. YOUR RIGHTS

Data subjects may request further information regarding the processing of their personal data and may exercise, at any time and free of charge, their rights of access, rectification, erasure, restriction of processing, objection to processing, data portability (where technically feasible), and withdrawal of consent. Where applicable, they also have the right not to be subject to a decision based solely on automated processing, including profiling.

To exercise these rights, you may use the forms provided by the Foundation or send an email to: derechosley@fundacionrenequinton.org. Where necessary, we may ask you to provide a copy of your identity document solely if we are unable to verify your identity using the information already available to us.

If you believe that your rights regarding the protection of your personal data have been infringed, particularly if you have not obtained satisfaction in exercising your rights, you may lodge a complaint with the competent Data Protection Supervisory Authority (the Spanish Data Protection Agency – AEPD) through its website: www.aepd.es.

In accordance with Article 21 of Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE), if you no longer wish to receive information about our services, you may send an email to derechosley@fundacionrenequinton.org, indicating “UNSUBSCRIBE” in the subject line.

 

11. AMENDMENTS AND UPDATES

This Privacy Policy may be amended or updated to comply with legal requirements, to reflect instructions issued by the Spanish Data Protection Agency, or as a result of changes to our website. For this reason, we recommend that users review this Privacy Policy periodically.

If you have any questions regarding this Privacy Policy, you may contact FUNDACIÓN RENÉ QUINTON using the forms provided by the Foundation or by sending a written request to the postal or email address indicated in the header of this Privacy Policy.

Last updated: 30 June 2026