Privacy policy

1. information to the user

Who is responsible for processing your data?

The data controller is PK-PDrugs S.L., with Tax ID B12345678, located at Example Street, 123, 15001 A Coruña, Spain.

Why do we process your personal data?

We process your data to provide our pharmacokinetic dosing optimization services and to maintain the user relationship.

The legal basis for processing is the execution of a contract and your consent where applicable.

We do not make automated decisions or profiling based on your data.

What data do we process?

We may process the following categories of personal data:

  • Identification data (name, email, professional ID)
  • Contact data (email, phone)
  • Professional data (specialty, medical center)
  • Access and usage data (logs, preferences)
  • Patient data (anonymized or pseudonymized clinical data)
  • Any other data you voluntarily provide

Patient clinical data is processed only for providing the service and is treated with the highest level of security.

You are responsible for ensuring you have proper authorization to process patient data through our platform.

How long do we keep your data?

We keep your data for as long as necessary to provide our services and comply with legal obligations:

  • User account data: duration of the contract plus legal retention periods
  • Clinical data: As required by applicable health regulations
  • Usage logs: maximum 2 years

Who do we share your data with?

Your data may be shared with service providers (hosting, analytics) under appropriate data processing agreements. We do not sell your data to third parties.

International transfers

Your data may be transferred to countries outside the european economic area only when adequate safeguards are in place.

We ensure compliance with GDPR requirements for any international data transfers.

What are your rights?

You have the following rights regarding your personal data:

  • Right of access, rectification, and erasure
  • Right to restriction of processing and data portability
  • Right to withdraw consent and lodge a complaint with the supervisory authority

Contact for data protection:

For any questions about data protection, contact our data protection officer at [email protected].

2. mandatory or optional nature

The personal data requested is necessary for the provision of our services. failure to provide required data may prevent us from providing the service.

Data marked as optional is not required for basic service provision.

3. security measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

These measures include encryption, access controls, secure hosting, and regular security audits.

All data transmissions are encrypted using industry-standard protocols (TLS/SSL).

We regularly review and update our security practices to ensure the continued protection of your data.

4. updates to this policy

We may update this privacy policy periodically. We will notify you of significant changes through our website or by email.