Privacy Policy

1. Data controller

The controller of personal data collected through this website is Custom Software & Electronics, S.L. (trading as MedicalCSE), with registered office at c/ Sant Antoni Maria Claret, 167, Recinte Modernista Sant Pau, Pavelló Sant Manel, 08025 Barcelona, Spain. You can contact us at sales [at] medicalcse.com.

2. What we collect

We collect personal data in two situations:

Contact form. When you fill in the form on the contact page we collect: first name, surname, phone number (optional), email address, message content and submission timestamp.

Technical data. Our hosting server automatically logs IP address, browser, pages visited and access time, for security and diagnostic purposes.

3. Cookies and local storage

This site uses a single flag in browser sessionStorage to remember your confirmation as a healthcare professional during the visit. It is not a cookie and is deleted when you close the tab.

The contact page includes a Google Maps embed; when it loads, Google may set third-party cookies. If you don't want them, do not open the contact page or use your browser's cookie-blocking tools.

4. Purpose and legal basis

We process your data for the following purposes:

• To handle and reply to your enquiry — legal basis: your consent (Art. 6.1.a GDPR).
• To manage any commercial relationship resulting from your request — legal basis: performance of a contract or pre-contractual measures (Art. 6.1.b GDPR).
• To comply with applicable legal obligations, including medical-device regulations — legal basis: compliance with legal obligations (Art. 6.1.c GDPR).

5. Processors and international transfers

To deliver the service we share some data with the following providers:

• Formspree, Inc. (United States) — processes the form submission and delivers it to us by email. Privacy policy: formspree.io/legal/privacy-policy.
• Google LLC (United States) — provides the embedded map on the contact page and, if you accept optional cookies, Google Analytics for anonymous audience measurement (with IP anonymisation). Privacy policy: policies.google.com/privacy.
• Our hosting provider — stores the site files and server logs.

Transfers to the United States rely on the EU–US Data Privacy Framework or Standard Contractual Clauses approved by the European Commission.

6. Retention period

We keep the form data for as long as needed to handle your enquiry and any resulting commercial relationship. If no relationship is established, we delete it within 12 months. Technical server logs are kept for up to 30 days.

7. Your rights

You have the right to access, rectify and delete your data, as well as to restrict or object to its processing, request portability and withdraw your consent at any time. To exercise these rights, email sales [at] medicalcse.com identifying yourself adequately. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

8. Changes to this policy

We may update this policy to reflect legal changes or changes in our processing. The current version is always the one published on this page; the update date is shown at the top.