Who is the data controller of your personal data?
Owner:

BTI BIOTECHNOLOGY INSTITUTE, S.L.
Registered in the Mercantile Registry of Álava in volume [884], folio [27], sheet [VI-6756]

Registered office:

Calle San Antonio 15º 5º
01005 Vitoria (Álava)

Tax ID (CIF):

B01288141

Contact details of the Data Protection Officer:
lopd@bti-implant.es
How have we obtained your data?
The data we process at BTI has been obtained from you, through (i) the different forms you complete while browsing the website (e.g. registration as a website user, contact forms, forms referring to job offers and/or selection processes, etc.); or (ii) by sending an inquiry email.
What categories of data do we process?

BTI processes the following categories of data:


Identifying data: name, surname, postal address, email address, postal code, telephone, city, etc.

Personal characteristics data: Date of birth, gender, etc.

Traffic and location data.

Electronic communications metadata.

Commercial information data.

Economic or financial data.


The data marked with an asterisk (*) in the forms provided by BTI through its online platforms will be necessary to fulfill the established contractual or legal purpose.

Therefore, if the user does not provide them, it will not be possible to register on the website or attend to their request.

In the event that the interested party provides third-party data, they declare to have their consent and undertake to transfer the information contained in this clause, exempting BTI from any liability in this regard. However, BTI may carry out verifications to confirm this fact, adopting the appropriate due diligence measures, in accordance with data protection regulations.

For what purposes do we process your data?

BTI will process the user's data, manually and/or automatically, for the following specific purposes:


To manage your registration as a user on the online platforms owned by BTI.

To manage the contracting of products and/or services that you make through the website, as well as the corresponding billing and shipping.

To respond to queries and doubts raised.

To periodically send (via email, post and/or SMS) electronic communications with offers, promotions, and news related to our products, unless otherwise indicated or the user objects or revokes their consent.

To periodically send commercial and/or promotional information related to the sector of oral implantology products, regenerative medicine, training courses, etc. and of added value for end users, as well as for professional users of the sector, unless otherwise indicated or the user objects or revokes their consent.

To develop a commercial profile of the user and carry out commercial actions adjusted to it, using their data derived from the management of the acquired products (browsing data, access habits, traffic), unless the user objects or revokes their consent.

To comply with legally established obligations.

What are the legitimate bases for processing your personal data?

The legitimacy for the processing of the user's data by BTI to carry out the registration of the user on the different websites is based on the consent of the interested party, requested in each case.

For its part, the management of the contracting of products or services through the websites, billing and corresponding shipments, is legitimized by the execution of the contract itself.

The processing of data in order to send electronic newsletters with offers, promotions and news related to our online platforms, commercial and/or promotional information, the preparation of anonymous statistical reports regarding access habits and the activity carried out by users on the website and the preparation of commercial profiles using data derived from the management of products and services contracted with BTI, are based on the consent of the interested party.

The consents obtained for the aforementioned purposes are independent, so the user may revoke one or more of them without affecting the others.

Likewise, the user's information may be used to comply with BTI's various legal obligations.

Who are the recipients of the data?

The legitimizing basis for carrying out these transfers is the legitimate interest we have in optimizing our corporate management and organization.

Your personal data may be communicated by BTI to:


Public Bodies and Administrations to which, where appropriate, BTI has a legal obligation to communicate your data.

Medical establishments, dental clinics, hospitals, and professionals in the medical sector in general, for the sole purpose that they can issue the corresponding invoice, manage the collection of the order, manage incidents or, where appropriate, the shipment of the order to the address indicated by the user.

Service providers to manage the data processing described in the privacy policy, in accordance with current data protection regulations. These providers will not process your data for their own purposes that have not been previously informed by BTI.

Entities of the Business Group in which BTI is integrated.


It is not foreseen that international transfers of your data will be made.


In what cases will we communicate your data?

In no case will we transfer your data to third parties without informing you previously and without having the necessary legitimate basis.

To fulfill the purposes indicated in this Privacy Policy, it is necessary that we give access to your personal data to companies of the BTI Group. The legitimizing basis for carrying out these transfers is the legitimate interest we have in optimizing our corporate management and organization.

Sometimes we hire companies that provide us with certain services and that for this purpose need access to personal data (laboratories to carry out certain tests, manufacturing of prostheses, transport services, etc.). With these companies, we have signed the corresponding data processing agreements that comply with the provisions of the GDPR. Through these contracts, we ensure that these companies process the data to which they have access solely to provide us with the contracted service, that they never use them for purposes for which we have not authorized them, and that they will not transfer such data to third-party companies and/or administrations. In addition, we require them to implement security measures that guarantee the confidentiality and integrity of personal data. We only contract with companies and entities that guarantee us that they comply with current data protection provisions.

Unless otherwise indicated, we do not make international data transfers.

For how long will we keep your personal data?

Your data will be kept for the time necessary to carry out the purposes for which they were collected, unless the user requests their cancellation to BTI, opposing or revoking their consent. All this without prejudice to the fact that said period may be extended when you expressly authorize it or there are particular processing activities derived from the contractual relationship that remain in force after said period.

For how long will we keep your personal data?

As a data subject, you can send us a letter to BTI, C/ San Antonio 15 5 01005 Vitoria (Álava) or via email to the address lopd@bti-implant.es, attaching a photocopy of a document proving your identity, to exercise, at any time and free of charge, the following rights:


Right of access:

To know what type of data we are processing and the characteristics of the processing carried out on them.

Right to rectification:

You may request the modification of your data because they are inaccurate or outdated.

Right to data portability:

You may obtain, within the legally established limits, a copy of your data being processed in an interoperable format, in order to provide them to another Data Controller.

Right to restriction of processing:

You may limit the processing of your data, provided that such request is covered by the cases established by applicable regulations.

Right to erasure:

You may request the deletion of your data when the processing is no longer necessary.

Right to object:

You may request the cessation of the sending of commercial communications in the terms indicated above.

Right not to be subject to automated individual decision-making.
Right to file a complaint:

Before the competent Supervisory Authority (in Spain, this entity is the Spanish Data Protection Agency).

What security measures do we implement to take care of your data?

BTI will process the data at all times in an absolutely confidential manner and keeping the mandatory duty of secrecy regarding them, in accordance with the provisions of applicable regulations, adopting for this purpose the necessary technical and organizational measures that guarantee the security of your data and prevent their alteration, loss, unauthorized processing or access, taking into account the state of technology, the nature of the stored data, and the risks to which they are exposed.

Changes to the privacy policy

BTI reserves the right to modify this Privacy Policy in order to adapt it to new legislative, jurisprudential and/or administrative developments that may apply. In such cases, the changes introduced will be announced on the Website with reasonable notice before their implementation.

Privacy policy updated as of May 25, 2018