Políticas de privacidad

Endomad Privacy Policy

Last updated: 2 June 2025

1. Introduction

Welcome to Endomad. At Endomad (hereinafter, "we", "us", "our" or "the Company"), we are committed to protecting your privacy and your personal data. This Privacy Policy describes how we collect, use,3 store, share and protect the personal information you provide to us4 or that we collect when you use our website ("Website").

By using our Website, you are accepting the practices described in this Privacy Policy. We recommend5 you read it carefully.

Our company, Endomad, is a medical distribution company specialising in advanced endoluminal products, based in Barcelona, Spain.. Our mission is to improve health outcomes through the best available technology..

2. Data Controller

The person responsible for the processing of your personal data is:

Endomad

Address: Carrer Horta, 4, 08390 Montgat, Barcelona, Spain.

Telephone: +34 933 096 419

E-mail: david.carbone@endomad.es

3. What personal data do we collect and why?

We may collect and process the following types of personal data:

Information you provide directly to us:
- Contact details: When you contact us through forms on the Website (for example, in the "Let's Talk" or "Contact Us" section), by e-mail or by telephone, we may collect your first name, last name, e-mail address, telephone number, name of the medical centre or hospital, specialty and any other information you choose to provide in your enquiry.
- Requests for information or demos: Information necessary to manage your request about our products or services, including the organisation of training sessions.
Information we collect automatically:
- Browsing data and cookies: When you visit our Website, we may collect technical information such as your IP address, browser type, operating system, pages visited, length of visit and other navigational data. This information is generally collected through cookies or similar technologies. For more information, please see our Cookie Policy.
- Usage data: Information about how you use our Website and our services.

4. Purposes of data processing

We use your personal data for the following purposes:

Manage your relationship with Endomad and deal with your queries, requests for information, demos or training sessions.
To provide you with information about our products, services and news, provided that we have your consent or there is another legal basis for doing so.
To improve our website, products and services by analysing how they are used.
Comply with our legal and regulatory obligations, including those relating to the distribution of medical devices.
Manage the security of the Website.

5. Legal basis for data processing

The legal basis for processing your personal data may be:

Your consent: For the sending of commercial communications, the installation of certain cookies, or when you provide us with your data through contact forms for a specific purpose.
The execution of a contract or pre-contract: When the processing is necessary to process your request for services or products.
Compliance with a legal obligation: For example, in relation to the regulation of medical devices.
Our legitimate interest: To improve our services, manage the security of the Website or deal with your requests, provided that our interests do not override your rights and freedoms.

6. How long do we keep your data?

We will retain your personal data for as long as strictly necessary to fulfil the purposes for which it was collected, as well as to comply with applicable legal obligations.6 Once your data is no longer required, it will be securely deleted or anonymised.

7. With whom do we share your data?

We do not sell or rent your personal data to third parties. However, we may share your data with:

Service providers:⁷ Companies that provide services to us (e.g. web hosting, data analysis, IT services, CRM management, logistics). These providers will only have access to your data to perform tasks on our behalf and are obliged not to disclose or use it for other purposes.
Competent authorities: We may disclose your personal data to judicial or administrative authorities or other public bodies where required to do so by law or where necessary to protect our rights or the rights of others.
Business partners: In the context of our distribution activity, we may share necessary information with the manufacturers of the medical devices we distribute (e.g. PUSEN MEDICAL, MITECH, AGS, 3D-MATRIX, OVESCO, MIRAI MEDICAL, UROTECH, THE STANDARD CO.LTD, MEDI-GLOBE), always under strict confidentiality obligations and to ensure proper service or technical support.

8. International data transfers

Some of our service providers may be located outside the European Economic Area8 (EEA). In such cases, we will ensure9 that any international transfer of data is done with appropriate safeguards, such as the signing of Standard Contractual Clauses approved by the European Commission or the providers' adherence to the Privacy Shield (if applicable and in place) or other legal mechanisms.

9. What are your data protection rights?

Under the GDPR, you have the following rights:

Right of access: To obtain confirmation as to whether we are processing your personal data and, if so, to access them.
Right of rectification: To request the correction of inaccurate or incomplete personal data.
Right to erasure (right to be forgotten): To request the deletion of your personal data when, among other reasons, they are no longer necessary for the purposes for which they were collected.
Right to restriction of processing:¹⁰ To request the limitation of the processing of your data in certain circumstances.
Right to data portability: To receive your personal data in a structured, commonly used and machine-readable format and to transmit it to another data controller.¹¹
Right to object: To object to the processing of your personal data in certain circumstances, in particular where the processing is based on our legitimate interest or for direct marketing purposes.
The right not to be subject to automated individual decisions: Not to be the subject of a decision based solely on automated processing, including the processing of personal data by automated means.¹² profiling, which produces legal effects on you or significantly affects you in a similar way.¹³
Right to withdraw consent: You may withdraw your consent at any time for processing operations based on your consent, without affecting the lawfulness of the processing operation prior to your withdrawal.

You can exercise these rights by sending a written request to our postal address: Carrer Horta, 4, 08390 Montgat, Barcelona, Spain, or via our e-mail address: david.carbone@endomad.es, attaching a copy of your ID card or other identification document.

If you consider that your data protection rights have been violated, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).

10. Security of your data

We have taken appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, disclosure, alteration and destruction.14 These measures include the use of software for inventory, order and billing management (Golden Software).

11. Cookie Policy

Our Website uses cookies to improve your browsing experience and to collect statistical information. For detailed information about the cookies we use and how you can manage them, please see our Cookie Policy (we recommend creating a separate page for this policy).

12. Changes to this Privacy Policy

Endomad reserves the right to modify this Privacy Policy to adapt it to new legislation or case law, as well as industry practices. We will inform you of any material changes15 by posting the updated policy on our Website and indicating the date of the latest revision. We encourage you to review this Privacy Policy periodically.

13. Contact

If you have any questions, comments or concerns about this Privacy Policy or how we treat your personal data, please do not hesitate to contact us:16