Privacy Policy

ViRE Instruments, S.L. provides this privacy policy through the website https://vrain-care.com in order to inform you, in detail, about how we process your personal data and protect your privacy and the information you provide to us. If any changes are made to this policy in the future, we will inform you through the website or by other means so that you are aware of the new privacy terms introduced.

In compliance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Organic Law 3/2018 of December 5, on the Protection of Personal Data and guarantee of digital rights, we inform you of the following:

Data Controller

Entity: ViRE Instruments, S.L. – Tax ID (NIF): B67564823
Registered address: C/ Travessera De Dalt, 32; 4º 2ª; 08024, Barcelona
Email: legal@vrain-medical.com
Website: https://vrain-care.com

For what purpose do we process your personal data?

At ViRE Instruments, S.L., we collect and process your personal information generally to manage the relationship we maintain with you. The main purposes we have identified are as follows:

Management and contracting of the products and services offered by our company.
Handling requests for information, suggestions, and complaints that you may submit to us.
Keeping you informed about events, offers, products, and services that may be of interest to you through various communication channels, provided you have given your consent.
Management of the employment relationship, in the case of our employees.
Management of the commercial relationship with our suppliers.
Management of the recruitment process.

How do we collect your information?

We collect your personal information through different means, but you will always be informed at the time of collection via information clauses regarding the data controller, the purpose and legal basis of the processing, the recipients of the data, the retention period of your information, and how you can exercise your data protection rights.

In general, the personal information we process is limited to identification data (full name, date of birth, address, ID number, phone number, and email), contracted services, payment details, and billing information.

In the case of personnel management and recruitment, we collect academic and professional data in order to fulfill obligations arising from the employment relationship or, if applicable, to consider you for a position on our team.

ViRE Instruments, S.L. uses social media, which is another way we may reach you. Information collected through the messages and communications you publish may contain personal data that is available online and accessible to the public. These social media platforms have their own privacy policies that explain how they use and share your information. ViRE Instruments, S.L. recommends that you review these policies before using such platforms to ensure you agree with how your information is collected, processed, and shared.

Through our website, we also collect personal information related to your browsing activity through the use of cookies. To clearly and precisely understand which cookies we use, their purposes, and how you can configure or disable them, please consult our Cookie Policy, accessible via the cookie consent banner.

User Responsibility

By providing your data through electronic channels, the user guarantees that they are over 14 years of age and that the data provided to ViRE Instruments, S.L. is true, accurate, complete, and up to date.

To this effect, the user confirms that they are responsible for the accuracy of the data provided and agrees to keep such information properly updated so that it reflects their actual situation. The user will be held responsible for any false or inaccurate data they may provide, as well as for any direct or indirect damages that may result from such data.

How long do we retain your information?

At ViRE Instruments, S.L., we retain your information only for the period necessary to fulfill the purpose for which it was collected, to comply with the legal obligations imposed on us, and to address any potential liabilities arising from the fulfillment of that purpose.

If you wish to join our team and apply for one of our job positions, the data you provide will become part of our candidate pool and will be retained for the duration of the selection process and for a maximum of one year or until you exercise your right to erasure.

If we have collected your data to contact you as a potential user of our services or to respond to an information request you made, such data will be retained for a maximum of one year from the time of collection. After that period, the data will be deleted if no contractual relationship has been established or if you request its deletion.

In any case, and as a general rule, we will retain your personal information as long as there is a contractual relationship that binds us or until you exercise your right to erasure and/or restriction of processing. In such a case, the information will be blocked and not used, except for its retention as long as it may be necessary for the exercise or defense of legal claims or if any type of liability may arise that needs to be addressed.

Who do we share your data with?

In general, at ViRE Instruments, S.L., we do not share your personal information, except in cases where disclosure is required due to legal obligations.

However, in order to provide and deliver the requested service, in certain cases we may share your data with other collaborating companies and/or startups. You may object to the sharing of your data; however, in such cases, we may not be able to provide the requested service.

Although this does not constitute data sharing, third-party companies acting as our service providers may access your information in order to perform the services we have contracted them for. These data processors access your data under our instructions, are not allowed to use it for any other purpose, and are bound to strict confidentiality.

Additionally, your personal information may be made available to public authorities, judges, and courts in order to address any legal responsibilities arising from the data processing.

International Data Transfers

There are no international transfers of your data to countries outside the European Economic Area (EEA).

We have agreed with our service providers that, for the provision of the contracted service, they will use servers located within the EEA. If, in the future, it becomes necessary to use servers located outside the EU, appropriate measures will be taken and incorporated into this Privacy Policy, ensuring that such providers are either covered under the Privacy Shield framework or that other suitable safeguards are in place.

What are your rights regarding the processing of your data and how can you exercise them?

Data protection regulations allow you to exercise your rights of access, rectification, deletion, and portability of data, as well as opposition and restriction of processing, and the right not to be subject to decisions based solely on automated processing of your data, when applicable.

These rights are characterized as follows:

Exercising these rights is free of charge, except in cases of manifestly unfounded or excessive requests (e.g., repetitive requests), in which case ViRE Instruments, S.L. may charge a fee proportional to the administrative costs incurred or refuse to act.
You can exercise these rights directly or through your legal or voluntary representative.
We must respond to your request within one month, although this period may be extended by an additional two months considering the complexity and number of requests.
We are obliged to inform you about the means to exercise these rights, which must be accessible and cannot be denied solely because you choose a different method. If the request is submitted electronically, the information will be provided by electronic means whenever possible, unless you request otherwise.
If ViRE Instruments, S.L. does not process the request, it will inform you within one month of the reasons for not acting and the possibility of filing a complaint with a Supervisory Authority.

To facilitate the exercise of your rights, we provide links to the request forms for each of these rights:

Form to exercise the right of access
Form to exercise the right of rectification
Form to exercise the right of objection
Form to exercise the right of erasure (the “right to be forgotten”)
Form to exercise the right to restriction of processing
Form to exercise the right to data portability
Form to exercise the right not to be subject to automated individual decisions

To exercise your rights, ViRE Instruments, S.L. provides you with the following methods:

By submitting a written and signed request addressed to ViRE Instruments, S.L., C/ Travessera De Dalt, 32; 4º 2ª; 08024, Barcelona, Ref. Exercise of LOPD Rights.
By sending a scanned and signed form to the email address legal@vrain-medical.com, indicating “Exercise of LOPD Rights” in the subject line.

In both cases, you must prove your identity by including a photocopy or, if applicable, a scanned copy of your ID or equivalent document to verify that we only respond to the data subject or their legal representative. In the latter case, you must provide documentation proving the representation.

Additionally, and especially if you consider that you have not been fully satisfied in the exercise of your rights, we inform you that you may file a complaint with the national supervisory authority by contacting the Spanish Data Protection Agency at C/ Jorge Juan, 6 – 28001 Madrid.

How do we protect your information?

At ViRE Instruments, S.L., we are committed to protecting your personal information.

We use physical, organizational, and technological measures, controls, and procedures that are reasonably reliable and effective, aimed at preserving the integrity and security of your data and ensuring your privacy.

Additionally, all personnel with access to personal data have been trained and are aware of their obligations regarding the processing of personal data.

In the contracts we sign with our providers, we include clauses requiring them to maintain confidentiality regarding the personal data they access as part of their assignment, as well as to implement the necessary technical and organizational security measures to guarantee the confidentiality, integrity, availability, and ongoing resilience of the systems and services used for processing personal data.

All these security measures are periodically reviewed to ensure their adequacy and effectiveness.

However, absolute security cannot be guaranteed, and no security system is impenetrable. Therefore, in the event that any information under our control is compromised due to a security breach, we will take appropriate measures to investigate the incident, notify the Supervisory Authority, and, if applicable, inform those users who may have been affected so they can take suitable actions.

Translation Interpreting. These Privacy Policy may have been translated if the Company has made them available to the User on its service. You agree that the original Spanish text shall prevail in the event of a dispute.