Privacy policy
Last updated: 18 October 2026
At UCI Global we take care of your data. This policy explains clearly what data we process when you use this website, why, for how long, who we share it with and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and Digital Rights (LOPDGDD).
1. Data controller
- Controller: UCI GLOBAL SL ("UCI Global").
- Tax ID (NIF): B10824639.
- Address: avenida Marqués de Montroig, 117, 2-3B, 08912 Badalona (Barcelona), Spain.
- Email for privacy matters: info@uciglobal.es (subject "Privacy").
- Phone: +34 722 75 19 88.
Given the type of data processed on this website, UCI Global is not required to appoint a data protection officer. If you have any questions about your data, write to the address above.
2. Scope of this policy
It applies to the data we process through uciglobal.es: its contact form, the WhatsApp, phone and email links, and its technical operation. It does not apply to third-party websites we link to (such as WhatsApp) or to those of the partner centres.
3. What data we process, why and for how long
| When | What data | Why | Legal basis | How long |
|---|---|---|---|---|
| "Request a quote" form | Full name, centre or company, email, phone, the service you need and your message, if you write one | To reply and, if you ask, prepare a quote | Pre-contractual steps at your request (Art. 6.1.b GDPR) | Up to 1 year from the last contact if you do not hire us; if you do, for the duration of the relationship and the legal retention periods |
| WhatsApp, phone and email | What you tell or write to us and your contact details | To reply | Pre-contractual steps or your consent when contacting us (Art. 6.1.a and b GDPR) | Up to 1 year from the last contact |
| Medical team profiles | Name, specialty and photograph of the professionals shown on the website | To present our team to centres | Consent of each professional (Art. 6.1.a GDPR) | Until the professional withdraws consent or stops working with us |
| Website security | IP address, browser data and an anti-spam verification signal | To protect the website and the form from attacks and spam, and check that the sender is a person | Legitimate interest in website security (Art. 6.1.f GDPR) | The minimum technical time; the provider's security logs, according to its policy |
Fields marked with an asterisk (*) in the form are required to deal with your request. If you do not provide them, we cannot reply. The form does not store your data in any database: it reaches our mailbox by email. We do not make automated decisions or create profiles with your data.
4. Health and patient data
This website is intended for healthcare centres and does not ask for health or patient data. Please do not include it in the form or in your messages. If we receive it without asking, we will only use it to deal with your request and will delete it when it is no longer needed.
5. Other people's data
If you give us someone else's data (for example, a colleague at your centre), you confirm that you have their permission and have informed them of this policy. You are responsible for the data being accurate.
6. Minors
This website is not intended for children under 14. If we learn that a child under 14 has written to us without their parent's or guardian's permission, we will delete their data.
7. Who we share data with
Providers who help us (data processors). They process data only on our instructions and under a contract that requires them to protect it:
| Provider | Purpose | Where | Safeguards |
|---|---|---|---|
| Cloudflare, Inc. | Hosting the website, protecting it from attacks, verifying the form (Turnstile) and counting visits without cookies (Web Analytics) | United States and global network | EU-US Data Privacy Framework and standard contractual clauses |
| Resend | Sending the email with the form data to our mailbox | United States | Standard contractual clauses or other safeguards under Chapter V GDPR |
| Microsoft (Microsoft 365) | Mailbox where we receive and answer messages | European Union | Data processing agreement |
Others. We will only give data to courts, public administrations or other authorities when required by law. We do not sell your data or share it for advertising purposes.
WhatsApp. If you write to us on WhatsApp, WhatsApp Ireland Limited processes your data under its own policy, as an independent controller.
8. International transfers
Some providers are based in the United States, so certain data may be processed outside the European Economic Area. We only do so with the safeguards of Chapter V GDPR: the adequacy decision for the EU-US Data Privacy Framework when the provider is certified, or the standard contractual clauses approved by the European Commission. You can ask us for more information at info@uciglobal.es.
9. Marketing communications
We will not send you advertising by email without your express consent. Replying to your request or sending you the quote you asked for is not a marketing communication.
10. Your rights and how to exercise them
You can exercise these rights at any time, free of charge:
- Access: find out whether we process your data and get a copy.
- Rectification: correct inaccurate or incomplete data.
- Erasure: ask us to delete it when it is no longer needed or you withdraw consent.
- Objection: object to us processing it.
- Restriction: ask us only to keep it, without using it, while a complaint is resolved.
- Portability: receive it in a common format or have us send it to another organisation.
- Withdraw any consent you have given, without affecting what has already been done.
How: write to info@uciglobal.es (subject "Privacy") or by post to avenida Marqués de Montroig, 117, 2-3B, 08912 Badalona, Spain, saying which right you want to exercise. If we have reasonable doubts about your identity, we may ask you to prove it. We will reply within one month; if the request is complex, we may extend this by two more months, letting you know beforehand.
Complaints: if you think we have not respected your rights, you can complain to the Spanish Data Protection Agency (calle Jorge Juan, 6, 28001 Madrid; sedeagpd.gob.es). We would appreciate it if you wrote to us first, so we can try to resolve it.
11. Security
We apply technical and organisational measures appropriate to the risk to protect your data against loss, unauthorised access or misuse. For example:
- the website only works over an encrypted connection (HTTPS);
- the form is protected against spam and bots;
- the website does not store messages in any database;
- access to our systems is limited to the people who need it and protected with strong passwords and, where possible, two-factor authentication.
12. Changes to this policy
We may update this policy when the website, our services or the law change. You will see the date of the last update at the top. If the change is significant, we will show it clearly on the website.
This English version is a translation for information purposes. In case of doubt, the Spanish version prevails.