To ensure the information transparency and its comprehensible presentation to users, Duman Medical S.L. presents its privacy policy in two phases (multilevel or double-layer presentation). Using this system, we offer our visitors and users to learn how their data will be processed in a concise summary of the first layer of information. For further details, the second layer of more extensive and elaborated information shall be provided through the link: “+ Information”. In it, various aspects of data processing performed by Duman Medical S.L. shall be provided.


EpigraphFirst LayerLink
ControllerThe processed data are strictly necessary, appropriate and relevant for every purpose in question Duman Medical S.L. is a personal data controller.+ Information
PurposeThe purpose of the data processing shall correspond to the activities directly related to the Duman Medical S.L. Departments, namely: ”Distribution of hospital material”.+ Information
Lawful BasisData processing is based on the provisions set out in article 6 of RGPD. In the case of
Duman Medical S.L., such processing is usually performed once the data subject has given his or her consent to the processing of their personal data for one or more specific purposes.
+ Information
Data RetentionPersonal data provided shall be retained during the period required for the purposes they were originally collected for and to determine the liabilities that might have derived from such purpose; as well as during the legally stipulated retention periods (i.e. tax obligations).+ Information
Data Transfer

Generally, personal data shall not be transferred to the third parties, unless otherwise specified by law:

  • Relevant Public Authorities
  • Banks/Financial Institutions
+ Information
Rights of the Interested PartiesOur visitors and users are allowed to exercise the right of access, the right to rectification, erasure and portability of their data, as well as that of limitation and opposition to their data processing. They also have the right not to be subject to a decision based solely on automated data processing, if applicable, before the Spanish Data Protection Agency.+ Information
Additional Info

This website uses its own cookies and those of the third parties to track and analyse the website traffic, to customise the information offered to its users or to promote its services. To learn about changing these settings and get further details on our cookie policy please press the button “Cookie Policy”.

The website whose ownership is held by Duman Medical S.L. contains hyperlinks to the web pages of the third parties whose privacy policy does not apply to ours. When accessing those websites you should decide whether to accept or not their privacy and cookie policy. Generally, when surfing the internet you can accept or reject third-party cookies by changing your browser settings.

+ Cookie Policy



  • Controller: Duman Medical S.L.
  • CIF: B99346140
  • Dirección: Gutiérrez Mellado, 45 – 50009 ZARAGOZA (Spain)
  • Teléfono: +34 976 791 986
  • Email:


  1. Provide services to the current and / or potential clients

Distribution of hospital material.

Send commercial information about our products and / or services.

  1. Suppliers and third parties

Service outsourcing to the third parties (companies, freelance, foundations, associations, etc.).

  1. Human Resources

Workforce management

Personnel file. Time and attendance. Incompatibility. Training. Pension schemes. Occupational health and safety.

Issue payslips for employees, as well as its other derivative products.

Management of the union activity (if applicable).

  1. Video surveillance

Ensure the safety of people, goods and premises.


 Lawfulness for Processing

  • RGPD: 6.1.a) the data subject has given consent to the processing of his or her personal data for one or more specific purposes.
  • RGPD: 6.1.b) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
  • RGPD: 6.1. c) processing is necessary for compliance with a legal obligation to which the controller is subject.
  • General Data Protection Regulation.
  • Organic Law 3/2018, of 5 December, on Data Protection and Guarantee of Digital Rights.
  • Law 34/2002, of 11 July, on Information society Services and Electronic Commerce (applicable to courier services, social networks and online retail sales).

* “You have the right to withdraw your consent at any time”.



  • Current and potential clients and users
  • Employees and co-workers
  • Workers and potential candidates
  • Individuals on the company premises

Categories of Personal Data

  • Personal Identifiers (name, surname(s), Tax Identification Number, mailing address, phone number, e-mail address, website)
  • Other personal data
  • Account details
  • Commercial Information
  • Sale and purchase of goods and services


Categories of Recipients

Personal Data of the clients shall be transferred to the following recipients:

  • Public Administration (i.e. Tax Office; Department of Social Security)
  • Judicial Bodies “if applicable” (Courts)
  • Financial Institutions (Banks)
  • Collaborating entities

International Data Transfers

No provisions apply to international data transfers.


Data Retention Period

Data shall be retained for as long as the purpose for which they were initially collected is fulfilled as well as to establish possible liabilities that might have derived from such purposes and data processing.


Security Measures

In compliance with the provisions of article 32 of the GDPR, Duman Medical S.L. shall ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services. The level of security shall be appropriate to the risk of processing each type of personal data.


Rights to Control your Personal Data

We recognise our visitors’ and users’ right of access, as well as their rights to rectification, erasure, data portability, restriction and object to its processing. They can exercise these rights following the legal procedures stipulated in the above-mentioned regulations.

For further information about the ways one can exercise his or her rights, the control authority in Spain, the Spanish Data Protection Agency, provides the following link with its detailed description and a form to fill out and send us: Exercice your rights.

For any information or doubts regarding your data processing by Duman Medical S.L. you might need to clarify, write to us at the following email:


Complaint to the Spanish Data Protection Agency (AEPD)

If upon contacting us you consider your rights regarding the personal data are not being respected, you can complain to the Spanish Data Protection Agency (AEPD).


Duman Medical S.L.
Gutiérrez Mellado, 45
50009 ZARAGOZA (Spain)