Privacy Policy

Information on the processing of personal data

Both data privacy and information confidentiality are important aspects for Oxigen salud, S.A.U. This data protection policy establishes the way in which personal data obtained through this website is processed and may vary over time due to possible legislative or jurisprudential changes or the criteria followed by the Spanish Data Protection Agency and/or the competent authority at any time. That is why the company reserves the right to modify this policy to adapt it to new legislation or jurisprudence that are in force at the precise time the website is accessed.

Last updated: june 2026.

1. Who is responsible for the processing of your data?

• Company name: Oxigen salud, S.A.U.
• NIF: A58573171
• Registered office: Ctra. de Rubí, 141-143 08174 Sant Cugat del Vallès (Barcelona)
• Contact the Data Protection Officer: dpo@oxigensalud.com

2. For what purpose do we process your data?

The personal data that Oxigen salud, S.A.U. collects are those strictly necessary for the management of the relationship established, being adequate, pertinent and not excessive, limited to what is necessary in relation to the purposes for which they are processed.

We process your data for the following purposes:

2.1. WEB REGISTRATION MANAGEMENT: we use the customer’s personal information for the management of their username (codes and passwords) and their personal account which includes their identification data, tracking of their purchases, history and details of their orders, invoicing, payment methods, discount coupons and returns.

Registration will involve the creation of profiles of the user’s browsing on the WEBSITE. This profiling consists of the use of the customer’s personal data and browsing information such as the products viewed or added to the cart, the sections of the WEBSITE visited, the location to evaluate their preferences and/or personal interests in order to offer them the appropriate content for their profile.

2.2. ONLINE PURCHASE MANAGEMENT: we use the customer’s personal information for the management and monitoring of their shopping cart, processing and delivering their order, and informing them by electronic means of such management (such as, for example, the status of their shopping cart if they have not yet placed their order, the status of their order, etc.), as well as financial management and invoicing.

2.3. ELECTRONIC NEWSLETTER MANAGEMENT: sending information on promotions, news and personalised information adapted to the profile, interests and needs of the interested party as a customer through any communication channel that has been provided to us. You can unsubscribe at any time through the means that will be provided to you in each communication you receive.

3. What is the legitimacy to be able to do so?

We have the following legal bases for processing personal data:

Consent in relation to the following purposes:	Management of registration as a user of the online store.
Performance of the contract in relation to the following purposes:	The management of online purchases. Sending communications related to shopping cart and orders. The interested party is obliged to provide the data that is necessary for its execution. If you do not provide us with this data, it will not be possible to carry out the sale.
Compliance with a legal obligation in relation to the following purposes:	The management and issuance of the purchase and sale invoice.
Legitimate interest in relation to the following purposes:	The sending of commercial communications related to products and services as a user and customer of the online store. The creation of profiles by browsing the WEBSITE by a user registered on the WEBSITE, as well as by all those users who have provided us with their data for any other purpose. The creation of profiles for the sending of information on promotions, news and personalised information adapted to the profile of the interested party. Sending satisfaction surveys on products purchased by customers to solicit their opinion and to be able to offer improvements. Our legitimate interest is to be able to offer personalised services and thus improve the level of customer satisfaction.

4. How long do we keep them for?

Oxigen salud, S.A.U. will keep personal data only for the period of time that is necessary to attend to the issues that arise or solve problems, as well as to comply with the legal limitation periods of the contractual obligations established in the Civil Code. In these cases, the company will keep the data duly blocked.

5. To whom will we disclose your personal data?

Your data will not be communicated to third parties except:

• By legal obligation.
• By execution of contract.

There is no provision for international transfer of the data.

6. What are your rights?

Right of access	You have the right to obtain confirmation as to whether or not Oxigen salud, S.A.U. is processing personal data concerning you, as well as to access the personal data we have about you.
Right to rectification	You have the right to request that Oxigen salud, S.A.U. rectify personal data when they are inaccurate or that they be completed when they are incomplete. If you are registered on our WEBSITE, it may be easier for you to correct them directly by modifying them in your personal space MY ACCOUNT.
Right to erasure/right to be forgotten	You can ask us to delete personal data when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
Right to limitation	You have the right to request the limitation of the processing of the data, in which case we will only keep it for the exercise or defence of claims.
Right to portability	You have the right to receive personal data in a structured, commonly used and machine-readable format and to transmit it to another controller when the processing is based on consent or a contract, and is carried out by automated means.
Right to object	You may object to the processing of personal data based on the public or legitimate interest pursued by Oxigen salud, S.A.U., including profiling. In such a case, we will stop processing the data, except for compelling legitimate reasons or the exercise or defence of possible claims.
Automated individual decisions	You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects on you or similarly significantly affects you. However, it will not be possible to exercise such a right where the decision is necessary for the conclusion or performance of a contract between us provided that we put in place appropriate measures to safeguard your rights, freedoms and legitimate interests; or is based on your explicit consent.
Right to file a complaint	You have the right to file a complaint with the Spanish Data Protection Agency or with the competent local Supervisory Authority (AEPD – www.agpd.es)

To exercise the aforementioned rights, you can contact us by e-mail dpo@oxigensalud.com indicating the following information:

• Name and surname.
• ID number, if applicable.
• Contact email address.
• Right you wish to exercise.
• Data on which you are making your request.

Within a maximum period of one (1) month we will resolve your request by notifying you at your indicated email.

7. What security do we apply?

Taking into account the state of the art, the costs of application, and the nature, scope, context and purposes of the processing, as well as risks of varying probability and severity for the rights and freedoms of natural persons, Oxigen salud, S.A.U. will apply appropriate technical and organisational measures to guarantee a level of security appropriate to the risk, that prevent the accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or the unauthorized communication or access to such data.