Legal informationPrivacy policy

• Legal notice
• Privacy policy
• Cookie policy

In accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), we explain how we process the personal data you provide through the website imatmed.com.

Data controller

MEDICINA POR EUROPA S.L. (IMG International Medicine Group), owner of IMATMed
Tax ID (CIF): B42777920 — Rúa Maior, 21 2A — 32600 Verín (Ourense), Spain
Email: info@intmedgroup.com

1. What data do we process?

Only the data you give us in the forms on this website:

• Talk to an advisor: full name, phone, email, the student's year or situation and, if you provide them, the plan you are interested in, who is writing (the student or their parent or guardian), how you prefer to be contacted and your message.
• IMAT topic list download: first name, surname, email, phone with country code and the student's year or situation.
• In both, whether you agree to receive news, the page you are writing from and the campaign parameters in the address (for example, utm_source, or the ad click identifiers of Google and Meta), so we know how you found us.

In addition, for technical reasons, the server hosting the website automatically records certain information, such as the IP address assigned by your internet provider.

2. Purposes, legal bases and retention periods

Answering your request (the “Talk to an advisor” and topic list forms): we process your data to handle your enquiry, send you the material you request and contact you through your preferred channel (phone, WhatsApp or email) to tell you about the programme. Legal basis: Art. 6(1)(a) GDPR — your consent, which you give by ticking the box in the form agreeing that IMATMed (IMG) may contact you. You can withdraw it at any time without affecting the lawfulness of prior processing.

Marketing communications (IMAT news, dates and deadlines, and IMG services): optional processing subject to your express consent through a specific, unticked box in the forms. Legal basis: Art. 6(1)(a) GDPR — freely given, specific, informed and unambiguous consent. You can withdraw it at any time without affecting the lawfulness of prior processing.

Minors: if you are under 14, the consent of your parents or legal guardians is required (Art. 7 LOPDGDD).

Retention periods:

• Contacts who do not become clients: 24 months from the last contact, unless you ask for erasure earlier.
• Clients with a service contract: 10 years after the end of the relationship, in line with accounting obligations (Art. 30 Spanish Commercial Code) and the general civil limitation period (Art. 1964 Spanish Civil Code).
• Data for marketing communications: until consent is withdrawn.

3. Regulatory compliance

MEDICINA POR EUROPA complies with the General Data Protection Regulation (GDPR) (EU) 2016/679, Organic Law 3/2018 (LOPDGDD) and Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE).

4. Security measures

We have implemented the technical and organisational security measures needed to guarantee the security of your personal data (Art. 32 GDPR). The website has an SSL/TLS certificate to secure communications, and form data travels encrypted directly to our CRM without being stored on the website server.

5. Your rights

You have the rights of access, rectification, erasure, restriction, portability and objection, and the right not to be subject to automated individual decisions. You may lodge a complaint with the Spanish Data Protection Agency (AEPD) — www.aepd.es — c/ Jorge Juan, 6, 28001 Madrid, or with the supervisory authority of your country of residence.

To exercise these rights, write to: MEDICINA POR EUROPA S.L. — Rúa Maior, 21 2A — 32600 Verín (Ourense), Spain, or by email: info@intmedgroup.com.

6. Processors and third-party services

To provide the services and maintain the website, MEDICINA POR EUROPA uses the following processors (Art. 28 GDPR), all bound by contract:

• Vercel Inc. — website hosting and the function that sends the forms to our CRM (in a data centre in the European Union).
• Pipedrive — CRM: management of contacts and enquiries received through the website.

For the page animations, your browser downloads an open-source library (Motion) from jsDelivr, a public content delivery network. To serve it, jsDelivr receives technical connection data such as your IP address; it does not receive form data. If your browser does not download it, the website works the same, without animations.

7. International transfers

Some of the providers listed (Vercel) may process data in countries outside the European Economic Area, in particular the United States. These transfers are based on the Standard Contractual Clauses approved by the European Commission (Implementing Decision (EU) 2021/914) and, where applicable, the EU–U.S. Data Privacy Framework, ensuring an adequate level of protection under Art. 46 GDPR.

8. Changes to this policy

MEDICINA POR EUROPA reserves the right to amend this Privacy Policy, as required by legislative or case-law changes. Any amendment will be published at least 30 days before it takes effect. If you have given us an email address, we will notify you of substantial changes by that means.

Last updated: November 2026 · MEDICINA POR EUROPA S.L.