Ipsory data protection

To ensure security and confidentiality, Ipsory follows a set of measures that ensure strict compliance with current legislation:

We comply with Organic Law 5/2018 on the Protection of Personal Data.
We comply with Organic Law 34/2002 of 11 July on Information Society Services and Electronic Commerce.
We comply with the obligations set out in EU Directive 2016/679 of 27 April of the European Parliament and of the Council, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
We hold PCI DSS (Payment Card Industry Data Security Standard) certification. A security standard created to protect payment card information.
From the moment patient data is collected, their consent is requested and they are informed who holds their data, for what purpose, and who will have access to this information.
No particularly sensitive (health) data is processed.
Confidential processing at all times (the use of data will be limited to the purposes necessary to provide the service).