Privacy Policy
1. Who we are
[LEGAL ENTITY OR FULL LEGAL NAME], operating the GALMS Health – Salus Suprema System website at galms.hea, is the controller of personal data processed through this website unless another controller is identified for a specific service.
Contact details: [POSTAL ADDRESS] • [EMAIL ADDRESS]
2. Personal data we may process
Depending on how you use the website and which features are enabled, we may process:
• technical and security data, such as IP address, browser/device information, timestamps, requested pages and server or security logs;
• information you choose to send through a contact form or by email, such as your name, email address and message;
• cookie and consent preferences and, where you agree, analytics or similar usage data;
• any other information you deliberately provide to us through an enabled website feature.
Please do not submit medical records, diagnoses, test results or other sensitive health information through a general contact form unless a specific GALMS service clearly requests it and provides an appropriate privacy notice.
3. Why we process personal data and our legal bases
| Purpose | Typical data | GDPR legal basis |
| Operate, secure and troubleshoot the website | Technical and security data | Legitimate interests; and legal obligations where applicable |
| Respond to enquiries | Contact details and message content | Legitimate interests; or steps requested before entering a contract where relevant |
| Remember or record privacy choices | Consent records and preference data | Legal obligation / legitimate interests in demonstrating compliance; consent where required |
| Optional analytics or similar technologies | Cookie identifiers and usage data | Consent |
| Meet legal, regulatory or claims-handling requirements | Relevant records | Legal obligation and/or legitimate interests, as applicable |
Before publication, confirm that the legal bases above match the tools and functions actually enabled on the live site.
4. Cookies and similar technologies
Strictly necessary technologies may be used where needed to provide the website, maintain security or remember a privacy choice. Optional cookies or similar technologies, such as non-essential analytics or marketing tools, should not be activated before the required consent is obtained.
You can review or change your choices at any time through the “Cookie Preferences” link in the website footer. More detail appears in the Cookie Policy & Preferences page.
5. Recipients and service providers
We may use service providers to host, secure, maintain or support the website, deliver communications, or provide analytics and other tools that you have agreed to. These providers may process personal data on our behalf or, in some cases, act as separate controllers. We disclose personal data only where needed for the relevant purpose, to comply with law, or to establish, exercise or defend legal claims.
6. International transfers
If personal data is transferred outside the European Economic Area, we will use a transfer mechanism recognised under applicable EU data-protection law, such as an adequacy decision or appropriate safeguards, where required. Further information about relevant safeguards may be requested at [EMAIL ADDRESS].
7. How long we keep personal data
We keep personal data only for as long as needed for the purpose for which it was collected, including security, legal, accounting and dispute-resolution needs. Before publication, GALMS should insert or confirm the actual retention periods or criteria used for website logs, contact messages, consent records and any other enabled service: [CONFIRM ACTUAL RETENTION PERIODS OR CRITERIA].
8. Your data-protection rights
Subject to the conditions and limits in applicable law, you may have the right to request access to your personal data, correction, erasure, restriction of processing, data portability, and to object to certain processing. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise a right, contact [EMAIL ADDRESS]. We may need to verify your identity before responding.
9. Complaints
You also have the right to lodge a complaint with a competent data-protection supervisory authority, in particular in the EU/EEA country of your habitual residence, place of work or the place of the alleged infringement. GALMS should identify its lead or local supervisory authority here: [NAME OF THE COMPETENT SUPERVISORY AUTHORITY].
10. Children
The website provides general educational information and is not designed to collect personal data from children through account-based or personalised services. If a feature aimed at children is introduced, GALMS will review the applicable age, consent and transparency requirements before enabling it.
11. Security
We use appropriate technical and organisational measures intended to protect personal data against accidental or unlawful loss, alteration, unauthorised access or disclosure. No online service can guarantee absolute security.
12. Changes to this policy
We may update this Privacy Policy when the website, our processing activities or applicable requirements change. The current version will be published on this page with an updated date.