IMS

Privacy Policy

Last updated: October 19, 2026

This Privacy Policy applies to the IMS Medical mobile application, published on Google Play and the App Store by International Medical Services, whose responsible legal entity is SERVICIO MEDICO ARENAL PLUS SL., as well as to the website www.ims-medical.es.

Application name: IMS Medical
Developer: International Medical Services
Legal entity: SERVICIO MEDICO ARENAL PLUS SL.

User information

Who is responsible for the processing of your personal data?

Servicio Medico Arenal Plus SL, with tax ID (NIF) B27688902 and registered office at C/ General Felix Mas, 4 2º-3, 07013 Palma (Illes Balears), Spain, is the CONTROLLER of the USER’s personal data and informs the USER that such data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April (GDPR) and Organic Law 3/2018 of 5 December (LOPDGDD).

For what purposes do we process your personal data?

To maintain a commercial and service relationship with the user. The operations planned for the processing are:

  • Provision and management of the associated administrative and health services—such as scheduling appointments, issuing proof-of-attendance slips, handling inquiries, managing incidents, responding to en-route accidents, etc.—which may require the processing of data concerning your health.
  • Invoicing, collection, and accounting for our services.
  • Sending of commercial advertising communications via email, fax, SMS, MMS, social media, or any other electronic or physical means—whether currently existing or developed in the future—that enables the transmission of commercial communications. These communications will be sent by the CONTROLLER and will relate to its own products and services, or those of its collaborators or suppliers with whom it has entered into a promotional agreement. In such cases, third parties will never have access to personal data.
  • Conduct market research and statistical analyses.
  • To process orders and requests, and to respond to inquiries or any other type of request made by the USER through any of the contact methods made available on the CONTROLLER‘s website.
  • Send the online newsletter regarding news, offers, and promotions related to our activities.

On what grounds can we process your personal data?

Because the processing is legitimized by Article 6 of the GDPR as follows:

  • For the performance of a contract to which you are a party (Art. 6.1.b GDPR) and based on your consent to process health data (Art. 9.2.a GDPR).
  • For compliance with a legal obligation (Art. 6.1(c) GDPR)
  • With the USER’s consent: sending of commercial communications and the newsletter.
  • Based on the legitimate interest of the CONTROLLER: to conduct market research, statistical analyses, etc., and to process orders, requests, etc., at the USER’s request.

How long will we keep your personal data?

They shall be retained for no longer than is necessary to fulfill the purpose of the processing or to comply with legal requirements mandating their custody; once no longer required for such purposes, they shall be deleted using appropriate security measures to ensure data anonymization or complete destruction.

To whom do we provide your personal data?

No disclosure of personal data to third parties is envisaged, except—where necessary for the fulfillment and execution of the processing purposes—to our communications service providers, with whom the CONTROLLER has entered into the confidentiality and data processor agreements required by applicable privacy regulations.

What are your rights?

The rights to which the USER is entitled are:

  • Right to withdraw consent at any time.
  • Right of access to, rectification, portability, and erasure of your data, and to the limitation of or objection to its processing.
  • Right to lodge a complaint with the supervisory authority (www.aepd.es) if you consider that the processing does not comply with applicable regulations.

Contact details for exercising your rights:

Servicio Medico Arenal Plus SL. C/ General Felix Mas, 4 2-3 – 07013 Palma (Illes Balears). E-mail: info@ims-medical.es. Datos de contacto del delegado de protección de datos: dpo@ims-medical.es

Mandatory or optional nature of the information provided by the user

By checking the corresponding boxes and entering data into the fields marked with an asterisk (*) on the contact form or in download forms, USERS expressly, freely, and unequivocally acknowledge that providing such data is necessary for the service provider to address their request, while the inclusion of data in the remaining fields is voluntary. The USER guarantees that the personal data provided to the CONTROLLER is accurate and assumes responsibility for communicating any changes to said data.

The CONTROLLER informs you that all data requested via the website is mandatory, as it is necessary to provide an optimal service to the USER. If all the data is not provided, there is no guarantee that the information and services supplied will be fully tailored to your needs.

Safety measures

In accordance with applicable personal data protection regulations, the CONTROLLER is complying with all provisions of the GDPR and LOPDGDD regarding the processing of personal data under its responsibility—and specifically with the principles set forth in Article 5 of the GDPR—ensuring that data is processed lawfully, fairly, and transparently in relation to the data subject, and is adequate, relevant, and limited to what is necessary for the purposes for which it is processed.

The Data Controller guarantees that it has implemented appropriate technical and organizational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect the rights and freedoms of the Users, and has provided them with the appropriate information to enable them to exercise those rights.

For further information regarding privacy guarantees, you may contact the Data Controller via Servicio Medico Arenal Plus SL: C/ General Felix Mas, 4 2-3 – 07013 Palma (Balearic Islands). E-mail info@ims-medical.es Contact details for the Data Protection Officer: dpo@ims-medical.es

IMS Medical mobile app

The IMS Medical app lets our 24-hour call center know where you are so that it can help you and, if necessary, send you medical assistance. You do not need to register or create an account.

What data does the app collect, and when?

  • Precise location (coordinates, accuracy and the approximate address worked out by your own phone): only when you tap “Send my location” and only if you have granted location permission. The app does not collect your location in the background or send it without you asking. If there is no connection at that moment, it stores the location on the phone and sends it as soon as the connection is back, for up to 6 hours.
  • Phone number: only if you type it in so that we can call you. If you tick “Remember this number”, it is stored only on your phone.
  • Contact form: name, email address and the message you write.
  • Technical data sent with each request: IP address, app version, operating system and a random identifier that the app creates when it is installed. This identifier is not an advertising ID, cannot be used to track you across other apps and disappears when you uninstall the app.

The app contains no advertising and no third-party analytics or tracking tools.

What do we use this data for, and on what legal basis?

  • To locate you, contact you and provide the assistance you request: steps taken at your request prior to entering into a contract, or performance of a contract (Art. 6(1)(b) GDPR) and, in emergencies, protection of your vital interests or those of another person (Art. 6(1)(d) GDPR).
  • To answer messages sent through the contact form (Art. 6(1)(b) GDPR).
  • To prevent duplicate requests and misuse of the service: legitimate interest of the CONTROLLER (Art. 6(1)(f) GDPR).

This data is not used for marketing communications or profiling.

Who receives this data?

  • The CONTROLLER’s call center, which handles your request for assistance.
  • Providers that process the data on behalf of the CONTROLLER, under the data processing agreements required by Article 28 GDPR:
    • Dinahosting S.L., hosting of the server that receives the app’s requests (Spain).
    • Resend, Inc., email delivery of contact form messages. It is based in the United States and certified under the EU-U.S. Data Privacy Framework, which ensures an adequate level of protection (Art. 45 GDPR).
  • The map in the app is displayed by Apple Maps (iPhone) or Google Maps (Android), and the address is worked out by the phone’s operating system. Apple and Google process that data under their own privacy policies.

We do not sell or share the data with third parties.

How long do we keep it?

  • Locations and phone numbers sent: for as long as necessary to provide the assistance requested and, after that, restricted in order to deal with any liability arising from it, for a maximum of 5 years from when they were sent. After that period, they are deleted.
  • Contact form messages: until the enquiry has been answered and, after that, for the statutory limitation periods.
  • The data the app stores on the phone (remembered number, pending request and identifier) is deleted when you uninstall it.

How can you withdraw permission or exercise your rights?

  • You can withdraw location permission at any time in your phone’s settings (Settings → IMS Medical → Location). Without it, you can still call us on +34 971 76 75 76.
  • You can exercise your rights of access, rectification, erasure, restriction, objection and portability by writing to info@ims-medical.es or to our data protection officer at dpo@ims-medical.es, and you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Minors

The app is not intended for children under 14 (Art. 7 of Spain’s Organic Law 3/2018, LOPDGDD).

971 76 75 76