Privacy policy

The controller of personal data collected through this site is Grupo Dermlun GD, SRL (hereinafter, “Grupo Dermlun”, “the Company” or “the Controller”), a limited liability company incorporated in the Dominican Republic.

• Grupo Dermlun GD, SRL
• Rubén Darío #1, Enriquillo de Herrera, Santo Domingo Oeste, República Dominicana
• +1 809-561-1011
• info@dermlun.com

This policy applies to all personal data processed by the Company in connection with the website grupodermlungd.com and the communications derived from it (email, WhatsApp, telephone calls initiated by the user).

Your data is processed under:

• Constitution of the Dominican Republic, art. 44 (right to privacy and informational self-determination).
• Dominican Law No. 172-13 on Comprehensive Personal Data Protection.
• Dominican Law No. 53-07 on High-Tech Crimes and Offences (security and breach-notification context).
• For users outside the DR, we also apply the principles of Regulation (EU) 2016/679 (GDPR) and equivalent local regulations where applicable.

When you use the contact form, we collect:

• Identification data: full name, company you represent, role (when provided).
• Contact data: work email, phone / WhatsApp (optional).
• Project data: industry sector, service requested, project description you provide.
• Attached technical documents: drawings, CAD models, photographs of parts or other files you voluntarily share. These files may contain confidential information or intellectual property of your company; their processing is governed by the specific commitments in section 3.1.

Additionally, for security purposes and to operate the anti-spam and rate-limiting systems, we automatically log:

• Source IP address of the request (partially truncated before storage).
• Technical browser headers (user-agent, language, timestamp).
• A strictly-necessary technical cookie (see section 9).

We do not request or process special categories of data (health, biometric, religious, ideological, union-affiliation, sexual orientation or ethnic-origin data).

Drawings, CAD models, specifications, photographs of parts and any other technical documentation you voluntarily share are processed under the following commitments:

Purpose limitation. Those files are used solely to assess the technical feasibility of your request, prepare the corresponding quote and, where applicable, execute the project. They are not used to develop our own products, nor for promotional, training or any other purpose.

Confidentiality and restricted access. Access is limited to the technical and commercial staff directly involved in your project, bound by a duty of confidentiality.

No disclosure to third parties. They are not shared with third parties, except where strictly necessary to execute the project — for example, subcontracted heat-treatment or coating processes — in which case the third party is bound by confidentiality obligations equivalent to those described here.

Intellectual property. Ownership of the designs, drawings and technical know-how contained in the documentation remains entirely with your company. Grupo Dermlun acquires no right over them by receiving or processing them.

Deletion on request. You may request deletion of the files you sent at any time by writing to info@dermlun.com. They will be deleted unless they must be retained by legal obligation or because they are tied to a project in progress or an active warranty.

Formal confidentiality agreement. If your company requires a non-disclosure agreement (NDA) to be signed before any documentation is sent, you may request one by writing to info@dermlun.com before using the contact form.

Your data is used exclusively to:

• Handle your quote request or technical enquiry.
• Prepare estimates, commercial proposals and the technical specifications required to evaluate your project.
• Follow up on the commercial relationship you have initiated (sample shipments, workshop visit coordination, invoicing if the project moves forward).
• Comply with applicable legal obligations (accounting, tax, commercial) once a formal commercial relationship exists.
• Operate the site under reasonable security conditions (anti-spam, fraud prevention, minimum technical logging).

We do not use your data for behavioural advertising, automated profiling with legal effects, sale to third parties, or sending unsolicited commercial communications.

The processing of your data is based on:

• Consent: by voluntarily submitting the contact form, you give express consent for the processing described in section 4 (Dominican Law 172-13, art. 6).
• Performance of pre-contractual measures: when you request a quote, processing is necessary to prepare and potentially formalise the contract.
• Legitimate interest: minimal technical logging (truncated IP, user-agent) is carried out to protect site security and prevent abuse, without harming the fundamental rights of the data subject.
• Compliance with legal obligations: once a commercial relationship exists, part of the data is retained to comply with Dominican accounting, tax and commercial regulations.

Maximum retention periods are:

• Enquiries that do not lead to a commercial relationship: twelve (12) months from the last interaction, unless you request earlier deletion.
• Formalised quotes and executed projects: five (5) years from the last operation, in line with the general documentary-retention obligation applicable to commercial companies in the DR.
• Documents with tax or accounting relevance: ten (10) years, under Dominican tax regulations.
• Technical security logs: thirty (30) days from the date of the log.

Once the periods expire, the data is securely deleted or, where appropriate, irreversibly anonymised.

To operate the site and process form communications we rely on a limited number of specialised providers acting as data processors with access strictly limited to providing their services. The categories are:

• Hosting and site-infrastructure provider.
• Transactional email provider.
• Media delivery (CDN) provider.
• Mapping-services provider.

All providers are bound by contract to confidentiality and compliance obligations equivalent to those required by applicable law. The up-to-date list naming each individual processor is available on written request to the contact email at the bottom of this policy.

Grupo Dermlun does not sell, rent or share your data with third parties for marketing purposes. Information is only shared outside the processors above when required by law (judicial, tax or administrative requirements) or when essential to perform a contract you have signed.

Some of the processors mentioned above handle data on servers located outside the Dominican Republic. These transfers are performed under standard contractual clauses and the equivalent protection commitments those providers assume by contract.

If you reside in a jurisdiction with specific rules on international transfers (EU/EEA, UK), you can request additional information on the applicable safeguards at info@dermlun.com.

This site uses a single first-party, strictly-necessary cookie that remembers the language chosen by the user (Spanish or English) so the site can personalise the experience between visits. Being technical in nature, it does not require consent under applicable law.

We do not use analytics cookies, advertising cookies, social-media tracking pixels or fingerprinting techniques.

Embedded third-party services (location map, media content) may set their own cookies when loaded. Their use is governed by those providers' privacy policies.

Under Dominican Law 172-13 and, where applicable, GDPR, you have the following rights:

• Access — know what data we hold about you and obtain a copy.
• Rectification — request correction of inaccurate or incomplete data.
• Cancellation / Deletion — request that we stop processing your data and delete it once it is no longer necessary for the purposes for which it was collected.
• Objection — object to the processing on grounds relating to your particular situation.
• Restriction of processing — request that your data be retained but not used.
• Portability — receive your data in a structured, commonly used, machine-readable format and/or have it transmitted to another controller.
• Withdrawal of consent — at any time, without affecting the lawfulness of processing carried out before the withdrawal.
• Not to be subject to automated decisions — that produce legal effects on you or significantly affect you. Grupo Dermlun does not perform such decisions.

To exercise any of the rights above, write to info@dermlun.com with the subject “Privacy request”, including:

• Your full identification details.
• The right you wish to exercise.
• A concrete description of your request and the data it applies to.
• A copy of an identity document (national ID or passport). If acting on behalf of someone else, appropriate proof of representation.

We will respond within thirty (30) calendar days of receiving your request. If the request is manifestly unfounded or excessive, we may reject it with reasons or charge a reasonable handling fee, as permitted by applicable law.

Grupo Dermlun applies reasonable technical and organisational measures, aligned with industry-standard practice, to protect your data against unauthorised access, alteration, disclosure or accidental destruction. These measures include, among others, encryption of communications, access controls restricted to authorised personnel, validation of incoming data and ongoing site monitoring.

For security reasons we do not publicly disclose the specific technical configuration of our defences. We do, however, review our measures periodically to keep them current and aligned with the state of the art.

If a security breach affecting your personal data is identified and poses a risk to your rights, Grupo Dermlun will notify the competent authority and the affected data subjects within the timeframes and terms set by applicable law.

The site is aimed at professionals and businesses. We do not knowingly solicit or collect data from persons under the age of eighteen (18). If we identify that we have received minor's data, we will proceed to delete it immediately. Parents or guardians who identify such a case can contact us at info@dermlun.com.

Without prejudice to the direct channels with the Company, you have the right to lodge a complaint with the competent supervisory authority for data protection in the Dominican Republic. If you reside outside the DR, you can additionally approach the supervisory authority of your jurisdiction (e.g. AEPD in Spain, ICO in the United Kingdom, EU/EEA supervisory authorities).

This Privacy Policy may be updated to reflect regulatory, operational or technological changes. The last-updated date is shown at the top of the document. Material changes will be highlighted prominently on this page for a reasonable period.

We recommend reviewing this Policy periodically. Continued use of the site after publication of changes constitutes acceptance of the current version.