Privacy & Legal Center

Last updated: March 20, 2026

1.1 Data Controller

The data controller for your personal data is Biid (GRUP MED CORPORATIU SAU), with Tax ID (NIF/VAT) A-58489758 and registered office at Paseo Bonanova 47, 08017 Barcelona. You can contact our Data Protection Officer at the following email address: dadespersonals.grupmed@med.es.

1.2 Purpose and Data Collected

The application collects and processes personal data for the sole purpose of managing your digital identity, enabling secure passwordless authentication, and facilitating access to linked corporate or professional platforms. The processed data includes:

• Identification data (First name, last name, ID/Passport number, professional membership number).
• Contact information (Email address, mobile phone number).
• Technical device and connection metadata to ensure the security of cryptographic validation.

Biometric data (fingerprint or facial recognition) is processed locally within the secure enclave of your mobile device. The application does not transmit, store, or process your biometric data on our servers.

1.3 Legal Basis and Data Retention

The legal basis for processing your data is your express consent upon registration and the execution of the service agreement for digital identity provision. Data will be retained as long as the user's account remains active and, subsequently, for the legally required periods to address potential liabilities.

1.4 User Rights

You have the right to obtain confirmation as to whether we are processing your personal data. Furthermore, you have the right to access your data, request the rectification of inaccurate data, request its erasure, restrict its processing, object to processing, and request data portability by sending a written request to dadespersonals.grupmed@med.es attaching a copy of your identity document. You also have the right to lodge a complaint with the relevant Data Protection Supervisory Authority.

2.1 General Conditions of Use

Accessing, downloading, and using the mobile application grants you the status of USER. The use of the digital identity is personal and non-transferable. The user agrees to safeguard their mobile device and not allow third parties to authorize transactions or log in on their behalf.

2.2 User Obligations

The user is solely responsible for maintaining the security of their device and its unlocking mechanisms (PIN, pattern, or biometrics). In the event of loss, theft, or suspected security breach of the device, the user must immediately notify Biid (GRUP MED CORPORATIU SAU) to revoke the digital identity credential.

2.3 Intellectual and Industrial Property

Biid (GRUP MED CORPORATIU SAU) owns all intellectual and industrial property rights to this application, as well as the elements contained therein (source code, interfaces, trademarks, logos, etc.). Any reproduction, distribution, or public communication for commercial purposes, in any medium and by any technical means, without express authorization, is strictly prohibited.

2.4 Limitation of Liability

The service provider is not liable for any damages resulting from interferences, computer viruses, or disconnections in the operational functioning of the electronic system caused by external factors. Furthermore, the provider is not responsible for the fraudulent use of the application on devices subjected to jailbreak or rooting processes, as cryptographic security guarantees are voided in such cases.

3.1 Use of Local Storage and Cookies

Given the nature of this platform and its integration as an identity validation application (Web/App), we use local storage technologies and technical cookies that are strictly necessary for user authentication and security.

3.2 Types of Cookies We Use

• Technical and Session Cookies: These allow the user to navigate through the private area and use its different options or services, such as controlling data traffic, identifying the session, or accessing restricted areas via identity validation.
• Security Cookies: Used to prevent fraudulent use of login credentials and protect user data from unauthorized third parties.

This application DOES NOT use advertising cookies, nor third-party tracking or profiling cookies. Because these cookies are exempt as they are strictly necessary to provide the service expressly requested by the user, explicit consent is not required for their installation under applicable ePrivacy regulations.