Privacy Policy

Last updated: 19 October 2026

This Privacy Policy applies to the GoSafe Cycling mobile application, published on Google Play and the App Store by International Medical Services, whose responsible legal entity is SERVICIO MEDICO ARENAL PLUS SL., as well as to the website www.gosafecycling.com.

• Application name: GoSafe Cycling
• Developer: International Medical Services
• Legal entity: SERVICIO MEDICO ARENAL PLUS SL.

1. Information for the user

Who is responsible for processing your personal data?

Servicio Medico Arenal Plus SL, with tax ID B27688902 and registered office at C/ General Felix Mas, 4 2º-3, 07013 Palma (Illes Balears), is the CONTROLLER responsible for processing the USER's personal data and informs the USER that these data will be processed in accordance with Regulation (EU) 2016/679 of 27 April (GDPR) and Spanish Organic Law 3/2018 of 5 December (LOPDGDD).

What do we process your personal data for?

To maintain a commercial and service relationship with the user. The operations envisaged for the processing are:

• Provision and management of the administrative and health services involved: appointments, issuing of certificates, handling of enquiries, handling of incidents, assistance with accidents en route, etc.; for which the processing of health-related data may be necessary.
• Invoicing, collection and accounting for our services.
• Sending commercial advertising communications by e-mail, SMS, social networks or any other electronic or physical means, present or future, that makes commercial communications possible. These communications will be made by the CONTROLLER and will relate to its products and services, or to those of its partners or suppliers with whom it has reached a promotional agreement. In this case, third parties will never have access to personal data.
• Carrying out market research and statistical analysis.
• Processing orders and requests, and responding to enquiries or any type of request made by the USER through any of the contact methods made available on the CONTROLLER's website.
• Sending the online newsletter about news, offers and promotions relating to our activity.

On what grounds may we process your personal data?

Because the processing is legitimised by article 6 of the GDPR as follows:

• For the performance of a contract to which you are party (art. 6.1.b GDPR) and with your consent for the processing of health data (art. 9.2.a GDPR).
• For compliance with a legal obligation (art. 6.1.c GDPR).
• With the USER's consent: sending commercial communications and the newsletter.
• On the legitimate interest of the CONTROLLER: carrying out market research, statistical analysis, etc., and processing orders, requests, etc. at the USER's request.

How long will we keep your personal data?

They will be kept for no longer than necessary to maintain the purpose of the processing or while legal provisions require their custody; when they are no longer needed for that purpose, they will be deleted using appropriate security measures to guarantee the anonymisation of the data or their total destruction.

Who do we share your personal data with?

No communication of personal data to third parties is envisaged except, where necessary for the development and performance of the purposes of the processing, to our communications service providers, with whom the CONTROLLER has signed the confidentiality and data processor agreements required by current privacy legislation.

What are your rights?

The rights available to the USER are:

• The right to withdraw consent at any time.
• The right of access, rectification, portability and erasure of your data, and to restrict or object to its processing.
• The right to lodge a complaint with the supervisory authority (www.aepd.es) if you consider that the processing does not comply with current legislation.

Contact details for exercising your rights:

2. Mandatory or optional nature of the information provided by the user

By ticking the corresponding boxes and entering data in the fields marked with an asterisk (*) in the contact form or in download forms, USERS expressly, freely and unequivocally accept that their data are necessary for the provider to deal with their request, the inclusion of data in the remaining fields being optional. The USER guarantees that the personal data provided to the CONTROLLER are true and is responsible for notifying any change to them.

The CONTROLLER states that all data requested through the website are mandatory, as they are necessary to provide an optimal service to the USER. Should not all data be provided, it cannot be guaranteed that the information and services provided will be fully tailored to the USER's needs.

3. Security measures

In accordance with the provisions of current personal data protection legislation, the CONTROLLER complies with all provisions of the GDPR and the LOPDGDD for the processing of the personal data under its responsibility, and manifestly with the principles described in article 5 of the GDPR, whereby they are processed lawfully, fairly and transparently in relation to the data subject, and are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

The CONTROLLER guarantees that it has implemented appropriate technical and organisational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect the rights and freedoms of USERS, and has communicated the appropriate information to them so that they can exercise those rights.

For more information about privacy safeguards, you may contact the CONTROLLER at:

4. GoSafe Cycling mobile app

The GoSafe Cycling app lets our 24-hour call center know where you are so that it can help you and, if necessary, send you medical assistance. You do not need to register or create an account.

What data does the app collect, and when?

• Precise location (coordinates, accuracy and the approximate address worked out by your own phone): only when you tap “Send my location” and only if you have granted location permission. The app does not collect your location in the background or send it without you asking. If there is no connection at that moment, it stores the location on the phone and sends it as soon as the connection is back, for up to 6 hours.
• Phone number: only if you type it in so that we can call you. If you tick “Remember this number”, it is stored only on your phone.
• Contact form: name, email address and the message you write.
• Technical data sent with each request: IP address, app version, operating system and a random identifier that the app creates when it is installed. This identifier is not an advertising ID, cannot be used to track you across other apps and disappears when you uninstall the app.

The app contains no advertising and no third-party analytics or tracking tools.

What do we use this data for, and on what legal basis?

• To locate you, contact you and provide the assistance you request: steps taken at your request prior to entering into a contract, or performance of a contract (Art. 6(1)(b) GDPR) and, in emergencies, protection of your vital interests or those of another person (Art. 6(1)(d) GDPR).
• To answer messages sent through the contact form (Art. 6(1)(b) GDPR).
• To prevent duplicate requests and misuse of the service: legitimate interest of the CONTROLLER (Art. 6(1)(f) GDPR).

This data is not used for marketing communications or profiling.

Who receives this data?

• The CONTROLLER's call center, which handles your request for assistance.
• Providers that process the data on behalf of the CONTROLLER, under the data processing agreements required by Article 28 GDPR:
  • Dinahosting S.L., hosting of the server that receives the app's requests (Spain).
  • Resend, Inc., email delivery of contact form messages. It is based in the United States and certified under the EU-U.S. Data Privacy Framework, which ensures an adequate level of protection (Art. 45 GDPR).
• The map in the app is displayed by Apple Maps (iPhone) or Google Maps (Android), and the address is worked out by the phone's operating system. Apple and Google process that data under their own privacy policies.

We do not sell or share the data with third parties.

How long do we keep it?

• Locations and phone numbers sent: for as long as necessary to provide the assistance requested and, after that, restricted in order to deal with any liability arising from it, for a maximum of 5 years from when they were sent. After that period, they are deleted.
• Contact form messages: until the enquiry has been answered and, after that, for the statutory limitation periods.
• The data the app stores on the phone (remembered number, pending request and identifier) is deleted when you uninstall it.

How can you withdraw permission or exercise your rights?

• You can withdraw location permission at any time in your phone's settings (Settings → GoSafe Cycling → Location). Without it, you can still call us on +34 871 95 99 70.
• You can exercise your rights of access, rectification, erasure, restriction, objection and portability by writing to info@gosafecycling.com or to our data protection officer at dpo@ims-medical.es, and you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Minors

The app is not intended for children under 14 (Art. 7 of Spain's Organic Law 3/2018, LOPDGDD).