PRIVACY NOTICE BIOMED
In accordance with the provisions of the Law for the Protection of Individuals in relation to the Processing of Personal Data No. 8968, and its Regulations, this Privacy Notice (hereinafter referred to as “Notice”) from BIOMED CENTROAMÉRICA, S.A., legal ID 6259789-2 (hereinafter, “BIOMED CENTROAMÉRICA, S.A.,” the “Controller,” or “The Company”), applies to all information that BIOMED CENTROAMÉRICA, S.A. collects through the BIOMED App (hereinafter, the “App” or “BIOMED App”) and other sites where it is published and available for reading. It also applies to data collected by the Controller through all its digital channels, such as social media profiles, User Support chats, and offline interactions.
For the purposes of this Notice, the User is defined as any natural person using the BIOMED App’s services. This Notice establishes the necessary measures and procedures to ensure the right to informational self-determination for Users who share their personal data with the BIOMED App platform and, in general, with the Company.
- Personal Data Subject to Processing
The Controller will collect through the App, on electronic messaging platforms, or through its social media profiles, the following personal data of the User:
- Identification type (Optional data)
- Identification number (Optional data)
- Full name
- Email address
- Password
- Phone number (Optional data)
- Date of birth (Optional data)
- Gender (Optional data)
The App may also collect certain information automatically, such as IP addresses, the name of the internet service provider, the device’s operating system, phone number, the user’s location through geolocation systems, as well as statistical data regarding User activity on the App.
The User agrees that the information provided during the registration process or at any later time must be accurate and up to date. If deemed necessary by the Controller, additional documentation and personal information may be requested from the User, which will be required through email, chat, or phone call. If the User does not provide the requested documentation and/or information within seventy-two hours of the request, the Controller may suspend access to the platform.
- Purpose of Processing Personal Data
The purpose of collecting and processing personal data is to identify the User, issue authentication credentials, manage loyalty programs for gas station purchases, allow participation in raffles and similar commercial initiatives, identify the User in the event of winning a raffle, analyze the User’s activity on the App to improve the user experience, analyze activity on the Controller’s social media profiles, send commercial communications, contact through social media, messaging services, phone calls, run advertising campaigns on search engines and social networks, email marketing campaigns, send SMS messages to inform about services, promotions, and other information of interest regarding the services offered by the Controller, conduct surveys, carry out statistical or behavioral studies on preferences and satisfaction levels concerning the products and/or services of the App, segment markets to improve services, make customer service decisions, and acquire new clients, among other legitimate and necessary purposes for the proper provision of the services offered by the Company and its commercial partners.
- Retention Period of Personal Data
The personal data of the User may be retained for a maximum period of 10 years from the User’s last activity date with the App. However, the data will only be kept for the minimum time necessary to fulfill the purposes specified in section (2), or until the User requests its deletion. In such cases, the Controller will only retain the data necessary to exercise or defend future legal claims or to comply with judicial authority requirements.
- Recipient and Access to Personal Data
The Controller is the final recipient of the User’s personal data. The data will be accessible to the Controller and its designated collaborators for this purpose. During the processing and fulfillment of the purposes set forth in section 2 (two), the Controller may share the User’s personal data with a processor, a service provider, a technology intermediary, or companies within the same economic interest group as the Controller.
The Controller may transfer the User’s personal data in the event of mergers, demergers, acquisitions, or strategic alliances with third parties, understood as the necessary transfer of assets from one company to another, provided this new corporate transformation involves the same purpose of data processing established in section 2 (two). In all the aforementioned cases, the Controller will ensure that the new data controller complies with the same obligations to which BIOMED CENTROAMERICA, S.A. is subject.
The User understands that their personal data may be shared with authorities if required for judicial or administrative investigations, or other legal proceedings as mandated by law, including disclosure to external auditors or legal advisors, or when we believe in good faith that such disclosure is necessary to protect the rights of the Company, the User’s safety, the safety of others, or to investigate or prevent fraud, all in accordance with legitimate procedures established for this purpose in Costa Rican and international regulations.
4.1. Third-party Services and International Providers
The Controller may share the User’s personal data with providers or Processors outside of Costa Rica, who may collect and process some personal data. Therefore, the Controller commits to ensuring that such third parties or processors comply with the personal data protection guarantees established by Costa Rican law.
The Controller, for the fulfillment of the purposes, uses the following third-party services, which involve the processing of some data that may be considered personal:
- Amazon AWS: Since the BIOMED App uses AWS hosting and technology infrastructure services, during User interaction with the App, Amazon may collect and process some personal data through its technologies. To learn what personal data Amazon collects and how it processes them, the User can review the Amazon AWS Privacy Policy.
- Lealto Costa Rica SA: The developer and manager of the BIOMED App, who may have access to the data as a Processor.
- Principles Applied to Data Processing
In accordance with Law 8968 – Law for the Protection of Individuals in relation to the Processing of Personal Data, Article 6, the Controller commits through this Notice to collect, store, or use personal data for automated or manual processing, in accordance with the principles of data currency, truthfulness, accuracy, and adequacy to the purpose.
- User Rights
The User has the following rights regarding the personal data collected and processed by the Controller:
6.1. Right to Access Information
Request confirmation from the Controller of whether or not the User’s data exists in the Controller’s files or databases. Be informed of how the User’s personal data is being used, its purpose, and the technical terms used by the Controller for data processing.
6.2. Right to Rectification
The User has the right to obtain the rectification, update, or deletion of personal data when processed in violation of the provisions of Law 8968, particularly if the data is incomplete or inaccurate, or collected without the holder’s authorization.
6.3. Right to Revocation
The User may revoke their informed consent for the processing of their personal data by the Controller. In such cases, the Controller will only retain the data necessary to exercise or defend future claims.
6.4. Right to Suppression or Deletion
The User may request the complete or partial deletion of their personal data at any time. In such cases, the Controller will only retain the data necessary for the exercise or defense of future claims. Exceptions to data deletion will be those established by law. In some cases, we may not be able to delete the information, such as when the request conflicts with legal, contractual, regulatory, or compliance obligations, if it prevents the Company from exercising rights conferred by law or contract, or if we are unable to verify the requester’s identity or the request involves disproportionate costs or effort. However, the respective request will be answered within the legally established deadlines, providing the necessary explanations.
To exercise any of these rights, the User must send a written communication to the email address administracion@biomed-ca.com, using the same email address, identity document number, and full name registered in the BIOMED App User Account.
- Personal Data Security
The Controller is committed to protecting the personal data of Users and taking all reasonable measures in accordance with applicable legislation and industry best practices to reasonably ensure that Users’ data remains secure and up-to-date. The Controller also requires trusted third parties handling such personal data to have appropriate measures based on identified risks. Once the Controller has received the User’s personal information, strict procedures and security features are used to try to prevent unauthorized access. However, no data transmission over the Internet is completely secure. Despite our best efforts to protect personal information, we cannot guarantee its complete security, so the User assumes a reasonable level of risk in processing their information and is responsible for using secure Wi-Fi networks, devices with antivirus software, and securely managing any credentials, tools, or devices necessary for using the BIOMED App.
- Modification of the Privacy Policy and Personal Data Protection
This Notice may be reviewed and modified by the Controller at any time. In the event of any significant changes, the User will be notified through the publication of a new version on the App. Subsequent use of the App or Applications by the User will be considered as acceptance of such modifications. The User must review this Notice periodically to ensure they are familiar with the most current version. By using the BIOMED App after changes to this Notice are posted, the User accepts those changes.
- Acceptance
The User acknowledges that they have read and understood this “PRIVACY NOTICE OF THE BIOMED APP,” and by accepting the Terms of Use of the BIOMED App and using the App, they expressly acknowledge acceptance of these provisions freely and consciously, having satisfactorily reviewed the information deemed adequate and sufficient.
- How to Contact the Data Controller
The Company is committed to protecting your information. If you have any questions about the processing of your personal data or wish to exercise the rights granted to you under Clause 6 of this Notice, you may contact the Data Controller using the following means:
BIOMED CENTROAMERICA, S.A.
Tax ID: 6259789-2
Address: 10 Avenida 33-50 Zona 11, Las Charcas, Guatemala City
Phone: 2442-0511, 2476-7922
Email: administracion@biomed-ca.com
Last updated: June 2026.