PRIVACY POLICY
At THE ESSENTIAL CLINIC, S.L.P. we care about privacy and transparency.
Who is responsible for the processing of your data?
THE ESSENTIAL CLINIC, S.L.P
B06925283
RAMBLA CATALUNYA 16, 2-2 – 08007 – BARCELONA
930 026 169 / 644 19 99 19
- Contact details of the Data Protection Officer (DPD):
LAUDE CONSULTORIA Y FORMACIÓN, S.L.
C/ SALVADOR ESPRIU 8, 17246, SANTA CRISTINA D’ARO
For what purpose do we process your personal data?
- Processing of customer data: Fiscal, accounting and administrative management of customers and make the collection correctly, as well as send promotional communications about our products and services. If you do not provide your personal data, we will not be able to fulfill the purposes described.
- Data processing of potential customers and contacts: To carry out the management of potential customers who have expressed interest in our products and/or services, as well as other commercial contacts and to carry out, where appropriate, the sending of promotional communications including by electronic means. If you do not provide your personal data, we will not be able to fulfill the purposes described.
- Processing of Newsletter subscriber data: To send our Newsletter and other promotional communications of interest to Newsletter subscribers. If you do not provide your personal data, we will not be able to fulfill the purposes described.
- Processing of data of candidates for a job position: To manage the Curriculum Vitae received and to carry out the processes of personnel selection, interviews and other necessary procedures for the search of the best possible candidate for a specific job position. In the event that you do not provide your personal data, we will not be able to fulfill the purposes described.
- Management of the patient’s clinical history: To manage patient data in order to facilitate health care, recording all those data that, under medical criteria, allow the accurate and updated knowledge of the state of health.
No automated decisions will be made in any of the treatments based on the data provided.
How long will we keep your data?
- Processing of customer data: The data will be kept as long as the data subject does not request its deletion and, as a maximum period, for the years necessary to comply with legal obligations.
- Processing of data of potential customers and contacts: The data will be kept as long as the interested party does not request their deletion, provided that they are necessary for the purposes described. They will be deleted once they are no longer necessary for the described purpose.
- Processing of Newsletter subscribers’ data: The data will be kept as long as the interested party does not request its deletion.
- Processing of job applicants’ data: Two years from the last interaction.
- Management of the patient’s clinical history: The data will be kept for at least five years from the date of discharge from each care process, as stated in the current state regulations on the subject (may vary depending on regional legislation). Since the center is located in Catalonia, and in accordance with its current regulations, the following documents will be kept for a period of 15 years from the date of discharge: informed consent forms, discharge reports, surgical reports, anesthesia data, complementary examination reports and pathological anatomy reports.
What is the legal basis for the processing of your data?
We indicate the legal basis for the processing of your data:
- Processing of customer data:
- Execution of a contract: Fiscal, accounting and administrative management of customers, as well as performing the collection correctly (RGPD art. 6.1.b).
- Legitimate interest of the Controller: Sending promotional communications, including by electronic means (RGPD Recital 47, LSSICE art. 21.2).
- Processing of data of potential customers and contacts:
- Execution of a contract: Management of potential customers who have expressed interest in our products and/or services (RGPD, art. 6.1.b).
- Consent of the interested party: Sending promotional communications, including by electronic means (RGPD, art. 6.1.a, LSSICE art.21).
- Legitimate interest of the Controller: Management of professional contact data (LOPDGDD art.19, RGPD art. 6.1.f).
- Processing of Newsletter subscriber data:
- Consent of the data subject: to send our Newsletter and other promotional communications of interest to subscribers to the same (RGPD, art. 6.1.a, and LSSICE art.21).
- Data processing of candidates for a job position:
- Execution of a contract: Management of the Curriculum Vitae delivered by the candidate in order to carry out personnel selection processes for the search of the best possible candidate for a given job position (RGPD art. 6.1.b).
- Management of the patient’s clinical history:
- Execution of a contract: To provide the care services requested by the patient (RGPD art. 6.1.b and 9.2.h).
- Fulfillment of a legal obligation: With regard to the content, use and conservation of the clinical history data (Law 41/2002, of November 14, 2002, basic law regulating patient autonomy and rights and obligations regarding clinical information and documentation; RGPD arts. 6.1.c and 9.2.h). Regarding the specific retention period in Catalonia for certain data (Law 16/2010, of June 3, amending Law 21/2000, of December 29, on the rights of information concerning health and patient autonomy, and clinical documentation art. 12.4).
To which recipients will your data be communicated?
- Processing of customer data:
- Tax Administration, for the purpose of complying with legal obligations (legal requirement).
- Financial institutions, in order to make collections (contractual requirement).
- Data processing of potential clients and contacts: No data will be transferred to third parties, unless legally required.
- Processing of Newsletter subscribers’ data:
- Sendinblue, Société par actions simplifiée (Société par actions simplifiée) with registered office at 7 rue de Madrid, 75008 Paris, France, for the purpose of recurrent sending of Newsletter and other commercial communications to customers (contractual requirement).
- Processing of job applicants’ data: No data will be disclosed to third parties, unless legally required.
- Management of the patient’s clinical history:
- Self-employed doctors or other medical centers, for the purpose of providing the service / health care required by the patient (contractual requirement).
- Prosthetic laboratories, with the purpose of elaborating the prosthesis, molds or accessory that the patient requires for his treatment (contractual requirement).
Data transfers to third countries
No están previstas transferencias de datos a terceros países en ninguno de los tratamientos. No transfer of data to third countries is foreseen in any of the processing.
What are your rights when you provide us with your data?
Any person has the right to obtain confirmation as to whether or not THE ESSENTIAL CLINIC, S.L.P. is processing personal data concerning them.
Interested persons have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected. You also have the right to data portability.
In certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims.
In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In this case, THE ESSENTIAL CLINIC, S.L.P will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.
You may materially exercise your rights as follows: by contacting RAMBLA CATALUNYA 16, 2-2 – 08007 – BARCELONA or info@theessentialclinic.com.
When commercial communications are sent using the legitimate interest of the data controller as a legal basis, the data subject may object to the processing of his or her data for this purpose.
If you have given your consent for a specific purpose, you have the right to withdraw the consent given at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.
In case you feel that your rights concerning the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you can file a complaint with the competent Data Protection Supervisory Authority through its website: www.aepd.es.
How did we obtain your data?
The personal data that we process in THE ESSENTIAL CLINIC, S.L.P. come from the interested party.
The categories of data processed are:
-
- Processing of customer data:
- Identification data.
- Contact data (postal and e-mail addresses).
- Financial data (for credit card payments).
- Data processing of potential customers and contacts:
- Identification data.
- Postal and e-mail addresses.
- Data processing of Newsletter subscribers:
- Postal and e-mail addresses.
- Processing of job applicants’ data:
- Identification data.
- Postal and e-mail addresses.
- Commercial information.
- Processing of customer data:
- Management of the patient’s medical history:
-
- Identification data
- Medical history (patient and care identification data, clinical and care data, etc.).
