PRIVACY POLICY - EXTENDED INFORMATION
The Privacy Policy is part of the General Conditions that govern this Website.
In accordance with Regulation (EU) 2016 / 679 of the European Parliament and of the Council on the Protection of Personal Data (General Data Protection Regulation), as well as current state regulations on the subject, we inform you of the following:
Who is responsible for the processing of your data?
CLINICA NUESTRA SEÑORA DEL CARMEN, SA
CIF: A35133586
Address: Paseo de Tomás Morales, Nº 121, A35133586, Las Palmas de GC
Tfno: 928 242 242
E-Mail: [email protected]
Contact data Delegate of Data Protection: [email protected]
You can go in any way to contact us.
We reserve the right to modify or adapt this Privacy Policy at any time. We recommend you check it periodically.
If you belong to any of the following groups, consult the drop-down information:
For what purposes are we going to process your personal data?
- Provision of medical-health services.
- Provide you with information about your clinical test results, as well as any other medical tests.
- Control of access, stay and permanence in our facilities.
- Administrative management
What is the legitimacy for the treatment of your data?
The Legal Basis to be able to carry out the treatment of medical health data, is included in the 41 / 2002 Patient Autonomy Law of November “Patient Autonomy Law and Rights and Obligations regarding information and clinical documentation”. Also the execution of a medical-health services contract.
Compliance with a legal obligation
Within the framework of the Health and Finance inspections, access to health data by the competent authorities is protected by Royal Legislative Decree 8 / 2015, of 30 of October, which approves the consolidated text of the General Law of Social Security, as well as in the laws 33 / 2011, of 4 of October, General of Public Health and 14 / 1986, of 25 of April, General of Health.
Similarly, access by duly authorized health personnel, and within the framework of their inspection functions, is covered by Law 41 / 2002 of Patient Autonomy.
How long are we going to keep personal data?
We inform you that based on Article 17 of Law 41 / 2002. The preservation of the Clinical Documentation will be kept at least 5 years, counted from the date of discharge of each care process and during the period that a judge or court may require.
The Decree 178 / 2005, of July 26, which approves the Regulation that regulates the clinical history in the centers and hospital establishments and establishes the content, preservation and expulsion of their Canary Islands documents, will also be kept for the established deadlines.
To which recipients will your data be communicated?
You are informed that your data will be communicated to the Autonomous Health Services and collaborating entities of the SS that by legal obligation have to access the data for the correct provision of medical-health care.
If the health care is carried out based on agreements with Insurance Entities or under the protection of policies or coverage of which you, as a patient, are a beneficiary, the ENTITY may provide information on the services provided, including personal data, which is requested by the insurers or entities under whose coverage the assistance is provided, as they are essential for such coverage and billing.
Likewise, in those cases in which, due to their treatment, the use of prostheses or some other specific surgical material is necessary, their personal data may be communicated to the provider entities, solely and exclusively, for that purpose.
What data do we collect through the Web?
We can treat your IP, what operating system or browser you use, and even the duration of your visit, anonymously.
If you provide us with information on the contact form, you will be identified to be able to contact you, if necessary.
For what purposes are we going to process your personal data?
- Answer your questions, requests or requests.
- Manage the requested service, answer your request, or process your request.
- Information by electronic means, which deal with your request.
- Commercial information or events by electronic means, as long as there is express authorization.
- Perform analysis and improvements on the web, on our products and services. Improve our business strategy.
What is the legitimacy for the treatment of your data?
The acceptance and consent of the interested party: In those cases where to make a request it is necessary to fill in a form and click on the send button, the completion of the same will necessarily imply that you have been informed and have expressly granted your consent to the content of the clause attached to said form or acceptance of the privacy policy.
All our forms have the * symbol in the mandatory data. If you do not provide these fields, or do not mark the acceptance checkbox of the privacy policy, the sending of the information will not be allowed. It usually has the following formula: "□ I have read and accept the Privacy Policy."
What data do we collect through the newsletter?
On the web, you can subscribe to the Newsletter, if you provide us with an email address, to which it will be sent.
We will only store your email in our database, and we will send you emails periodically, until you unsubscribe, or stop sending emails.
You will always have the option to unsubscribe, in any communication.
For what purposes are we going to process your personal data?
- Manage the requested service.
- Information by electronic means, which deal with your request.
- Commercial information or events by electronic means, as long as there is express authorization.
- Perform analysis and improvements in mailing, to improve our business strategy.
What is the legitimacy for the treatment of your data?
Acceptance and consent of the interested party: In those cases where you subscribe it will be necessary to accept a checkbox and click on the submit button. This will necessarily imply that you have been informed and have expressly granted your consent to the reception of the newsletter.
If you do not mark the checkbox for acceptance of the privacy policy, the sending of the information will not be allowed. It usually has the following formula: "□ I have read and accept the Privacy Policy."
What data do we collect through this service?
We can treat your assigned IP, connection sessions, pages visited, operating system, browser you use, and connection duration.
For what purposes are we going to process your personal data?
- Offer you the requested WiFi service.
What is the legitimacy for the treatment of your data?
Acceptance and consent of the interested party: You must complete the corresponding form to access the service. All our forms have the * symbol in the mandatory data. If you do not provide these fields, or do not mark the acceptance checkbox of the privacy policy, access to the service will not be allowed. It usually has the following formula: "□ I have read and accept the Privacy Policy."
For what purposes are we going to process your personal data?
Maintain our quality standards of customer service and make improvements to our services.
What is the legitimacy for the treatment of your data?
The legal basis is the legitimate interest of the clinic to be able to improve the service and treatment of our patients as well as to increase security and, if applicable, to prove the services offered or requested.
How long will personal data be kept?
Personal data will be kept for 30 days.
For what purposes are we going to process your personal data?
- Preparation of the budget and monitoring thereof by means of communications between both parties.
- Information by electronic means, which deal with your request.
- Commercial information or events by electronic means, as long as there is express authorization.
- Manage the administrative, communications and logistics services performed by the Responsible.
- Billing and declaration of the appropriate taxes.
- Carry out the corresponding transactions.
- Control and collection management.
+ QUALITY SURVEYS
For what purposes are we going to process your personal data?
- Assess the degree of quality in the service provided
- Improve the services offered, by virtue of quality compliance
What is the legitimacy for the treatment of your data?
The legal basis is the express consent of the respondent.
For what purposes are we going to process your personal data?
- Information by electronic means, which deal with your request.
- Commercial information or events by electronic means, as long as there is express authorization.
- Manage the administrative, communications and logistics services performed by the Responsible.
- Carry out the corresponding transactions.
- Billing and declaration of the appropriate taxes.
- Control and payment management.
What is the legitimacy for the treatment of your data?
The legal basis is the acceptance of a contractual relationship, or failing that, your consent by contacting us or offering your products by any means.
For what purposes are we going to process your personal data?
- Answer your questions, requests or requests.
- Manage the requested service, answer your request, or process your request.
- Relationship with you and create a community of followers.
What is the legitimacy for the treatment of your data?
The acceptance of a contractual relationship in the environment of the corresponding social network, and in accordance with its Privacy policies:
Facebook http://www.facebook.com/policy.php?ref=pf
feed https://help.instagram.com/155833707900388
Twitter http://twitter.com/privacy
LinkedIn http://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv
Pinterest https://about.pinterest.com/es/privacy-policy
Vimeo https://vimeo.com/privacy
Google* http://www.google.com/intl/es/policies/privacy/
* (Google+ and YouTube)
How long are we going to keep personal data?
We can only consult or cancel your data in a restricted way by having a specific profile. We will treat you for as long as you allow by following us on the respective social networks, being friends or giving "like", "follow" or similar buttons.
Any rectification of your data or restriction of information or publications must be done through the configuration of your profile or user in the social network itself.
For what purposes are we going to process your personal data?
- Organization of selection processes for hiring employees.
- Cite him for job interviews and evaluate his candidacy.
- If you have given us your consent, we may transfer it to collaborating or related companies, with the sole purpose of helping you find employment.
How long are we going to keep personal data?
Likewise, we inform you that after one year from the receipt of your curriculum vitae, we will proceed to its safe destruction.
What is the legitimacy for the treatment of your data?
The legal basis is your unequivocal consent, by sending us your CV.
For what purposes are we going to process your personal data?
Guarantee the safety of people, property and facilities.
What is the legitimacy for the processing of your data?
The legal basis for the treatment of video surveillance is the fulfillment of a mission of public interest (security of people, goods and facilities).
How long are we going to keep personal data?
The personal data will be kept for a month, except for pertinent communication to the Security Forces and Bodies or to the Courts and Tribunals where appropriate.
To which recipients will your data be communicated?
Your data may be communicated to the Security Forces and Bodies or to Courts and Tribunals, or when there is a legal obligation.
Do we include personal data of third parties?
No, as a general rule we only treat the data provided by the owners. If you provide us with third-party data, you must, in advance, inform and request your consent to said persons, or else you exempt us from any responsibility for the breach of this requirement.
And data of minors?
We do not process data of children under 14 years without the authorization of a father, mother or legal guardian. Therefore, refrain from providing them if you are not that age or, where appropriate, providing data from third parties that are not of that age. CLINICA NUESTRA SEÑORA DEL CARMEN, SA disclaims any liability for breach of this provision.
Will we make communications by electronic means?
They will only be made to manage your request, if it is one of the means of contact you have provided.
If we make commercial communications, they will have been previously and expressly authorized by you.
What security measures do we apply?
You can rest assured: We have adopted an optimal level of protection of the Personal Data that we handle, and we have installed all the technical means and measures at our disposal according to the state of the technology to avoid loss, misuse, alteration, unauthorized access and Theft of Personal Data.
To which recipients will your data be communicated?
Your data will not be transferred to third parties, except legal obligation. Specifically, they will be communicated to the State Agency of the Tax Administration and to banks and financial entities for the collection of the service provided or product purchased, as well as those responsible for the treatment necessary for the execution of the agreement.
In case of purchase or payment, if you choose any application, web, platform, bank card, or any other online service, your data will be transferred to that platform or treated in your environment, always with maximum security.
When we order it, the web development and maintenance company or the hosting company will have access to our website. They will have signed a contract to provide services that requires them to maintain the same level of privacy as we do.
If you are a patient, we may communicate your data to the Autonomous Health Service and collaborating entities of Social Security due to legal obligation. Also to the Insurance Entities that it has contracted. You can consult more information in the "Patients" section.
Any international transfer of data when using American applications, will be attached to the Privacy Shield agreement, which guarantees that American software companies comply with European data protection policies regarding privacy.
What rights do you have?
- To know if we are treating your data or not.
- To access your personal data.
- To request the rectification of your data if they are inaccurate.
- To request the deletion of your data if they are no longer necessary for the purposes for which they were collected or if we withdraw the consent granted.
- To request the limitation of the processing of your data, in some cases, in which case we will only conserve them in accordance with current regulations.
- To carry your data, which will be provided in a structured format, commonly used or mechanical reading. If you prefer, we can send them to the new person who designates us. It is only valid in certain cases.
- To file a complaint with the Spanish Agency for Data Protection or competent control authority, if you believe that we have not treated you correctly.
- To revoke consent for any treatment for which you have consented, at any time.
If you modify any data, we thank you for letting us know to keep them updated.
Do you want a form for the exercise of Rights?
We have forms to exercise your rights, you can request them by email to [email protected] Or, if you prefer, you can use those prepared by the Spanish Agency for Data Protection or third parties. These forms must be electronically signed or accompanied by a photocopy of the DNI.
If someone represents you, you must attach a copy of your ID, or sign the document with your electronic signature.
The forms can be presented in person, sent by letter or by mail at the address of the person responsible at the beginning of this text.
How long does it take to answer the Exercise of Rights?
It depends on the right, but at most one month after your request, two months if the issue is very complex, and we will notify you if we need more time.
Do we treat cookies?
You can consult the cookie policy in the corresponding link from the beginning of our website.
How long will we keep your personal data?
Personal data will be kept as long as it remains linked to us.
Once it is unlinked, the personal data processed in each purpose will be kept for the legally established periods, including the period in which a judge or court may require them according to the statute of limitations for legal actions.
The data processed will be maintained as long as the aforementioned legal deadlines do not expire, if there is a legal maintenance obligation, or if the legal term does not exist, until the interested party requests their suppression or revocation of the consent granted.
We will keep all the information and communications related to the provision of our service, while their guarantees last, to meet possible claims.
