Privacy Policy

In accordance with Regulation (EU) 2016/679 of the Parliament and of the Council of April 27, 2016 regarding the protection of natural persons with regard to the processing of their personal data and the free circulation of these, the Organic Law 3/2018, of December 5, Protection of Personal Data and guarantee of digital rights and Law 41/2002, of November 14, Basic Regulation of Patient Autonomy and Rights and Obligations in Information and Documentation Clinic, patients, users and the general public are informed of the following aspects:

Introduction

This document constitutes the privacy policy of the Playa de Mojácar Medical Center regarding the processing of personal data of its patients and/or their representatives.

For any question in this matter, the patient can contact the Data Protection Delegate of the Playa de Mojácar Medical Center with postal address at Parque Comercial Mojácar, Local 86, 04638 Mojácar, Almería. Likewise, you can contact the Data Protection Delegate by email sent to the following address info@doctormojacar.com.

Who is responsible for the processing of your data?

A) In case of being patient of the Playa de Mojácar Medical Center, the person responsible for the processing of your data is the company that owns the center that provides you with health care:

Mojacar Beach Medical Center CB

CIF E04074951

B) In the event that we have your data for having subscribed to the newsletter or for having requested information about any of the services and/or products offered through the web pages of the Playa de Mojácar Medical Center, the person responsible for the processing of your data is the community of goods Medical Center Playa de Mojácar CB, with registered office at Paseo del Mediterráneo S/N, Mojacar, 04638, Almería.

What personal data do we process and where do they come from?

During your relationship with us, the following categories of personal data may be processed:

• Identification data, contact data of patients or their representatives (including signature, image, health card, social security or mutual insurance number);
• Data related to health integrated into the patient's Clinical History;
• Personal characteristics, social circumstances;
• Transactional data (payments, deposits, transfers, debits)

The data may come from the interested party (patient) or, where appropriate, from their legal or voluntary representative and/or health personnel.

For what purpose do we process your personal data?

Personal data may be processed by data controllers for the following purposes:

1. Provision of healthcare: Your personal data is processed in order to provide you with the healthcare you require, as well as to adequately manage the healthcare and hospital administration services necessary for it, for example:

• Remind you of appointments and check-ups;
• Issue receipts of your attendance at the health center in favor of relatives or people related to you who request it, within the framework allowed by the regulations;
• Attend any communication with the health center reported by the patient;
• Manage any incident or claim filed by the user and/or patient;
• Carry out surveys in order to find out your opinion about the care received and which will be used solely to improve and develop our care and management services;
• Enable access to the patient portal to allow viewing Electronic Medical Records, appointment requests, access to certain medical tests, etc.
• Sending information and health promotion and prevention activities.

2. Scientific research: Your data may be processed for scientific purposes, complying with the specific regulations in this regard.

3. Anonymization and pseudonymization procedures: Certain procedures may be applied to your data so that it is no longer identifiable or is no longer identifiable, or so that it can no longer be attributed to a data subject without using additional information that appears separately, for scientific or statistical research purposes.

4. Attention to requests for information, complaints, suggestions, claims, exercise of data protection rights, etc.: In these cases, your data will be processed for the purpose of managing and processing the request, by any means, including telephone and/or electronic communications.

5. Compliance with legal obligations: it may be necessary to process personal data in order to comply with the corresponding legal requirements. Specifically, to comply with the legislation on data protection, tax, health, etc.

6. Formalization and execution of the contract: Personal data is processed for the purpose of managing the contractual relationship with the patient.

7. Video surveillance: Certain health centers have a video surveillance system through which real-time images of center users are collected. The processing of this data is given exclusively for the purpose of security and control of access to the facilities.

8. Newsletter sending: if you explicitly consent, your data may be used to send, by electronic means, the newsletters to which you have subscribed.

9. Sending commercial communications by any means in case of additional consent: if you explicitly consent, your data may be transferred in order to inform you by any means for promotional and advertising purposes about the centers, services, products or events related to the health and/or health sector of the Playa de Mojácar Medical Center.

The data collected will be processed for the specified purposes and in no case in a manner incompatible with said purposes. We remind you that processing for scientific or statistical research purposes is not considered incompatible with the initial purpose.

In any case, we process your data to always serve you with the same level of care quality, regardless of the channel you use to communicate with us (health center, center website, mobile applications, whether in person, by telephone, or online).

What is the legitimacy for the processing of your data?

How long will we keep your data?

In general, your data will only be kept for the time strictly necessary for the purpose for which they were collected.

The personal data provided, as well as those derived from the healthcare provided will be kept for the appropriate time for each case (according to medical and legal criteria), and at least fifteen years from the date of discharge of each care process, unless the regional and/or specific regulations establish a minimum period of conservation superior to that indicated, in which case the provisions of the applicable regulations will be followed.

Once the aforementioned minimum period has been exceeded, and the care and contractual relationship having ended, the person in charge will keep your data duly blocked, during the term of the periods corresponding to the legal prescription.

Personal data processed for the purpose of Scientific research will be kept for the appropriate time for each case according to the type of research study in which you participate and taking into account the regulations applicable to them.. Regarding the data processed for scientific research purposes, the Control Authorities of the Autonomous Communities may, upon request of the person responsible for the treatment and in accordance with the procedure established by law, agree to the full maintenance of certain data, taking into account the historical, statistical or scientists in accordance with the legislation that is applicable to each case.

The personal data provided for the purpose of managing any application of information, complaint, suggestion, claim, exercise of data protection rights, etc., will be kept for the time necessary to process the request, and in any case during the legally established time, as well as during the period necessary for the formulation , exercise or defense of claims.

The data processed for compliance with legal obligations They will be kept for the time established in the applicable legislation.

The data collected for the formalization and execution of the contract They will be kept for the duration of the contractual relationship, as well as for the period necessary for the formulation, exercise or defense of claims, at least five years.

The images captured through the systems of video surveillance They will be kept for a maximum period of 30 days, unless the person responsible for the treatment was aware of any fact that could be relevant for a subsequent legal action.

The data processed for the sending of newsletter to which you have subscribed, will be kept until the user revokes their consent, unsubscribes from the newsletter and/or exercises their rights of opposition and/or deletion.

The data processed for the sending of commercial communications They will be kept until the interested party revokes the consent and/or exercises their rights of opposition and/or deletion.

To which recipients will your data be communicated?

In order to guarantee an adequate provision of the service, it is necessary that certain service providers and/or group entities that process data on behalf of the person in charge and as managers of the treatment of your personal data. These entities can be, for example, providers of medical, diagnostic, clinical analysis, auditing, physical security, archiving, storage or digitalization of information, destruction of documentation, legal advisory services, computer services, etc. In some of these cases we inform you that certain medical treatments may entail international data transfers. However, they will always be carried out following the appropriate guarantees established in the data protection regulations (either through standard contractual clauses approved by the European Commission or based on the existence of an adequacy decision by the Commission). If you want more information, or obtain a copy of said guarantees, you can contact the data protection officer.

Your personal data will not be communicated to third parties except legal obligation, vital interest, legitimate interest, or prior consent of the interested party, as well as in the cases and to the recipients that are detailed below:

a) The data of the patients may be visible by other health centers of the Group, based on the legitimate interest of the person responsible for the treatment, with the purpose of facilitating their health care by the group, in such a way that the health centers can have a accurate and up-to-date knowledge of the patients' health data, thus guaranteeing a comprehensive and effective healthcare provision.

b) Given that the patient may have an insurance contract by virtue of which a third party (for example, insurance companies, mutuals, public administrations, even those of a third party in the case of civil liability insurance) is the party obliged to pay of the health services provided by the health center, as long as the patient makes it known, we may communicate their data to said entities, in order to manage, validate, verify and control the payment of the care services provided on the legitimacy of the management of health care systems and services and Law 50/1980 of the Insurance Contract.

In the event that the patient has an insurance contract with an entity located outside the European Economic Area[1], (hereinafter EEA) whose legislation does not offer a level of data protection equivalent to that of the European Union, it might be necessary to carry out an international transfer of data, with the prior explicit consent of the patient after having been informed of the possible risks. We inform you that said transfers only occur with the purpose of collaborating with the patient and facilitating the payment of the care services provided; In short, these transfers only take place, for the most agile possible management and verification with the insurer, of payment for services in cases in which the patient has taken out an insurance policy with an entity located outside the EEA

If you object to the communication of your data, these entities may refuse to pay for the assistance services received, corresponding to you the payment thereof, since said entities do not have the possibility of verifying, verifying, validating or controlling the correct billing for part of the health center of each of its care processes.

c) The data processed for scientific research purposes may entail international data transfers, in these cases, you will be informed of this possibility, as well as the guarantees so that they can be carried out or, failing that, your consent will be requested.

d) We also inform you that your personal data may be communicated to providers of medical supplies, prostheses and implants due to legal obligation, or ambulances based on the vital interest of the patient.

What are your rights when you provide us with your data?

You can exercise your access rights; rectification of inaccurate data; request the deletion, when, among other reasons, the data is no longer necessary for the purposes for which it was collected; In certain circumstances you may also request the limitation of the processing of your data, in which case we will only keep them for the exercise or defense of claims; finally, and for reasons related to your particular situation, you may also exercise the right of opposition and portability. Likewise, you may revoke, at any time, the consent given for the processing of your data.

The exercise of rights as well as the revocation of consent for the processing of your data are free, except in the cases of art. 12.5 of Regulation (EU) 679/2016 which you can exercise in writing to our postal address: Parque Comercial Mojácar, Local 86 04638 Mojácar.

A) In the case of being a patient at our center, you can exercise your rights in person, by postal mail (Parque Comercial Mojácar, Local 86 04638 Mojácar), with the reference "data protection rights", providing a photocopy of your ID or equivalent document and indicating the right you wish to exercise.

B) In the event that the exercise of your rights is related to any of our newsletters or with requests for information about products and/or services offered on the group's web pages, you can exercise your rights by postal mail addressed to Parque Comercial Mojácar , Local 86 04638 Mojácar with the reference "data protection rights-newsletter/information" providing a photocopy of your ID or equivalent document and indicating the right you wish to exercise.

C) In the case of participating in a research study, to exercise your rights, you can contact the Principal Investigator of the research study in which you participate, whose contact details are on the information sheet for the participant that was delivered with you. prior to consenting to participate in the study.

In addition, we inform you of the possibility of filing a claim with the competent control authority, in accordance with the procedure that corresponds to the specific case.