Data protection policy
In accordance with Regulation (EU) 2016/679 of the Parliament and of the Council of April 27, 2016 regarding the protection of natural persons with regard to the processing of their personal data and the free circulation of these, the Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights and Law 41/2002, of November 14, Basic Regulatory of Patient Autonomy and Rights and Obligations in Information and Documentation Clinic, patients, users and the general public are informed of the following aspects:
Responsible for the treatment
The person responsible for processing your data is the company CPL DRA BRASO, SLP, (B06831762) with address at c/ Pedro i Pons, 1 (08195 – Sant Cugat del Vallés – Barcelona).
Personal data processed and origin
On the occasion of your relationship with us, the following categories of personal data may be processed:
- Identification data, contact information of patients or their representatives (including signature, image, health card, social security or mutual insurance number).
- Datos relativos a la salud integrados en la Historia Clínica del paciente.
- Health-related data integrated into the patient’s clinical history.
- Transactional data (payments, income, transfers, debits)
The data may come from the interested party (patient) or, where appropriate, from their legal representative or volunteer and/or health personnel.
For what purpose do we process your personal data?
Personal data may be processed for the following purposes:
1.- Provision of health care: your personal data is processed in order to provide you with the health care you need, as well as to properly manage our contractual relationship, health and administration services. necessary for it.
2.- Compliance with legal obligations: it may be necessary to process personal data in order to comply with the corresponding legal requirements.
3.- Video surveillance: we have a video surveillance system through which real-time images of center users are collected. The treatment of this data is given exclusively for the purpose of security and control of access to the facilities. The data collected will be processed for the specified purposes and in no case in a manner incompatible with said purposes.
Legitimation for the treatment of your data
The treatment is necessary to provide the contracted health services, manage the contractual relationship with the interested party, also for the purposes of preventive medicine, medical diagnosis, provision of health care or treatment, as well as the management of health care systems and services. It is also required for legal or regulatory reasons.
Data retention period
The personal data provided, as well as those derived from the health care provided, will be kept for the appropriate time in each case (according to medical and legal criteria), and for at least ten years, unless the applicable regulations establish a longer retention period.
Communication to third parties of the data
Your personal data will not be communicated to third parties except legal obligation, vital interest or prior consent of the interested party. All the information that is provided to us will be treated confidentially and in strict compliance with the necessary security obligations to prevent access by unauthorized third parties. Rights of the interested party You can exercise your rights of access; rectification of inaccurate data; request deletion, when, among other reasons, the data is no longer necessary for the purposes for which it was collected; in certain circumstances you may also request the limitation of the processing of your data, in which case we will only keep them for the exercise or defense of claims; Finally, and for reasons related to your particular situation, you may also exercise your right to opposition and portability. Likewise, you may revoke, at any time, the consent given for the processing of your data. In addition, we inform you of the possibility of filing a claim with the competent control authority, in accordance with the corresponding procedure according to the specific case.