Document revised on 04/24/2023
Basic information on Data Protection |
|
Responsible |
Noelia Pallares Magana Montserrat Monastery |
Contact |
|
DPD |
|
Purpose |
1) Queries and requests for information from patients and third parties: Respond to the request made. 2) Visit reservations: Respond to requests, manage reservations and visit confirmations. See more information in the second information layer below. |
Legitimation |
1) Queries and requests for information from patients and third parties: legitimate interest in serving the interested party in response to the emails received and explicit consent in the web form. 2) Visit reservations: explicit consent in the web form. See more information in the second information layer below. |
Conservation |
The information collected from the interested party will be kept as long as necessary to fulfill the purpose for which the personal data was collected, so that, once the purpose has been fulfilled, the data will be cancelled. Such cancellation will result in the blocking of the data, which will be kept only at the disposal of the AAPP, Judges and Courts, to address possible liabilities arising from the treatment, during the limitation period of these, once the aforementioned period has elapsed, the information will be destroyed. In the second informative layer, the periods of conservation of the information in relation to different matters are detailed. See more information in the second information layer below. |
Origin |
1) Queries and requests for information from patients and third parties: the interested party or his/her legal representative. 2) Visit reservations: the interested party or his/her legal representative. See more information in the second information layer below. |
Recipients |
This data will be processed by SewMom. We share your data with service providers who help or support us (data processors), with whom a mandatory contract has been concluded under the terms of Article 28 of the GDPR. |
International transfers |
We do not make international transfers with your data. |
Rights |
Access, rectification, opposition, deletion, limitation of processing and portability of personal data, as explained in the corresponding section. |
Additional information |
You can consult additional and detailed information on Data Protection in the breakdown of sections presented below (second information layer). |
General information
The purpose of this Privacy Policy is to make known the conditions that govern the collection and processing of your personal data by our entity in order to ensure your fundamental rights, honor and freedoms, all in compliance with current regulations governing the Protection of Personal Data: Regulation 2016/679, of the European Parliament and of the Council, of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the circulation of these data, (hereinafter RGPD); and Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (hereinafter LOPDGDD).
In accordance with these regulations, we need to have your authorization and consent for the collection and processing of your personal data, so below we provide you with all the details of interest to you regarding how we carry out these processes, for what purposes, which other entities may have access to your data and what your rights are.
Controller. Who is responsible for the processing of your data?
The Data Controller is the natural or legal person, public or private, or administrative body, which alone or jointly with others determines the purposes and means of the processing of personal data.
We inform you that Alba Cabezuelo Merino (hereinafter SewMom) is the owner of the website aclinicosteopatia.com, with DNI: 45.882.437-J and address at C/ Santa Maria de Mazzarello, num. 1, 08224 Terrassa. You can contact us by email at info@aclinicosteopatia.com or by phone at 685055596.
The personal data requested, if applicable, will consist only of those strictly necessary to identify and respond to the request made by the owner of the data, hereinafter the interested party. Said information will be treated in a fair, lawful and transparent manner in relation to the interested party. Furthermore, personal data will be collected for specific, explicit and legitimate purposes, and will not be subsequently processed in a manner incompatible with said purposes.
The data collected from each interested party will be adequate, pertinent and not excessive in relation to the corresponding purposes for each case, and will be updated whenever necessary.
The data subject will be informed, prior to the collection of his/her data, of the general details regulated in this policy so that he/she can give express, precise and unequivocal consent for the processing of his/her data, if this is necessary and in accordance with the following aspects.
Purpose. For what purpose do we process your personal data?
The personal information you provide us through emails and/or forms will be kept confidential and protected. Under no circumstances will it be used or disclosed for other purposes, nor will it be given to third parties without your consent, in accordance with the principles of the GDPR 679/2016 and Organic Law 3/2018. In order to comply with the various legal provisions, we have established different levels of security to protect the personal data you provide us, having adopted all the technical measures within our reach to prevent the loss, misuse, alteration, unauthorized access and manipulation of said personal data.
Below we detail the intended uses and purposes:
- Queries and requests for information from patients and third parties: Respond to the request made.
- Visit reservations: Respond to requests, manage reservations and visit confirmations.
In " SewMom”, for the management of online reservations, we use the Archivex platform integrated into our website for the management and scheduling of visit reservations, as well as the processing of payments.
The Archivex appointment booking platform transfers personal information to us after the appointment booking has been successfully completed. In order to complete the booking, the client must register on the booking platform on our website. The information transmitted to us by Archivex is essential to be able to carry out the booking service. This personal information is collected consciously and voluntarily and is used solely for the purpose of the service. For more information, please visit: https://archivexclinical.com/politica-privacidad
When you register for the first time on the booking platform, you will be asked for your first name, surname, ID number and telephone number. Optionally, you will be asked for other non-mandatory data, such as your full address, date of birth and sex.
Legitimation. What is the legitimacy for the processing of your data?
The collection and processing of your data is always legitimised by one or more legal bases, which we detail below:
- Queries and requests for information from patients and third parties: legitimate interest in serving the interested party in response to the emails received and explicit consent in the web form.
- Visit reservations: explicit consent in the web form.
When you use the booking platform for visits for the first time (when you register), you must check the specific box indicating that the Privacy Policy and the Legal Notice have been read and accepted and, consequently, you give your unequivocal and express consent to the processing of your personal data for the purposes indicated. The information you provide us will be entered into a data processing under the responsibility of " SewMom” and will be kept confidential and protected on the Archivex platform according to its appropriate technical and organizational measures required by the GDPR to safeguard the rights and freedoms of individuals, and to ensure compliance with the GDPR. For more information, please visit: https://archivexclinical.com/politica-privacidad
Conservation. How long will we retain your data?
We use your data for the time strictly necessary to fulfill the purposes indicated above. Below we detail the time we retain the data:
For information purposes, the periods for retaining information in relation to different matters are listed below:
DOCUMENT |
TERM |
LEGAL REF. |
Documentation of a labor nature or related to social security |
4 years |
Article 21 of Royal Legislative Decree 5/2000, of August 4, approving the revised text of the Law on Infringements and Sanctions in the Social Order. |
Accounting and tax documentation for commercial purposes |
6 years |
Art. 30 Commercial Code. |
Accounting and tax documentation for tax purposes |
4 years |
Articles 66 to 70 of the General Tax Law. |
Data for sending information about services |
As long as the interested party does not request its deletion |
Not applicable. |
Data of people who have contacted |
As long as you do not request its deletion |
Not applicable. |
Medical records |
15 years |
Personal data will be retained in compliance with the applicable legal limitation periods, in accordance with Law 16/2010 of 3 June, amending Law 21/2000 on the rights to information relating to health, patient autonomy and clinical documentation. |
Origin. How did we obtain your data?
Visit the website of “ SewMom" does not mean that the user is obliged to provide any information about himself.
“ SewMom"expressly prohibits minors under eighteen years of age from providing Personal Data without the prior consent of their parents or guardians.
Below we indicate the origin of the data:
- Queries and requests for information from patients and third parties: the interested party or his/her legal representative. The form on our website will request the name and email address.
- Visit reservations: the interested party or his/her legal representative.
Security measures. What do we do to protect your data?
“ SewMom” adopts the necessary organizational and technical measures to guarantee the security and privacy of your data, to prevent its alteration, loss, treatment or unauthorized access, depending on the state of the technology, the nature of the data stored and the risks to which they are exposed.
Among others, the following measures stand out:
- Ensure the ongoing confidentiality, integrity, availability and resilience of treatment systems and services.
- Restore availability and access to personal data quickly in the event of a physical or technical incident.
- Regularly verify, evaluate and assess the effectiveness of the technical and organizational measures implemented to ensure the security of the processing.
- Pseudonymize and encrypt personal data, if it is sensitive data.
Recipients. To which recipients will your data be communicated?
These data will be processed by “ SewMomWe share your data with service providers who assist or support us (data processors), with whom a mandatory contract has been concluded under the terms of Article 28 of the GDPR.
We do not make international transfers of your personal data.
Rights. What are your rights when you provide us with your data?
Current data protection regulations protect you with a series of rights in relation to the use we give to your personal data. Each and every one of your rights are personal and non-transferable, meaning that they can only be exercised by the data owner, after verifying their identity.
Below we indicate your rights:
- Request access to your personal data.
- Request rectification of your data.
- Request the deletion or elimination of your data (right to be “forgotten”).
- Limit or oppose our use of your data.
- Right to data portability for telecommunications or internet services.
- Right to withdraw your consent at any time.
- Right to file a data protection complaint with the Control Authority: Spanish Data Protection Agency.
How can you exercise your rights?
To exercise your rights of access, rectification, deletion, limitation or opposition, portability and withdrawal of your consent, you can do so in the following manner:
In person or by email at:
-
Noelia Pallares Magana
-
39371481N
In addition to the rights that assist you, if you believe that your data is not being collected or processed in accordance with current Data Protection regulations, you may file a claim with the Control Authority, whose contact details are provided below:
Spanish Data Protection Agency
- C/ Jorge Juan, 6. 28001, Madrid.
- Email: info@agpd.es
- Telephone: 912663517
- Web: https://www.agpd.es
Consent and acceptance
Acceptance of this document indicates that you understand and accept all the clauses of our privacy policy and therefore authorize the collection and processing of your personal data under these terms. The user who provides personal data via email to “SewMom”, you are voluntarily providing personal data. In the contact forms, this acceptance is made by activating the checkbox indicating that the information reflected in the Privacy Policy and the Legal Notice has been read and accepted. On the visit booking platform, this acceptance is made during registration by activating the checkbox indicating that the information reflected in the Privacy Policy and the Legal Notice has been read and accepted.