Data Protection
ID:
- Owner: SEBMAR INVERSIONES TENERIFE, SL (hereinafter, “ CLINICA DE LA CUESTA ”).
- NIF: B-38657821.
- Registered office: Calle Rodríguez de La Oliva, Edificio Lola Yanes, Local Bajo, 38320, La Cuesta – San Cristóbal de La Laguna, Santa Cruz de Tenerife, Spain
- Registered in the Mercantile Registry: Mercantile Registry of Tenerife, Volume 2,261, Folio 104, Sheet number TF-27,671.
- Sanitary license:
- Data Protection Delegate (DPO): The User can contact the DPO Julio Alemán Ramírez, by writing to the address of CLINICA DE LA CUESTA to the attention of the “Data Protection Delegate” or through the email address DPD @CDC.es .
1.- PRIVACY STATEMENT
CLINICA DE LA CUESTA is aware of the importance for you of the use we make of your personal information and the way in which we share it. This Privacy Policy is intended to help you understand what data we collect, for what purposes we process it, and our efforts to protect it. We appreciate the trust you place in us so that we treat you with the appropriate guarantees and in accordance with current regulations. The personal data that you provide through the web page located at the URL https://cdc.es (hereinafter, the “Website”) will be treated as described in detail below.2.- OBLIGATION TO PROVIDE THE DATA
The data requested in the forms of the Website are generally mandatory (unless otherwise specified in the required field) to comply with the established purposes. Therefore, if they are not provided or are not provided correctly, they will not be able to be attended to, without prejudice to the fact that you can freely view the content of the Website.3.- WHAT USER DATA WILL CLINICA DE LA CUESTA PROCESS?
CLINICA DE LA CUESTA will process the following categories of User data:- Identification data: name, surname.
- Contact details: postal address, email address, telephone.
- Personal characteristics data: date and place of birth, sex, age, nationality, marital status.
- Employment data: profession, job positions, academic history, in the case of CV submission through the corresponding selection platform.
- Browsing data, location, IP address, MAC address.
- Other data: data provided by the interested parties themselves in the open fields of the forms provided on the Website or in the attached documents.
In the event that the User provides data from third parties, he declares that he has their consent and undertakes to transfer the information contained in the Privacy Policy, exempting CLINICA DE LA CUESTA from any responsibility in this regard. However, CLINICA DE LA CUESTA may carry out periodic verifications to verify this fact, adopting the corresponding due diligence measures, in accordance with data protection regulations.
• PEOPLE
For what purposes will we process your personal data?
We inform you that your data will be processed for the purpose of managing your treatment, appointments, reservations, and guaranteeing payment of the expenses derived from this stay.
What is the legitimacy for the processing of your data?
The legal basis is your consent.
• WEB OR EMAIL CONTACTS
What data do we collect through the Web?
We may treat your IP address, which operating system or browser you use, and even the duration of your visit, anonymously.
If you provide us with data in the contact form, you will be identified so that we can contact you, if necessary.
– Respond to your inquiries, requests or requests.
– Manage the requested service, respond to your request or process your request.
– Information by electronic means, which deal with your request.
– Commercial information or events by electronic means, provided there is express authorization.
– Carry out analysis and improvements on the Web, our products and services. Improve our commercial strategy.
Acceptance and consent of the interested party: in those cases in which to make a request it is necessary to complete a form and “click” on the send button, the completion of the same will necessarily imply that you have been informed and have given your consent. express to the content of the clause attached to the form or the acceptance of the privacy policy.
All our forms have the symbol * in the mandatory data. If you do not provide these fields, or do not check the privacy policy acceptance checkbox, sending information will not be allowed. It usually has the following formula: «
□ I am over 14 years old and I have read and accept the Privacy Policy”.
• PATIENTS.
What data do we collect and for what purpose?
– Preparation of the budget and monitoring of it through communications between both parties.
– Information by electronic means, which deal with your request.
– Commercial information or events by electronic means, provided there is express authorization.
– Manage the administrative, communications and logistics services carried out by the Responsible.
– Invoicing and declaration of the appropriate taxes…
– Carry out the corresponding transactions.
– Control and recovery management.
• QUALITY SURVEYS
What data do we use from surveys?
– Evaluate the degree of quality in the service provided
– Improve the services offered, by virtue of ISO compliance
The legal basis is the express consent of the defendant.
• SUPPLIERS
What data do we use as a provider?
– Information by electronic means, which is related to your request.
– Commercial information or events by electronic means, provided there is express authorization.
– Manage the administrative, communications and logistics services carried out by the Responsible.
– Billing
– Carry out the corresponding transactions.
– Invoicing and declaration of the appropriate taxes.
– Control and recovery management.
The legal basis is the acceptance of a contractual relationship, or the breach of your consent to contact us or offer your products by any means.
• SOCIAL NETWORKS CONTACTS
What data do we use from social networks?
– Answer your questions or requests.
– Manage the requested service, respond or process your request.
– Connect with you and create a community of followers.
Acceptance of a contractual relationship in the corresponding social network environment, and in accordance with its privacy policies:
How long will we keep personal data?
We can only consult or cancel your data in a restricted way since we have a specific profile. We will treat them as long as you allow us to follow you, be friends or give them “like”, “follow” or similar buttons.
Any rectification of your data or restriction of information or publications must be done through the configuration of your profile or user in the social network itself.
- FACEBOOK: https://www.facebook.com/clinicadelacuesta/ Active network with the possibility of contact by followers via private message.
- INSTAGRAM: https://www.instagram.com/cdc_clinicadelacuesta/ . Active network with the possibility of contact by followers via private message.
• JOB SEEKERS
What data do we use from your CV?
– Organization of selection processes for hiring employees.
– Appoint him for job interviews and evaluate his candidacy.
– If you have given us your consent, we may transfer it to collaborating or related companies, with the sole purpose of helping you find a job.
– If you check the acceptance checkbox of the privacy policy, you give us your consent to transfer your job application to the entities that make up the group of companies in order to include you in their recruitment processes.
We also inform you that one year after receiving your curriculum vitae, we will proceed to its secure destruction.
The legal basis is your unequivocal consent, when you send us your CV.
4.- FOR WHAT PURPOSE WILL CLINICA DE LA CUESTA PROCESS THE PERSONAL DATA OF THE USER AND FOR HOW LONG?
The personal data provided through the Website will be processed by CLINICA DE LA CUESTA in accordance with the following purposes:- Manage contact requests and user information through the channels provided for this on the CLINICA DE LA CUESTA websites.
- Manage personnel selection processes in CLINICA DE LA CUESTA job offers through the selection platform
- Manage the sending of commercial communications from CLINICA DE LA CUESTA, in the event that it shows its agreement to send commercial communications and unless the user requests their withdrawal from CLINICA DE LA CUESTA, opposing or revoking their consent.
5.- WHAT IS THE LEGITIMATION OF THE PROCESSING OF YOUR DATA?
Most of the information that CLINICA DE LA CUESTA collects about you is based on the consent that is requested and that you can withdraw at any time. However, if you withdraw your consent, this will not affect the legality of the treatments carried out previously. The consents obtained for the aforementioned purposes are independent, so the User may revoke any of them, jointly or individually, without affecting the others. To revoke said consent, the User may contact CLINICA DE LA CUESTA through the address of CLINICA DE LA CUESTA to the attention of the “Data Protection Officer” or through the email address DPD@CDC.es .6.- TO WHICH RECIPIENTS WILL THE USER DATA BE COMMUNICATED?
Your data will not be transferred to third parties, except for legal obligations. Specifically, they will be communicated to the State Tax Administration Agency and to the banks and financial institutions for the collection of the service provided or product purchased. They will also be communicated to those responsible for the treatment necessary for the execution of the agreement.
In case of purchase or payment, if you choose any application, website, platform, bank card or any other online service, your data will be transferred to that platform or processed in its environment, always with maximum security.
When we request it, the web development and maintenance company, or the hosting company, will have access to our website. They will have signed a contract for the provision of services that obliges them to maintain the same level of privacy as us.
Any international transfer of data using US applications will adhere to the Privacy Shield agreement, which ensures that US software companies comply with European data protection policies on privacy.
The User’s data may be communicated to:
- Public Administrations in the cases provided by law.
- Other companies belonging to SEBMAR INVERSIONES TENERIFE SL and its sector of activity in order to be processed by them to send commercial communications, including by electronic means, about products and services that may be of interest to you, provided that the user has given their consent. through the corresponding form.
- Other collaborating companies of SEBMAR INVERSIONES TENERIFE SL that provide any type of service necessary for the execution of the contracted treatment.
- Banks / Savings Banks.
- State Security Forces and Bodies.
- Judges and Courts.
- Twitter International Company, based in Dublin, Ireland; Facebook, Inc.; Instagram, Inc.; Google, LLC. (Youtube).
- International data transfers are made to entities established in countries outside the European Union to:
- Facebook, Inc.; Instagram, Inc., adhered to the EU Privacy Shield. US/European Data Transfers https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active .
- Google, LLC (YouTube), adhered to the EU Privacy Shield. US/European Data Transfers https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active .
7.- RESPONSIBILITY OF THE USER
The user:- Guarantees that the information provided to CLINICA DE LA CUESTA is true, exact, complete and up-to-date. For these purposes, the User is responsible for the veracity of all the data that he communicates and will keep the information provided properly updated, in such a way that it responds to his real situation.
- You guarantee that you have informed the third parties of whom you provide your data, if so, of the aspects contained in this document. Likewise, it guarantees that you have obtained your authorization to provide your data to CLINICA DE LA CUESTA for the indicated purposes.
- You will be responsible for any false or inaccurate information you provide through the Website and for any direct or indirect damages that this may cause to CLINICA DE LA CUESTA or to third parties.
8.- COMMERCIAL AND PROMOTIONAL COMMUNICATIONS
One of the purposes for which CLINICA DE LA CUESTA processes the personal data provided by Users is to send them electronic communications with information regarding products, services, promotions, offers, events or news relevant to Users. In the event that the User wishes to stop receiving commercial or promotional communications from CLINICA DE LA CUESTA, they can request the cancellation of the service by sending an email to the following email address: DPD@CDC.ES9.- EXERCISE OF RIGHTS
– What rights do you have?– To know if we are treating your data or not.
– To access your personal data.
– Request the rectification of your data if they are inaccurate.
– To request the deletion of your data if it is no longer necessary for the purposes for which it was collected or if you withdraw your consent.
– To request the limitation of the processing of your data, in some cases, in which case we will only keep them in accordance with current legislation.
– To carry your data, which will be provided in a structured format, common use or mechanical reading. If you prefer, we can send them to the new person in charge that you designate. It is only valid in certain cases.
– To file a complaint with the Spanish Agency for Data Protection or the competent control authority, if you believe that we have not treated you correctly.
– Revoke consent for any processing for which you have consented, at any time.
If you modify any data, inform us to keep it updated.
Do you want a form to exercise your rights?
– We have forms for the exercise of your rights, request us by email or, if you prefer, you can use those prepared by the Spanish Agency for Data Protection or by third parties.
– These forms must be signed electronically or accompanied by a photocopy of identification.
– If someone represents you, you must attach a copy of your identification or have them sign you with their electronic signature.
– The forms can be submitted in person, sent by letter or by post to the address of the person responsible at the beginning of this text.
The User can contact the DPO by writing to the address of CLINICA DE LA CUESTA to the attention of the “Data Protection Officer” or through the email address DPD@CDC.ES, attaching a photocopy of their identity document, in any time and free of charge, to:
- Revoke the consents granted.
- Obtain confirmation as to whether CLINICA DE LA CUESTA is processing personal data concerning the User or not.
- Access your personal data.
- Rectify inaccurate or incomplete data.
- Request the deletion of your data when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
- Request the portability of your data, as well as the limitation of treatment, in the cases provided for in the data protection regulations.
- File a claim regarding the protection of your personal data before the Spanish Agency for Data Protection at the address Calle de Jorge Juan, 6, 28001 Madrid.
How long does it take to respond to the exercise of rights?
It depends on the law, but a maximum of one month from your request and two months if the issue is very complex and we notify you that we need more time.
10.- SECURITY MEASURES.
CLINICA DE LA CUESTA will treat the User’s data at all times in an absolutely confidential manner and keeping the mandatory duty of secrecy with respect to them, in accordance with the provisions of the applicable regulations, adopting the necessary technical and organizational measures for this purpose. that guarantee the security of your data and prevent its alteration, loss, treatment or unauthorized access, taking into account the state of technology, the nature of the data stored and the risks to which they are exposed.11.- TEMPORARY LIMITATION OF THE CONSERVATION OF PERSONAL DATA
How long will we keep your personal data?– Personal data will be kept as long as you remain linked to us.
– Once you opt out, the personal data processed for each purpose will be kept for the legally established periods, including the period in which a judge or court can demand it according to the statute of limitations for legal actions.
– The data processed will be kept as long as the legal periods mentioned above do not expire, if there is a legal obligation to keep them, or if there is no such legal period, until the interested party requests its deletion or revokes the consent granted.
– We will keep all the information and communications related to your purchase or the provision of our service, while the guarantees of the products or services last, to attend to possible claims.
– For each treatment or type of data, we provide you with a specific period, which you can consult in the following table:
DOCUMENTATION OF A LABOR NATURE OR SOCIAL SECURITY RELATED| TERM | DOCUMENT | LEGAL REFERENCE |
| 4 YEARS | Documentation or the records or computer supports in which the corresponding data have been transmitted that prove compliance with the obligations in terms of affiliation, registrations, cancellations or variations that, where appropriate, occur in relation to said matters, as well as the documents contribution and supporting receipts for payment of wages and delegated payment of benefits. Add all the contractual documentation: RD 1424/2002, of December 27, which regulates the communication of the content of the contracts and their basic copies, establishes nothing in this regard, so that analogically we will apply the previous precept. | Article 21 of Royal Legislative Decree 5/2000, of August 4, which approves the consolidated text of the Law on infractions and Sanctions in the Social Order |
| TERM | DOCUMENT | LEGAL REFERENCE |
| 5 YEARS MINIMUM | Health centers have the obligation to keep the clinical documentation in conditions that guarantee its correct maintenance and safety, although not necessarily in the original support, for the proper assistance to the patient during the appropriate time for each case and, at least, five years counted. from the discharge date of each care process. | Article 17.1 of Law 41/2002, of November 14, on Patient Autonomy and Rights and Obligations regarding clinical information and documentation |
| OTHER ASSUMPTIONS | Clinical documentation will also be kept for legal purposes in accordance with current legislation. It will also be kept when there are epidemiological, research or organizational and operational reasons for the National Health System. Their treatment will be done in such a way that the identification of the affected persons is avoided as much as possible. | Article 17.2 of Law 41/2002, of November 14, on Patient Autonomy and Rights and Obligations regarding clinical information and documentation |
| 5 YEARS | 1. The preservation of clinical records is governed by the provisions of the basic legislation regulating patient autonomy and rights and obligations in terms of clinical information and documentation, with health centers having the obligation to preserve clinical records in conditions that guarantee their safety and correct conservation, regardless of the paper, audiovisual, computer or other type of support in which they appear, although not necessarily in the original support, for the proper assistance to the patient during the appropriate time for each case and, as At least five years counted from the discharge date of each care process. 2.A) The following documents contained in the medical record may be destroyed after five years from the discharge date of each care episode: Clinical-statistical sheet. Newborn sheet, in the mother’s medical record. Request sheet for interconsultation and complementary tests, as long as it does not contain the result of the complementary test. Control sheet and specific nursing care. Charts of constants. Emergency sheet. X-rays and other iconographic documents, keeping the reports. 2.B) Likewise, after the age of five, the anamnesis and physical examination sheets and the evolution sheets of the care episodes for which there is a discharge report may be destroyed. | Article 29.2 of Decree 178/2005, of July 26, CA Canarias Regulation, which regulates the Clinical History in Hospital Centers and Establishments and Establishes the Content, Conservation and Purge of its Documents |
| 20 YEARS | After twenty years have elapsed since the last care activity recorded in the clinical history, the following documents may be destroyed: Admission Authorization Sheet. Informed consent sheet. surgical sheet. Medical order sheet. Medication control sheet. Delivery sheet. Sheet of the newborn, from their own clinical history. Anesthesia sheet. Transfusion sheet. Complementary exploration reports. Voluntary discharge sheet. Pathology Reports. Necropsy reports. Other documents that are not cited in this article. | Article 29.3 of Decree 178/2005, dated July 26, CA Canarias Regulation, which regulates the Clinical History in Hospital Centers and Establishments and Establishes the Content, Conservation and Purge of its Documents |
| Always | The following will be kept permanently: The clinical discharge reports. The anamnesis and physical examination sheets and the evolution sheets of the care episodes for which there is no discharge report. | Article 29.4 of Decree 178/2005, of July 26, CA Canarias Regulation, which regulates the Clinical History in Hospital Centers and Establishments and Establishes the Content, Conservation and Purge of its Documents. |
| TERM | DOCUMENT | LEGAL REFERENCE |
| 1 YEAR | User identifier, IP address (origin/destination), telephone number, IMSl and IMEl (origin/destination), date and time of communication (start/end), identification of the type of service or communication used (voice, data, SMS or MMS.). | Article 5 of Law 25/2007, of October 18, on the preservation of data related to electronic communications and public Communications networks. |
| TERM | DOCUMENT | LEGAL REFERENCE |
| 1 MONTH | The images/sounds captured by the video surveillance systems will be canceled within a maximum period of one month from their capture. | Instruction 1/2006, of November 8, of the Spanish Data Protection Agency, on the processing of personal data for surveillance purposes through camera or video camera systems. |
| 1 MONTH | The recordings will be destroyed within a maximum period of one month from their capture, unless they are related to serious or very serious criminal or administrative offenses in matters of public security, with an ongoing police investigation or with an open judicial or administrative procedure. | Article 8 of Organic Law 4/1997, of August 4, on the use of video cameras by security forces and bodies in public places. See also articles 18 and 19 of RD 596/1999, of April 16. |
| 10 DAYS | Placement in common school areas for the protection of minors «The implementation of very short retention periods for the conservation of saved images would also contribute to the consideration that we are carrying out. Instruction 1/2006 establishes in its article 6 a period of one month from its recruitment. But this period could even be reduced, taking into account that if an event had occurred that affected minors, it should be appreciated in a much shorter period of time. Thus, we understand that a period of ten days could be established, which on the one hand is less than a month, but long enough for the educational center to have been able to realize the existence of a concrete and specific damage to the minor that could have legal consequences. , thus coinciding with the term for the exercise of the right to cancel the data, and reconciled with the protection of personal data. After said period of ten days, only images that reveal some type of transcendent fact in relation to the best interest of the minor could be kept. | AEPD Legal Report 475/2014 |
| TERM | DOCUMENT | LEGAL REFERENCE |
| 1 MONTH | The data included in automated files created to control access to buildings must be canceled 1 month after it was obtained. | Fifth standard of Instruction 1/1996, of March 1, of the Data Protection Agency, on automated files established for the purpose of controlling access to buildings. |
| 10 YEARS | 1. Obliged subjects shall keep the documentation in which compliance with the obligations established in this Law is formalized for a minimum period of ten years. In particular, obligated subjects will keep for use in any investigation or analysis, in matters of possible cases of money laundering or financing of terrorism, by the Executive Service of the Commission or any other legally competent authority. 1. a) Copy of the required documents in application of the due diligence measures, during a minimum period of ten years from the termination of the business relationship or the execution of the operation. 2.b) Original or copy with probative force of the documents or records that adequately prove the operations, those involved in them and the business relationships, for a minimum period of ten years from the execution of the operation or the termination of the business relationship. 3. The obligated subjects, with the exceptions that are determined by regulation, will store the copies of the identification documents referred to in article 3.2 in optical, magnetic or electronic media that guarantee their integrity, the correct reading of the data, the impossibility of handling and its adequate conservation and location. In any case, the filing system of obligated subjects must ensure the adequate management and availability of documentation, both for internal control purposes, and for timely and proper attention to the requirements of the authorities. | Article 25 of Law 10/2010, of April 28, on the prevention of money laundering and terrorist financing |
| 5 YEARS | Being the actions that can be exercised to demand professional responsibilities from the lawyer of a personal nature and not having a special one indicated, the limitation period for them is, from October 7, 2015, five years, so during that At least a period of time (except for interruption of its computation) the finalized files must be kept. | Article 1964.2 Civil Code, in wording given by Law 42/2015, of October 5, reform of the LEC. |