In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 (GDPR), Spanish Organic Act 3/2018, of 5 December, on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), and the rest of applicable data protection legislation, ALEJANDRA SÁNCHEZ DÍAZ (owner of Clínica Microdental) hereby informs you of the following:
Who is the controller of your data?
- Controller: ALEJANDRA SÁNCHEZ DÍAZ
- Tax ID (NIF): 75236933T
- Registered address: Plaza de la Constitución, 12, 1º, 04600 Huércal-Overa, Almería (Spain)
- Email: clinicamicrodental@gmail.com
- Telephone: 950 13 51 85
- Data Protection Officer (DPO): clinicamicrodental@gmail.com
Further identifying information is set out in section 1 of the Legal Notice.
For what purposes do we process your personal data?
ALEJANDRA SÁNCHEZ DÍAZ will process the information provided by the user through the website for the following purposes:
- Managing the services requested through the contact, appointment and treatment information forms.
- Contacting the user to respond to enquiries or to confirm the appointment requested.
- Administrative management arising from the service provision.
No automated decisions or profiling will be carried out based on the data provided.
How long do we keep your data?
Personal data will be kept until the user requests its deletion and, in any case, for the years necessary to comply with the legal obligations established by the applicable legislation or to deal with any liabilities that may arise from the processing. In particular:
- Patient data: in accordance with the applicable healthcare legislation.
- General contact data: until voluntary deletion by the user or mandatory deletion by law.
- Consent records: for the duration of the relationship and the legal periods applicable for evidentiary purposes.
What is the legal basis for processing your data?
The legal basis for processing is the data subject’s consent, granted by expressly accepting the privacy policy when submitting the form (Art. 6.1.a GDPR), as well as the performance of pre-contractual measures and, where applicable, the performance of the services contract (Art. 6.1.b GDPR).
In the case of health data, the processing is based on the grounds set out in Art. 9.2 GDPR (medical diagnosis, provision of healthcare and compliance with legal obligations in the healthcare sector).
To whom will your data be communicated?
As a general rule, data will not be transferred to third parties, except where required by law. The following data processors, with whom contracts compliant with Art. 28 GDPR are in place, may access your data:
- Web hosting and corporate email provider.
- Professional healthcare service providers (where necessary for the provision of care).
- Data protection advisory service provider (external DPO, where applicable).
No international data transfers outside the European Economic Area are carried out, unless the user expressly authorises it or it is necessary due to a legal obligation.
What are your rights?
Any individual is entitled to obtain confirmation as to whether ALEJANDRA SÁNCHEZ DÍAZ is processing personal data concerning them, and to exercise the following rights:
- Access to your personal data.
- Rectification of inaccurate or incomplete data.
- Erasure of data when, among other reasons, it is no longer necessary for the purposes for which it was collected.
- Restriction of processing, in which case the data will only be kept for the exercise or defence of claims.
- Objection to processing, on grounds relating to your particular situation.
- Portability of the data in a structured, commonly used format.
- Withdraw consent at any time, without affecting the lawfulness of processing prior to such withdrawal.
To exercise these rights you may write, providing a copy of an official identity document, to:
- Email: clinicamicrodental@gmail.com
- Postal address: Plaza de la Constitución, 12, 1º, 04600 Huércal-Overa, Almería (Spain)
You also have the right to lodge a complaint with the competent Supervisory Authority (Spanish Data Protection Agency: www.aepd.es) if you consider that your rights have not been properly addressed.
What security measures do we implement to protect your data?
ALEJANDRA SÁNCHEZ DÍAZ will process user data at all times on a strictly confidential basis, observing the duty of professional secrecy, in accordance with applicable legislation. Necessary technical and organisational measures have been adopted to ensure the security of the data and prevent its alteration, loss, processing or unauthorised access, taking into account the state of technology, the nature of the data stored and the risks to which it is exposed.
How did we obtain your data?
The personal data processed has been obtained directly from the data subject, via the website forms, by email, telephone, or in person at our clinics in Huércal-Overa or Mojácar.