In compliance with Regulation (EU) 2016/679 of the European
Parliament and of the Council, of 27 April 2016 (GDPR), Spanish Organic
Act 3/2018, of 5 December, on Personal Data Protection and Guarantee of
Digital Rights (LOPDGDD), and the rest of applicable data protection
legislation, ALEJANDRA SÁNCHEZ DÍAZ (owner of Clínica
Microdental) hereby informs you of the following:
Who is the controller of
your data?
- Controller: ALEJANDRA SÁNCHEZ DÍAZ
- Tax ID (NIF): 75236933T
- Registered address: Plaza de la Constitución, 12,
1º, 04600 Huércal-Overa, Almería (Spain) - Email: clinicamicrodental@gmail.com
- Telephone: 950 13 51 85
- Data Protection Officer (DPO):
clinicamicrodental@gmail.com
Further identifying information is set out in section 1 of the Legal Notice.
For what
purposes do we process your personal data?
ALEJANDRA SÁNCHEZ DÍAZ will process the information provided by the
user through the website for the following purposes:
- Managing the services requested through the contact, appointment and
treatment information forms. - Contacting the user to respond to enquiries or to confirm the
appointment requested. - Administrative management arising from the service provision.
No automated decisions or profiling will be carried out based on the
data provided.
How long do we keep your
data?
Personal data will be kept until the user requests its deletion and,
in any case, for the years necessary to comply with the legal
obligations established by the applicable legislation or to deal with
any liabilities that may arise from the processing. In particular:
- Patient data: in accordance with the applicable healthcare
legislation. - General contact data: until voluntary deletion by the user or
mandatory deletion by law. - Consent records: for the duration of the relationship and the legal
periods applicable for evidentiary purposes.
What is the
legal basis for processing your data?
The legal basis for processing is the data subject’s consent, granted
by expressly accepting the privacy policy when submitting the form (Art.
6.1.a GDPR), as well as the performance of pre-contractual measures and,
where applicable, the performance of the services contract (Art. 6.1.b
GDPR).
In the case of health data, the processing is based on the grounds
set out in Art. 9.2 GDPR (medical diagnosis, provision of healthcare and
compliance with legal obligations in the healthcare sector).
To whom will your data
be communicated?
As a general rule, data will not be transferred to third parties,
except where required by law. The following data processors, with whom
contracts compliant with Art. 28 GDPR are in place, may access your
data:
- Web hosting and corporate email provider.
- Professional healthcare service providers (where necessary for the
provision of care). - Data protection advisory service provider (external DPO, where
applicable).
No international data transfers outside the European Economic Area
are carried out, unless the user expressly authorises it or it is
necessary due to a legal obligation.
What are your rights?
Any individual is entitled to obtain confirmation as to whether
ALEJANDRA SÁNCHEZ DÍAZ is processing personal data concerning them, and
to exercise the following rights:
- Access to your personal data.
- Rectification of inaccurate or incomplete
data. - Erasure of data when, among other reasons, it is no
longer necessary for the purposes for which it was collected. - Restriction of processing, in which case the data
will only be kept for the exercise or defence of claims. - Objection to processing, on grounds relating to
your particular situation. - Portability of the data in a structured, commonly
used format. - Withdraw consent at any time, without affecting the
lawfulness of processing prior to such withdrawal.
To exercise these rights you may write, providing a copy of an
official identity document, to:
- Email: clinicamicrodental@gmail.com
- Postal address: Plaza de la Constitución, 12, 1º,
04600 Huércal-Overa, Almería (Spain)
You also have the right to lodge a complaint with the competent
Supervisory Authority (Spanish Data Protection Agency: www.aepd.es) if you consider that your
rights have not been properly addressed.
What
security measures do we implement to protect your data?
ALEJANDRA SÁNCHEZ DÍAZ will process user data at all times on a
strictly confidential basis, observing the duty of professional secrecy,
in accordance with applicable legislation. Necessary technical and
organisational measures have been adopted to ensure the security of the
data and prevent its alteration, loss, processing or unauthorised
access, taking into account the state of technology, the nature of the
data stored and the risks to which it is exposed.
How did we obtain your data?
The personal data processed has been obtained directly from the data
subject, via the website forms, by email, telephone, or in person at our
clinics in Huércal-Overa or Mojácar.