Data protection policy
1. DETAILS OF THE DATA CONTROLLER (RESPONSABLE DEL TRATAMIENTO)
Company name (Razón Social): MIRIAM MARTÍ HERRERA (hereinafter, the “Company” or the “Controller”).
Tax ID (NIF): 43519199W
Address: C/ La gacela 31 2º SEGUNDA – 08042 – BARCELONA – BARCELONA
Telephone: 684273470
Email for data protection matters: info@mitrasalud.com
1.1. Applicable legislation
Our Privacy Policy has been designed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – RGPD/GDPR), and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (Ley Orgánica 3/2018, de Protección de Datos Personales y garantía de los derechos digitales – LOPDGDD).
By providing us with your data, you declare that you have read and understood this Privacy Policy, giving your unequivocal and express consent to the processing of your personal data in accordance with the purposes and terms set out herein.
The Company may modify this Privacy Policy to adapt it to new legislation, case law or interpretations by the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD). These privacy terms may be supplemented by the Legal Notice, the Cookie Policy and the General Terms and Conditions which, where applicable, are set out for certain products or services, if such access involves any particular feature with regard to the protection of personal data.
1.2. Data Protection Officer
No Data Protection Officer has been appointed.
2. PURPOSE OF THE PROCESSING OF PERSONAL DATA
We process your personal data for the following purposes, depending on the processing activity:
2.1. Processing of Web Contacts data
– To provide you with information about the products and services offered by our company and detailed on this website.
– To contract our services through acceptance of the corresponding quote / order and/or the signing of a commercial contract.
– To send you, by email and/or post, news and updates about our organisation, as well as updates to our catalogue of products and services.
2.1.1. Retention period for your data in the Web Contacts processing
We will keep your personal data from the moment you give us your consent until you withdraw it or request restriction of processing. In such cases, we will keep your data blocked for the legally required periods.
2.2. Processing of Patients data
The purpose of the processing will be the management of patients' data and their clinical records in relation to the PHYSIOTHERAPY AND COMPLEMENTARY THERAPY SERVICES, as well as the administrative tasks arising from the provision of care.
2.2.1. Retention period for your data in the Patients processing
The processing of data is justified by and based on the purposes described above, PHYSIOTHERAPY AND COMPLEMENTARY THERAPY SERVICES; therefore, the duration and termination of the processing operations are subject to the existence and continuation of those purposes.
3. LEGAL BASIS AND DATA COLLECTED
The legal basis for processing your data is the express consent given by means of a clear affirmative act (filling in the corresponding form and ticking the box accepting this policy) at the time you provide us with your personal data.
3.1. Consent to process your data
By filling in the forms, ticking the box “I accept the Privacy Policy” and clicking to send the data, or by sending emails to the Company through the accounts provided for that purpose, the User states that they have read and expressly accepted this privacy policy, and gives their unequivocal and express consent to the processing of their personal data in accordance with the purposes indicated.
3.2. Categories of data
The data collected falls into the following categories:
Identification data, such as: First name and surname(s), Telephone, Postal address, Company, Email, as well as the IP address from which you access the data collection form.
Sensitive data in the Patients processing, such as: Physical characteristics, Lifestyle, Age, Hobbies and Health data.
4. SECURITY MEASURES
As part of our commitment to guaranteeing the security and confidentiality of your personal data, we inform you that the technical and organisational measures necessary to guarantee the security of personal data and prevent its alteration, loss, processing or unauthorised access have been adopted, taking into account the state of the art, the nature of the data stored and the risks to which it is exposed, in accordance with Art. 32 of Regulation (EU) 2016/679.
5. DISCLOSURE OF DATA
No disclosure of data to third parties or international transfers of your data are planned, except for those authorised by tax, commercial and telecommunications legislation and in cases where a judicial authority requires us to do so.
6. USER RIGHTS
Any data subject has the right to obtain confirmation as to whether or not we are processing personal data concerning them. Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where applicable, to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only keep it for the exercise or defence of claims. For reasons relating to their particular situation, data subjects may object to the processing of their data. The Controller of the file will stop processing the data, except for compelling legitimate grounds or the exercise or defence of possible claims.
In accordance with current legislation, you have the following rights: the right to request access to your personal data, the right to request its rectification or erasure, the right to request the restriction of its processing, the right to object to processing, the right to data portability and, likewise, the right to withdraw the consent given. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD).
6.1. How can I exercise my rights?
To exercise your rights, you must contact the controller and request the corresponding form for exercising the right chosen. Optionally, you may contact the competent Supervisory Authority to obtain additional information about your rights. The contact details for exercising your rights are the telephone number 684273470 and the email address: info@mitrasalud.com. Remember to enclose a copy of a document that allows us to identify you.
7. CONSENT TO RECEIVE ELECTRONIC COMMUNICATIONS
Likewise, and in accordance with Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE), by completing the data collection form and ticking the corresponding box “I accept the sending of electronic communications”, you are giving your express consent for us to send information about the Company to your email address, telephone, fax or other electronic means.
Mitra Salud offers patients a form that includes sensitive personal information about the data subject's health.