In accordance with the Regulation (EU) 2016/679 of the Parliament and of the Council of 27 April 2016 regarding the protection of natural persons with regard to the treatment of their personal data and the free movement thereof, and Law 41/2002 of November 14, basic regulator of patient autonomy and rights and obligations in the field of information and clinical documentation, the Management of this Center informs the patients, users and the general public of following aspects:
For any question in this matter, the patient can contact the CeraRoot CLINIC data protection delegate (Parpers, 15. 08520 Les Franqueses del Vallès, Barcelona, Catalonia).Likewise, you can contact the data protection delegate via email sent to this address email@example.com.
Who is responsible for the processing of your data?
The person in charge of the treatment of their data is the company that holds the dental clinic CeraRoot CLINIC that provides assistance:
08520 DENTAL SLP
Parpers, 15. 08520 Les Franqueses del Vallès. Barcelona. Catalonia
What personal data do we process and where do they come from?
As a result of their relationship with us, the following categories of personal data can be dealt with:
Ø Identifying data, contacting patients or their representatives (including signature, image, health card, social security number or mutual society);
Ø Health related data in the patient’s medical history;
Ø Personal characteristics, social circumstances;
Ø Transactional data (payments, income, transfers, charges)
The data may come from the interested party (patient) or, where appropriate, from his / her legal or voluntary representative and / or healthcare personnel.
For what purpose do we treat your personal data?
Personal data may be dealt with by those responsible for the treatment for the following purposes:
1. Provision of healthcare: your personal data is treated in order to provide the healthcare you need, as well as to properly manage the health and hospital administration services necessary for it, for example:
– Remind you of appointments and reviews;
– Issue proof of your attendance at the health center in favor of relatives or persons linked to you who request it, within the framework permitted by the regulations;
– Address any communication with the health center reported by the patient;
– Manage any incident or claim brought by the user and / or patient;
– To carry out surveys with the aim of knowing their opinion about the attention received and which will be used solely to improve and develop our assistance and management services;
2. Scientific research: their data can be dealt with for scientific purposes, complying with the specific regulations on this.
3. Attention to requests for information, complaint, suggestion, claim, exercise of data protection rights, etc.: in these cases your data will be processed in order to handle and process the application.
4. Compliance with legal obligations: it may be necessary to treat personal data in order to comply with the legal requirements that correspond. Specifically, to comply with the legislation on data protection, taxation, health, etc.
5. Formalisation and execution of the contract: the personal data of the patient are treated in order to manage the contractual relationship with the patient.
6. Video surveillance: certain health centers have a video surveillance system through which images are collected from users of the center in real time. The treatment of these data is carried out exclusively for the purpose of security and control of access to the installations.
7. Submission of commercial communications by any means in case of additional consent: if you explicitly consent, your data may be transferred to the entities of the CeraRoot Group in order to inform you by any means for promotional and advertising purposes about the Centers, services, products or events related to the health and / or health sector of the companies of the CeraRoot group (in no case will their data be used to send advertising content other than CeraRoot CLINIC).
The collected data will be treated for the specified purposes and in no case incompatible with these purposes. We remind you that the treatment for scientific or statistical research purposes is not considered incompatible with the initial purpose.
In any case, we treat your data to always assist you with the same level of quality of care, regardless of the channel used to communicate with us (health center, web page of the center, mobile applications, either in a way face-to-face, telephone or telematic).
What is the legitimation for the treatment of your data?
|Purpose||Base for treatment|
|Provision of healthcare||Treatment necessary for the execution of a contract in which the interested party is a party; treatment based on the consent of the interested party, to protect vital interests of this and / or legitimate interests of the person in charge of the treatment|
|Scientific research||Required treatment for scientific research|
|Attention to requests||Treatment necessary to comply with a legal obligation applicable to the person in charge of the treatment|
|Compliance with legal obligations||Treatment necessary to comply with a legal obligation applicable to the person in charge of the treatment|
|Formalization and execution of the contract||Treatment necessary for the execution of a contract in which the interested party is a party|
|Videovigilance||Treatment based on the legitimate interest of the person in charge of the treatment|
|Delivery of commercial communications||Treatment based on the consent of the interested party|
How long will we keep your data?
In general, only your data will be preserved for the time strictly necessary for the purpose for which they were collected.
The personal data provided, as well as those derived from the healthcare provided will be kept for the right time in each case (according to medical and legal criteria), and at least ten years counting from the date of registration of each process Assistance, unless the autonomous and / or specific regulations establish a minimum term of conservation superior to what is indicated, and in this case must comply with the provisions of applicable regulations.
Once the aforementioned minimum period has been exceeded, and having finalised the care and contractual relationship, the person responsible must keep their data duly blocked and pseudo-harmonized, at the end of the deadlines corresponding to the legal prescription.
The personal data processed for the purpose of scientific research will be stored under a conservation criterion for a maximum period of five years from the end of the search.With regard to data processed for purposes of scientific research, the control authorities of the autonomous communities may, upon prior request of the person responsible for the treatment and in accordance with the procedure restored by regulation, agree to the full maintenance of certain data, Given the historical, statistical or scientific values in accordance with the legislation applicable to each case.
The personal data provided in order to handle any request for information, complaint, suggestion, claim, exercise of data protection rights, etc. will be kept for as long as necessary to process the application, and in all Case during legally established time, as well as during the period necessary for the formulation, exercise or defense of claims.
The data processed for the fulfilment of legal obligations will be conserved during the time established in the applicable legislation.
The data collected for the formalisation and execution of the contract will be maintained during the term in which the contractual relationship is maintained, as well as during the period necessary for the formulation, exercise or defense of claims, for at least five years.
Images captured through video surveillance systems must be kept for a maximum period of 30 days, unless the person responsible for the treatment has knowledge of any fact that may be relevant for subsequent judicial action.
The data processed for the delivery of commercial communications will be preserved until the interested party revokes the consent and / or exercises the rights of opposition and / or deletion.
To whom will the recipients communicate their data?
To guarantee an adequate provision of the service, it is necessary that certain service providers and / or group entities treat data on behalf of the person responsible and as the person in charge of the treatment of their personal data. These entities may be, for example, providers of medical services, diagnosis, clinical analysis, auditing, physical security, archiving, storage or digitisation of information, destruction of documentation, legal advice services , computer services, etc.
Your personal data will not be communicated to third parties except for legal obligation, vital interest or prior consent of the interested party, only in the cases and to the recipients that are detailed below:
a) Because the patient can have an insurance contract under which he is a third party (for example, insurance, mutual entities, public administrations, even those of a third party in the case of liability insurance civil) is obligated to pay the health services provided by the health center, as long as this informs the patient, we can communicate their data to these entities, in order to manage, validate, verify and control the payment of healthcare services borrowed
In the event that the patient has an insurance agreement with an entity outside the European Economic Area 1 (hereinafter EEE) with legislation that does not offer a level of data protection equivalent to that of the European Union, it may be necessary To make an international transfer of data, with the explicit prior consent of the patient after having been informed of the possible risks. We inform you that transfers are only produced in order to collaborate with the patient and facilitate the payment of healthcare services provided; In the end, these transfers only take place for the management and verification as rapidly as possible with the insurer for the payment of services in cases where the patient has contracted an insurance policy with an entity outside the EEA.
If you oppose the communication of your data, these entities may refuse payment of the assistance services received, and the payment would correspond to you, since these entities do not have the possibility to verify, verify, validate or control the Correct turnover by the health center of each of its healthcare processes.
b) We also inform you that your personal data may be communicated to healthcare providers, prosthetics and implants for legal obligation, to ambulances based on a patient’s vital interest.
We also inform you that your personal data can be communicated to other companies of the CeraRoot Group for administrative and internal sanitary purposes, based on legitimate interests of the group.
All the information that is provided to us will be treated confidentially and strictly complying with the security obligations necessary to prevent access by unauthorised third parties.
What rights do you have when you provide us with your information?
You may exercise the rights of access and rectification of inaccurate data, and may also request the deletion of it, when, among other reasons, the data are no longer necessary for the purposes for which they were collected; in certain circumstances you may also request the limitation of the processing of your data, and in this case we will only retain them for the exercise or defense of claims; Finally, and for reasons related to your particular situation, you can also exercise the right of opposition and portability. Likewise, you may revoke, at any time, the consent given to the processing of your data.
The exercise of the rights as well as the revocation of the consent for the treatment of your data are free, except in the case of art. 12.5 of Regulation (EU) 679/2016, which you can exercise by filling out a questionnaire in person face to face with the patient care service of the health center, or via email addressed to the “Patient Care Service” at the CeraRoot CLINIC center (see mailing address), with the reference “data protection rights”, providing a photocopy of your ID or equivalent document.
In addition, we inform you of the possibility of filing a complaint with the competent control authority, in accordance with the corresponding procedure according to the specific case.
(1) Member States of the European Union in addition to Iceland, Norway
“08520 Dental SLP”
Parpers, 15. 08520 Les Franqueses del Vallès, Barcelona, Catalonia, Spain.
www.cerarootclinic.com firstname.lastname@example.org Tel. (+34) 93 595 02 47