Privacy Policy

Effective 14/05/2021

  1. Who is responsible for the processing of your personal data?

08520 DENTAL SLP with CIF: B66638347 and located at the address for these purposes at: Calle Papers 15, Les Franqueses del Vallès, 08520, Barcelona. Telephone: (+34) 935 950 247 E-mail: info@cerarootclinic.com

hereinafter CeraRoot CLINIC.


  1. Who is and what role does the Data Protection Officer (DPD) have?

The Data Protection Officer (DPD) is TECNODOSIS SL. You can contact him at the following email: gdpr@cerarootclinic.com


  1. Principles that we will apply to your personal information

In the processing of your personal data, we will apply the following principles that comply with the requirements of the new European data protection regulation.

Principle of legality, loyalty and transparency: We will always require your consent for the processing of your personal data for one or more specific purposes that you previously received with absolute transparency.

Principle of data minimization: We will only request the data strictly necessary in relation to the purposes for which we require it.

Principle of limitation of the conservation period: The data will be kept in our database for no longer than necessary for the purposes of the treatment, depending on the purpose, we will inform you of the corresponding conservation period in any case.

Principle of integrity and confidentiality: Your data will be treated in such a way that adequate security of personal data is guaranteed and confidentiality is guaranteed.

You have to know that we take all necessary precautions to prevent unauthorized access or improper use of our users' data by third parties.


  1. How have we obtained your data?

The legal basis for the treatment of your data is the free, specific, informed and unequivocal consent, in order to execute the contract for the provision of dental services formalized by the acceptance of the budget, or where appropriate, the preparation of the prior budget. .

Exceptionally, and always with prior consent, they could have been obtained by other means.


  1. What personal data do we process?

The personal data that we process, for the legitimate purposes that we explain in point 6., and depending on the services, may be:

Names and surnames

Postal address

NIF / Passport

Telephone and / or mobile

Email

Dental X-rays (periapical, fin / bite, cephalometry or teleradiography, dental plug, orthopantomography)

Intraoral and facial photos and videos.

Health data obtained from conversations with you

Data related to health insurance


  1. For what purpose do we process your personal data?

We treat your personal data with the primary purpose of collecting your health data in order to facilitate the best health care, recording all those data that, under medical criteria, allow accurate and up-to-date knowledge of your state of health and that are relevant. for the medical treatment to be performed.

Likewise, we also process your personal data to manage all additional services related to health care (analysis laboratories, prosthetics), the relationship with your insurance or mutual entity, and for accounting and tax management, in particular, the billing of the services provided.

Likewise, provided that we previously have your consent for the management and development of marketing activities and the sending of commercial communications by electronic means.

The data controller may process personal data for the following purposes:

1.- Provision of health care: personal information is processed in order to provide you with the health care you need, as well as to properly manage health services and perform the administrative tasks necessary for the provision of care, as in the following examples:

to send appointment reminders;

Issue documents of proof of hospital visit for family members or others who have ties with you and who can request this document in compliance with the applicable regulations;

To communicate with another health center when instructed to do so;

To process any incident or claim presented by the person using the service and / or for you, the patient;

Administer surveys designed to collect your opinion on the care offered to you; These surveys will be used exclusively to improve and develop our care services and management activities; Y

To provide the services offered through the patient portal: personal information belonging to patients who register as users of the portal may be processed for the purpose of accessing and using the tool.

2.- Scientific research: your data may be processed for scientific purposes, in accordance with the specific regulations that regulate this treatment.


3.- Procedures: for anonymization and the use of the pseudonym: for scientific or statistical research purposes, your data may be subjected to certain procedures so that they are not identifiable or because they can no longer be linked to any part if there is no additional information that appears separately. .


4.- Treatment of requests for information, complaints, suggestions, complaints and exercise of data protection rights, etc.: Your data will be processed to meet the request by any means necessary, including telephone calls and / or electronic means.


5.- Compliance with legal obligations: to comply with the applicable legal obligations, it may be necessary to process personal information. Specifically, these obligations may be related to compliance with legislation on data protection, taxation, health, etc.


6.- Drafting and execution of the contract: personal information is processed to manage the contractual relationship with the patient.


7.- Video surveillance: some health facilities have a video surveillance system that takes images in real time of the people who use the facility's services. These data are processed for the sole purpose of security and to monitor the people who appear on the premises.


8.- Newsletter distribution: if you provide explicit consent, your data may be used to send you digital newsletters of the publications to which you are subscribed.


9.- Distribution of advertising materials by any means in case of additional consent: if you accept it, we can transfer your data to business entities that are part of the CeraRoot Group to inform you, by any means and for promotions and advertising purposes -in relation to the facilities, services, products or events related to health and healthcare - of the companies of the CeraRoot group (in no case will your data be used to send you third-party advertising content).


The information collected will be processed for the established purposes and, in no case, will the data be processed for purposes that conflict with those established here. Please note that the processing of data for purposes related to scientific research or statistical measurements is not considered incompatible with the initial purpose.


We process your data with the same degree of attention and quality at all times, regardless of the channel you may choose to communicate with us (for example, the website of a facility, mobile applications, face-to-face, telephone, computer).

Purpose and legal basis

  • Provision of healthcare:

treatment necessary for prevention, diagnosis, provision of medical care or treatment, as well as to manage healthcare systems and services Processing is necessary for the performance of a contract that interests the interested party. party and / or the legitimate interests pursued by the data controller.

  • Scientific research:

Treatment based on scientific or statistical research purposes

  • Attention of requests:

processing based on the consent of the person concerned and / or the legitimate interests pursued by the

  • Compliance with legal obligations:

The tractament.tractament is necessary for the fulfillment of a legal obligation to which the person in charge is subject

  • Formalization and execution of the contract:

processing is necessary for the performance of a contract to which the data subject is a party.

  • Video surveillance:

the processing is necessary for the performance of a task carried out in the public interest as established in the provisions of Law 5/2014 on private computer security

  • Newsletter delivery:

Processing based on the consent of the interested party

  • Sending Ads:

Processing based on the consent of the interested party


  1. When and why can we provide your data to third parties?

Your personal data may be transferred to the following recipients for the reasons indicated:

  • Public administrations: to comply with the legal obligations to which we are subject due to our activity.

  • Mutual and insurance companies: in case you access our services through medical insurance and with the sole purpose of being able to manage the management and collection of the services provided.

  • Analysis laboratories, dental technicians and the like: with the sole purpose of giving you the contracted treatment.

  • Health professionals, clinic collaborators: with the sole purpose of being able to carry out the contracted treatment.

  • Tax and accounting management: with the sole purpose of managing our accounting (issuing an invoice, filing tax returns, commercial obligations ...)


  1. International data transfers

In no case do we transfer your personal data to any person or entity either inside or outside the CEE, except in the cases of international patients from outside the EEC, or collaborating professionals from outside the EEC, or collaborating companies, or providers of services or products in order to carry out the contracted treatment.


  1. How long do we keep your personal data?

In general, your data will only be kept for the time strictly necessary for the purpose for which it was collected.


The personal data provided, as well as those derived from the healthcare provided will be kept for the time appropriate to each case (according to medical and legal criteria), and at least ten years from the date of discharge of each healthcare process, except that the regional and / or specific regulations establish a minimum conservation period greater than that indicated, in which case the provisions of the applicable regulations will be followed.


Once this minimum period has been exceeded, and the care and contractual relationship having ended, the person responsible for keeping your data duly blocked, during the period of the periods corresponding to the legal prescription.


Personal data processed for the purpose of scientific research will be kept under a conservation criterion for a maximum period of five years from the end of the research. Regarding the data processed for scientific research purposes, the control authorities of the autonomous communities may, upon request of the person responsible for the treatment and in accordance with the procedure reestablished by regulation, agree to the full maintenance of certain data, given the historical values, statistical or scientific in accordance with the legislation that is applicable to each case.


The personal data provided in order to manage any request for information, complaint, suggestion, claim, exercise of data protection rights, etc., will be kept for the time necessary to process the request, and in any case during the established time. legally, as well as during the period necessary for the formulation, exercise or defense of claims.


The data processed for compliance with legal obligations are kept for the time established in the applicable legislation.


The data collected for the formalization and execution of the contract will be kept for the duration of the contractual relationship, as well as for the period necessary for the formulation, exercise or defense of claims, at least five years.


The images captured through video surveillance systems will be kept for a maximum period of 30 days, unless the person responsible for the treatment has knowledge of any fact that may be relevant for a subsequent judicial action.


The data processed by sending newsletters to which they have subscribed will be kept until the user revokes their consent, unsubscribes from the ticket and / or exercises the rights of opposition and / or deletion.


The data processed by sending commercial communications will be kept until the interested party does not revoke the consent and / or exercise the rights of opposition and / or deletion.


  1. What are your rights?

Anyone has the right to obtain confirmation about whether we are treating personal data that concerns him or not.

Interested parties have the right to:

  • Request access to personal data related to the interested party.

  • Request its rectification or deletion.

  • Request the limitation of your treatment.

  • Oppose the treatment.

  • Request the portability of the data.

We have at your disposal the corresponding models so that you can exercise your rights.

Interested parties may access their personal data, as well as request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, the interested parties may request the limitation of the processing of their data, and in this case they will only be kept for the exercise or defense of claims.

In certain circumstances and for reasons related to their particular situation, the interested parties may object to the processing of their data.

Interested parties will also have the right to effective judicial protection and to file a claim with the control authority, in this case, the Spanish Agency for Data Protection, if they consider that the processing of personal data that concerns them violates the European Regulation for the protection of Data.