1. DATA CONTROLLER

In accordance with current Personal Data Protection laws, the following table provides users with information about the entity responsible for the details of this webpage:

2. DATA PROTECTION OFFICER

For any questions or additional information regarding personal data protection, you may contact our Data Protection Officer through the following channels: Email: dpo@viamedsalud.com

3. TRATAMIENTOS

Respond to requests for information and contact sent through the contact emails and forms on the website.

1. Information request

Respond to requests for information and contact sent through the contact emails and forms on the website.

The personal data of the interested party shall be kept until erasure is requested and, in any case, for a maximum period of one year.

Data are processed on the basis of the user’s consent.

Personal details are obtained from the interested party and can be classed as follows:

• Identification and contact information.

2. Information or Commercial Communications

To send you useful information about our products and services, activities, offers, and promotions. The information we send will reflect your preferences and interests.

This form of data processing will only be carried out with patients over 18 years of age or their legal guardians.

Data shall be retained until the interested party expresses their opposition or requests erasure.

The lawful grounds for processing data shall be consent or legitimate interest, given the existence of a prior relationship between the person concerned and the party responsible for processing, to send information about its own products or services similar to those provided previously.

When this information is sent by e-mail, the tool used will include tiny, transparent links and images that will be associated with the recipient's e-mail address. This way, when one of these images is downloaded or the links contained in the email are accessed, the party responsible for processing can know for statistical purposes whether the mail has been opened or if any links have been accessed from the email. The recipient can prevent these uses by setting up their e-mail manager or programme to prevent automated image download, or by not clicking on the links contained in the emails they receive.

3. Customers and Suppliers

Execution and maintenance of the contractual relationship between the parties, including customer and supplier management, customer accounting, and invoicing.

Data will be kept until the end of the relationship and, in any case, until the end of the legal time frames and prescription of actions.

The legitimate grounds for data processing are the execution of the contractual relationship between the parties.

Personal data are obtained from the interested party or their legal representative and can be classified into the following categories:

• Identification and contact information.
• Goods and services provided by the supplier or to the customer.
• Billing details.
• Health data relating to health care provided.

4. Staff selection

Management of candidate participation in the recruitment processes of Viamed Group companies.

Data shall be kept until erasure is requested, and, in any case, for a maximum period of two years following receipt.

The legitimate grounds for processing data is the consent provided by the person concerned.

Personal data are obtained from the interested party when they send their CV by email or form and receive vacancy postings. The categories of data collected are:

• Identification and contact information.
• Personal characteristics.
• Academic and professional details.
• Image.

4. RECIPIENTS

We do not anticipate communicating data unless we are required to do so by law or in the circumstances indicated below:

When processing customer data, the data will be passed on to banking entities, tax authorities, insurance companies, mutual insurance companies or third parties that are obliged to pay for the health services provided.

5. RIGHTS OF INTERESTED PARTIES

In order to manage and process their opposition, the interested party must specify the data they provided at the start of data processing.

Please be advised that, at the time of data collection and any time thereafter, the recipient may object to the sending of information or commercial communications, using the following channels:

• Website form: https://www.viamedsalud.com/hospital-santa-elena/politica-de-privacidad/formulario-de-baja/
• E-mail: bajasinfo@viamedsantaelena.com

Please also note that in every communication we send by e-mail you may object to receiving such communications through the means of contact provided therein.

Please note:

• You also have the right to receive confirmation of whether we are processing personal data affecting you.
• Any persons concerned have the right to access their personal data, as well as to request the amendment of inaccurate data or, as the case may be, request the erasure thereof when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
• In certain circumstances, persons concerned may request a limitation on the processing of their data, in which case we will only retain them with regard to exercising or defending against any claims.
• In certain circumstances and for reasons linked to their particular situation, persons concerned may oppose the processing of their data. In these cases, we shall stop processing their data, except on legitimate grounds, or when exercising or defending against potential claims.
• In certain circumstances, you have the right to receive your personal data in a structured commonly used format that permits mechanical reading.

You may exercise your rights through:

• E-mail: dpo@viamedsalud.com
• Webpage: https://www.viamedsalud.com/hospital-santa-elena/politica-de-privacidad/ejercicio-de-derechos/
• At the front desks of your hospital or medical centre.

If you would like further information about your rights and access to means of exercising said rights you can go to: https://www.aepd.es/ You are also entitled to file a complaint with the Spanish Data Protection Agency if your request to exercise any right has not been properly satisfied or if for any other reason you consider that your personal data are not being processed correctly. To do so, go to: https://www.aepd.es/

6. VERSION

This privacy policy is dated 13/05/2022, and any changes to its terms will be posted on this website.