Privacy Policy

 

Who is responsible for the processing of your data?

 

Data Protection Officer:

You can contact our DPD, Axionnet Network SL, through the following email lopd@axionnet.com

We reserve the right to modify or adapt this Privacy Policy at any time. We recommend that you review it, and if you have registered and access your account or profile, you will be informed of the changes.

For what purposes are we going to process your personal data?

1.- Patients: At Luis Naranjo Clinic we will treat your personal data for the following purposes: Provision of the requested health services, as well as their administrative management. Preservation of the medical history.

2.- Clients: At Luis Naranjo Clinic we will treat your personal data with the following purposes: Preparation of the budget. Budget monitoring through communications between both parties. Commercial or event information by electronic means. Manage the administrative and logistics services contracted. Monitoring of the contractual relationship and billing. Control and recovery procedures.

3.- Suppliers: At Clínica Luis Naranjo we will treat your personal data for billing purposes.

4.- Contacts from the web or email: We can treat your IP, what operating system or browser you use, and even the duration of your visit, anonymously. If you provide us with your data in the contact form, you will identify yourself in order to contact you, if necessary.
At Luis Naranjo Clinic we will treat your personal data with the following purposes: Respond to your queries, requests or petitions. Manage the requested service, answer your request, or process your request. Information by electronic means, related to your request. Commercial or event information by electronic means, provided there is express authorization. Carry out analysis and improvements on the Web, on our products and services. Improve our business strategy.

5.- Contacts social networks: At Luis Naranjo Clinic we will treat your personal data with the following purposes:Respond to your queries, requests or petitions. Manage the requested service, answer your request, or process your request. Relate to you and create a community of followers. All this in accordance with their Privacy policies:

  • Facebook
  • Instagram

6.- Job seekers: At Luis Naranjo Clinic we will treat your personal data for the following purposes: Organisation of selection processes for the recruitment of employees. Appoint you for job interviews and evaluate your candidacy. If you have given us your consent, we can keep your CV to make you participate in new selection processes. If you have given us your consent, we may communicate your CV to group companies, collaborators or related companies, with the sole purpose of involving you in their selection processes.

What is the legitimacy for the treatment of your data?

1.- Patients: The legal basis for processing your data is the fulfilment of a legal obligation applicable to the controller, the performance of a contract and the consent of the data subject.

2.- Clients: The legal basis for the processing of your data is the execution of a contract and maintenance of the contractual relationship. The offer of products and services through electronic means is based on the consent that is requested, without in any case the withdrawal of this consent conditioning the execution of the contract.

3.- Suppliers: The legal basis for the processing of your data is the execution of a contract and maintenance of the contractual relationship.

4.- Contacts from the web or email: The legal basis for the processing of your data is the consent of the data subject. In those cases where to make a request it is necessary to fill in a form and click on the send button, the completion of the same will necessarily imply that you have been informed and have expressly given your consent to the content of the clause attached to the form or acceptance of the privacy policy.

5.- Contacts social networks: The legal basis for the treatment of your data is the acceptance of a contractual relationship in the environment of the corresponding social network, and in accordance with its Privacy policies.

6.- Job seekers: The legal basis for the treatment of your data is your unequivocal consent, when you give us your CV and receive and sign information regarding the treatments that we are going to carry out.

To which recipients will your data be communicated?

Your data will not be transferred to third parties, except legal obligation. Specifically, they will be communicated to the State Tax Administration Agency and to banks and financial entities for the collection of the service provided or product purchased, as well as to those in charge of the necessary treatment for the execution of the agreement. The data will be communicated to other companies linked through collaboration or service contracts for internal administrative purposes.

What security measures do we apply?

You can rest assured, we have adopted an optimal level of protection of the Personal Data that we handle, and we have installed all the means and technical measures at our disposal according to the state of technology to avoid loss, misuse, alteration, unauthorized access and theft of Personal Data.

What are your rights when you provide us with your data?

Anyone has the right to obtain confirmation about the existence of a treatment, their personal data, to access their personal data, request the rectification of the same that are inaccurate or, where appropriate, request the deletion, when among other reasons, the data are no longer necessary for the purposes for which they were collected or the interested party withdraws the consent granted. In certain cases, the interested party may request the limitation of the processing of their data, in which case we will only keep them in accordance with current regulations. In certain cases, you can exercise your right to the portability of the data, which will be delivered in a structured format, for common use or mechanical reading to you or the new data controller you designate. You have the right to revoke consent at any time for any of the treatments for which you have granted it. Luis Naranjo Clinic has forms for the exercise of rights that can be requested by email luisnaranjo@clinicanaranjo.com or use those prepared by the Spanish Agency for Data Protection or third parties. These forms must be signed electronically or be accompanied by a photocopy of the DNI. If you act through a representative in the same way, it must be accompanied by a copy of your ID or with an electronic signature. The forms must be presented in person to Luis Naranjo Clinic or sent by post or email to the addresses that appear in the "Responsible" section. You have the right to file a claim with the Spanish Agency for Data Protection in the event that you consider that the exercise of your rights has not been adequately addressed. The maximum term to resolve is one month from the receipt of your request. In the event of any modification of your data, we thank you for communicating it to us duly in writing in order to keep your data updated.

How long will we keep your data?

Personal data will be kept as long as the relationship with Luis Naranjo Clinic is maintained. At the end of the latter, the personal data processed for each of the indicated purposes will be kept for the legally established periods or for the period that a judge or court may require them, taking into account the statute of limitations for legal actions. The processed data will be kept as long as the aforementioned legal terms do not expire, if there is a legal obligation to maintain it, or if there is no such legal term, until the interested party requests its deletion or revokes the consent granted.

In each treatment or type of data, we provide you with a specific period, which you can consult in the following table:

FILE DOCUMENT CONSERVATION
PATIENTS MEDICAL HISTORY Minimum 5 years
CLIENTS BILLS 10 years
FORMS 15 years
CONTRACTS Minimum 5 years
MARKETING DATABASES OR WEB VISITORS While the treatment lasts
SUPPLIERS BILLS 10 years
CONTRACTS 5 years
ACCESS CONTROL and VISITORS LIST 30 days
VIDEO SURVEILLANCE VIDEOS 30 days lockout / 3 years destruction
ACCOUNTING BOOKS and ACCOUNTING DOCUMENTS 6 years
FINANCIAL STATEMENTS
AUDIT REPORTS
RECORDS AND DOCUMENTS RELATED TO GRANTS
TAX RIGHTS AND OBLIGATIONS RELATING TO THE PAYMENT OF TAXES 10 years
ADMINISTRATION OF TAX WITHHOLDING PAYMENTS
MANAGEMENT AND PROCESSING OF THE IGIC
ENVIRONMENT INFORMATION ON CHEMICAL OR SUBSTANTIALLY HAZARDOUS SUBSTANCES 10 years
DOCUMENTS RELATING TO ENVIRONMENTAL PERMITS 3 years after the closing of the activity
RECORDS ON RECYCLING OR DISPOSAL OF WASTE 3 years
SUBSIDIES FOR CLEANING OPERATIONS (Conservation of rights, obligations, receipts and payments). 4 years
ACCIDENT REPORTS 5 years
INSURANCE INSURANCE POLICIES 6 years (general rule)
2 years (damage)
5 years (personal)
10 years (life)
SHOPPING Register all deliveries of goods or provision of services, intra-community acquisitions, imports and

exports for the purposes of IGIC.

 5 years
LEGAL INTELLECTUAL AND INDUSTRIAL PROPERTY DOCUMENTS 5 years
CONTRACTS AND AGREEMENTS
PERMITS, LICENSES, CERTIFICATES 6 years from the expiration date
10 years (criminal statute of limitations)
CONFIDENTIALITY AND NON-COMPETITION AGREEMENTS Always within the term of the obligation or confidentiality
LOPD TREATMENT OF PERSONAL DATA, if different from the treatment notified to the AEPD 3 years
PERSONAL DATA OF EMPLOYEES, STORED IN NETWORKS, COMPUTERS, AND COMMUNICATIONS EQUIPMENT USED BY THEM 5 years
ACCESS CONTROLS AND INTERNAL MANAGEMENT / ADMINISTRATION SYSTEMS