Information on the processing of personal data
CLINICA PREMIUM IBIZA, S.L.U. is the DATA CONTROLLER for the personal data of the USER and informs them that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of April 27 (GDPR), and Organic Law 3/2018 of December 5 (LOPDGDD). Therefore, the following information about the processing is provided:
PATIENTS OF HEALTH CENTER: management of healthcare services for patients
Purposes of the processing: medical history, healthcare management and control, other purposes: provision of healthcare services including management of healthcare and administrative services of the center that involve the same: maintenance of medical history, appointments, issuance of certificates, response to queries, handling of incidents, opinion surveys, etc.
Legal basis for the processing: for the execution of a contract or pre-contract with the interested party (article 6.1.b GDPR) as it is necessary for preventive medicine purposes, medical diagnosis, provision of healthcare or treatment, as well as the management of healthcare systems and services (article 9.2.h GDPR)
• Exception for special categories of data: For preventive or occupational medicine purposes, medical diagnosis, provision of healthcare or social care, or management of their systems and services, based on a Law or under a contract with a healthcare professional (article 9.2.h GDPR)
Data retention criteria: retained for as long as legal prescriptions dictate their custody
Data sharing: If necessary for the development and execution of the processing purposes, we may disclose the data to our service providers related to communications and information technology, with whom the CONTROLLER has confidentiality and data processing agreements required by current privacy regulations. Data will also be provided to other companies in the Policlínica Group (Policlínica Ntra. Sra. del Rosario, S.L.U., Clínica Vilaparc, S.L.U., Eiviconsulta, S.L.U., and Clínica Premium Ibiza, S.L.U.) with the user’s consent, for the same purposes.
Data source: the interested party themselves or their legal representative, private entity.
Data categories:
- Identifying data: ID/NIF/NIE/passport, full name, postal or email address, image, social security number or mutual society, health card, physical features
- Special categories: Health
- Other categorized data: Personal characteristics (personality or behavior), personal traits
RADIOLOGICAL HISTORY: digitization of patient X-rays for diagnosis and treatment
Purposes of the processing: medical history, healthcare management and control
Legal basis for the processing: for the execution of a contract or pre-contract with the interested party (article 6.1.b GDPR) as it is necessary for preventive medicine purposes, medical diagnosis, provision of healthcare or treatment, as well as the management of healthcare systems and services (article 9.2.h GDPR)
- Exception for special categories of data: For preventive or occupational medicine purposes, medical diagnosis, provision of healthcare or social care, or management of their systems and services, based on a Law or under a contract with a healthcare professional (article 9.2.h GDPR)
Data retention criteria: retained for no longer than necessary to fulfill the processing purpose or as long as legal prescriptions dictate their custody
Data sharing: If necessary for the development and execution of the processing purposes, we may disclose the data to our service providers related to communications and information technology, with whom the CONTROLLER has confidentiality and data processing agreements required by current privacy regulations. Data will also be provided to other companies in the Policlínica Group (Policlínica Ntra. Sra. del Rosario, S.L.U., Clínica Vilaparc, S.L.U., Eiviconsulta, S.L.U., and Clínica Premium Ibiza, S.L.U.) with the user’s consent, for the same purposes.
Data source: the interested party themselves or their legal representative, private entity
Data categories:
- Identifying data: Image
- Special categories: Health
- Other categorized data: Personal characteristics
MEDICAL CHECK-UPS: management of medical check-ups
Purposes of the processing: medical history, healthcare management and control
Legal basis for the processing: GDPR articles:
6.1. b) processing is necessary for the execution of a contract in which the data subject is a party or for the application at the request of this data subject of pre-contractual measures.
9.2.h) processing necessary for preventive medicine purposes, medical diagnosis, provision of healthcare or treatment, as well as the management of healthcare systems and services.
- Exception for special categories of data: For preventive or occupational medicine purposes, medical diagnosis, provision of healthcare or social care, or management of their systems and services, based on a Law or under a contract with a healthcare professional (article 9.2.h GDPR)
Data retention criteria: retained for as long as legal prescriptions dictate their custody
Data sharing: If necessary for the development and execution of the processing purposes, we may disclose the data to our service providers related to communications and information technology, with whom the CONTROLLER has confidentiality and data processing agreements required by current privacy regulations. Data will also be provided to other companies in the Policlínica Group (Policlínica Ntra. Sra. del Rosario, S.L.U., Clínica Vilaparc, S.L.U., Eiviconsulta, S.L.U., and Clínica Premium Ibiza, S.L.U.) with the user’s consent, for the same purposes.
PSYCHOTECHNICAL TESTS DRIVING LICENSE: Management of the interested party’s personal data to process and manage their registration and completion in the psychotechnical tests necessary for obtaining the driving license and its subsequent evaluation.
Purpose of the treatment: Management and health control.
Legal basis for the treatment: For the execution of a contract or pre-contract with the interested party (Article 6.1.b GDPR) for medical diagnosis purposes, in this case, evaluation of the applicant’s capacity (9.2.h GDPR).
- Exception for special categories of data: For preventive or occupational medicine purposes, medical diagnosis, provision of health or social care, or management of their systems and services, based on a Law or under a contract with a healthcare professional (Article 9.2.h GDPR).
Data retention criteria: Retained for no longer than necessary to achieve the purpose of the treatment or as long as legal prescriptions dictate their custody.
Data disclosure: It is informed that the data may be transferred to insurance and healthcare entities.
MEDICAL HISTORY: Management and administration of health data.
Purpose of the treatment: Epidemiological research and similar activities, medical history, management, and health control.
Legal basis for the treatment: For the execution of a contract or pre-contract with the interested party (Article 6.1.b GDPR).
- Exception for special categories of data: For preventive or occupational medicine purposes, medical diagnosis, provision of health or social care, or management of their systems and services, based on a Law or under a contract with a healthcare professional (Article 9.2.h GDPR).
Data retention criteria: Retained for no longer than necessary to achieve the purposes, retained for no longer than necessary to maintain the purpose of the treatment or as long as legal prescriptions dictate their custody.
Data disclosure: If necessary for the development and execution of the treatment purposes, we can transfer the data to our service providers related to communications and information technology, with whom the RESPONSIBLE has confidentiality and data processor contracts required by current privacy regulations. Data will also be provided to other companies of the Policlínica Group (Policlínica Ntra. Sra. del Rosario, S.L.U., Clínica Vilaparc, S.L.U., Eiviconsulta, S.L.U., and Clínica Premium Ibiza, S.L.U.), with the user’s consent, for the same purposes.
PSYCHOLOGICAL HISTORY: Management and administration of psychological data.
Purpose of the treatment: Epidemiological research and similar activities, medical history, management, and health control.
Legal basis for the treatment: For the execution of a contract or pre-contract with the interested party (Article 6.1.b GDPR).
- Exception for special categories of data: For preventive or occupational medicine purposes, medical diagnosis, provision of health or social care, or management of their systems and services, based on a Law or under a contract with a healthcare professional (Article 9.2.h G
Data retention criteria: Retained for no longer than necessary to achieve the purposes, retained for no longer than necessary to maintain the purpose of the treatment or as long as legal prescriptions dictate their custody.
Data disclosure: It is informed that the data are not disclosed to third parties, except by legal obligation. CONTACTS (HEALTH): communication, information, and management about products and services. Includes web and social media contacts with sensitive information (health data).
Purpose of the treatment: Advertising and commercial prospecting.
Legal basis for the treatment: Explicit consent for specific purposes (Article 6.1.a GDPR).
- Exception for special categories of data: For preventive or occupational medicine purposes, medical diagnosis, provision of health or social care, or management of their systems and services, based on a Law or under a contract with a healthcare professional (Article 9.2.h GDPR).
Data retention criteria: Retained for no longer than necessary to maintain the purpose of the treatment or as long as legal prescriptions dictate their custody.
Data disclosure: If necessary for the development and execution of the treatment purposes, we can transfer the data to our service providers related to communications and information technology, with whom the RESPONSIBLE has confidentiality and data processor contracts required by current privacy regulations. Data will also be provided to other companies of the Policlínica Group (Policlínica Ntra. Sra. del Rosario, S.L.U., Clínica Vilaparc, S.L.U., Eiviconsulta, S.L.U., and Clínica Premium Ibiza, S.L.U.), with the user’s consent, for the same purposes.
RIGHTS AND CONTACT DATA
Rights of the interested party:
- Right to withdraw consent at any time, when the treatment is based on the consent of the interested party.
- Right of access, rectification, portability, and erasure of their data and to the limitation or opposition to their treatment.
- Right to lodge a complaint with the Control Authority (www.aepd.es) if it considers that the treatment does not comply with current regulations.
Contact details to exercise your rights:
CLINICA PREMIUM IBIZA, S.L.U.. VIA ROMANA, S/N – 07800 Eivissa (Illes Balears). Contact details of the Data Protection Officer: dpo@tecnolawyer.com
