Privacy Policy

Your personal data will be used for the general purpose of managing and monitoring the established commercial and healthcare relationship and, specifically, to:

Manage full access to and correct utilisation of the services by users.

Communicate with users in response to incidents, requests, comments, and queries made through the contact forms on our website (including emails and/or telephone calls).

Provide, update, maintain, and protect the services and activities of the clinics.

Offer new services, special offers, or updates related to oral health.

Where applicable, manage recruitment processes for selection of employees and/or collaborators.

Communications: We may send you emails, messages, and other types of communication regarding the services, technical issues, and changes to them. These communications are considered part of the services and you cannot opt out of them.

Where applicable, commercial communications (Marketing): We may use your data to contact you, both electronically and non-electronically, to conduct surveys, obtain your opinion on the service provided, and occasionally notify you of changes, important developments in the services, offers, and/or promotions of our services. These commercial offers will, in any case, be expressly and separately authorised by the user, who may at any time revoke their consent to receive these notifications using the mechanism implemented for this purpose, or by writing to the joint controllers.  

We will not process your personal data for any purpose other than those described above unless required to do so by law or by a judicial order.

RETENTION PERIOD
The personal data provided will be retained and processed for as long as the relationship for the provision of dental and healthcare services is maintained, without prejudice to your right to exercise your data protection rights (access, rectification, erasure, objection, restriction, portability, and the right not to be subject to automated individual decisions) and during the applicable legal limitation periods (especially those derived from regulations on medical records and health documentation).

In such cases, your data will be processed solely to prove compliance with the legal or contractual obligations of the Joint Data Controllers. Once these limitation periods have expired, your data will be deleted or, alternatively, anonymised.

LAWFUL BASIS FOR PROCESSING
THE JOINT CONTROLLERS OF THE PROCESSING process personal data in accordance with the following legal bases: Consent of the data subject (1), legitimate interest (2), performance of a contract (3), and compliance with a legal obligation applicable to the Joint Data Controllers (4).

1. Consent of the data subject provided for the purposes described above, which will be requested:

During the process of submitting forms on the website or via the corporate emails indicated on the website, in order to adequately address queries and appointment requests from users.

At the time of accepting the sending of commercial or informative communications from the clinics.

The requests for information you send us require the data subject to voluntarily and freely provide the necessary data to attend to them. However, the data subject is free to refuse to provide this data or, subsequently, to withdraw the consent previously granted to process their data, although this refusal will make it impossible for us to address their request.

2. Legitimate interest of the joint controllers in maintaining and retaining the loyalty of their clients and/or users and better meeting their previously expressed expectations or interests (e.g., improving services, managing requests, queries or complaints, informing about promotions of similar services, etc.), without prejudice to compliance by the joint controllers with all other obligations relating to the sending of commercial communications by electronic means.

3. Performance of a contract between the joint controllers and the user, processing the data that the user voluntarily provides to the controllers in order to manage, schedule, and provide the requested or contracted dental services and treatments, as well as the corresponding billing at the clinic where the treatment is received.

4. Compliance with legal obligations applicable to the joint data controllers (especially healthcare, tax, and billing regulations).

It is understood that, by providing this data, the data subject guarantees and is responsible for the veracity, accuracy, and up-to-date status of the same, and that they accept and expressly consent to its processing for the purposes described above.

RECIPIENTS OF DISCLOSURES OR TRANSFERS
As a general rule, the joint controllers will not transfer your personal data to third parties unless we are legally obliged to do so (for example, to healthcare or tax administrations) or to fulfil the purposes of the processing.

No international transfers of the personal data collected through this website will be carried out, with the exception of the following circumstances:

That the international transfer of data is necessary for the performance of a contract or pre-contractual measures to which the data subject is party.

That the international transfer of data is necessary by application of current legislation.

That the international transfer of data takes place by means of the express consent of the data subject.

That the international transfer of data takes place due to the website being hosted on servers located outside the European Economic Area (such as technology or web hosting service providers like Wix, which operate under regulated and secure data transfer frameworks).

In any event, where international data transfers may take place, it will be verified that the importing country or entity guarantees an adequate level of protection in application of current regulations.

RIGHTS OF THE DATA SUBJECTS
Data protection regulations allow you to exercise your rights of access, rectification, objection, erasure ("right to be forgotten"), restriction of processing, portability, and the right not to be subject to automated individual decisions before the joint data controllers:

Right of access: Allows the data subject to know and obtain information about their personal data undergoing processing.

Right to rectification: Allows the correction of errors, modification of data that proves to be inaccurate or incomplete, and guarantees the accuracy of your personal data.

Right to erasure: Allows you to request the deletion of your personal data when it is no longer necessary for the execution or provision of the service.

Right to object: Allows the data subject to object to the processing of their personal data or to request its cessation, except for legitimate reasons or for the exercise or defence of potential claims, in which case we will keep it blocked for the corresponding period.

Right to object to the sending of advertising: Data subjects can object to the sending of commercial communications. In this case, you can withdraw your consent to receive these notifications at any time.

Restriction of processing: In certain circumstances, data subjects may request the restriction of the processing of their data, in which case it will only be retained for the exercise or defence of claims.

Data portability: Data subjects may request to receive the data concerning them that they have provided to us or –where technically possible– that we send it to another data controller of their choice, in a structured, commonly used, and machine-readable format.

Right not to be subject to automated individual decisions (including profiling): Data subjects have the right not to be subject to a decision based solely on automated processing which produces legal effects or significantly affects them.

Possibility to withdraw consent: The data subject has the right to withdraw the consent granted at any time, without this affecting the lawfulness of the processing based on the consent provided at the time of facilitating the data.

If you wish to exercise any of the rights set out above, please contact us via email at clinicadentalgirones@gmail.com or by sending a written request to any of the contact addresses listed in the identification section of our Privacy Policy, including the following information: Full name, ID/Passport number or equivalent identification document, postal and email contact address, indicating the type of right you wish to exercise and specifying the conditions of the request.

Possibility of lodging a complaint with the Supervisory Authority: We also inform you of your right to lodge a complaint with the Spanish Data Protection Agency (AEPD) via their website (www.aepd.es) if you consider that the processing of your data does not comply with current regulations.

ADDITIONAL INFORMATION
Retention of certain data
In compliance with the provisions of Spanish Law 25/2007, of 18 October, on the retention of data relating to electronic communications and public communications networks, we will proceed, where appropriate, to retain and keep certain traffic data generated during the course of communications for the purpose of disclosing them to authorised security authorities if the legal requirements are met.

Log data
Our servers (hosted under the Wix platform) automatically collect information when the user uses the website services. This log data may include the IP address, the identification of the device from which access is made, the operating system, and browser configuration.

Security measures
The joint controllers have implemented the necessary technical and organisational security measures to guarantee the security of your personal data and prevent its alteration, loss, and unauthorised processing and/or access, taking into account the state of technology, the nature of the data stored, and the risks to which they are exposed. Measures have been established to reinforce the confidentiality and integrity of health and personal information within the organisation, continuously maintaining the supervision, control, and evaluation of processes.

Modification of the Privacy Policy  
This Privacy Policy may be modified in accordance with current legislation at any time. However, the Data Controller will inform you of these changes whenever they have a significant impact on the protection of your personal data or the rights of users.  

PRIVACY POLICY FOR SOCIAL NETWORKS
This section describes the processing of personal data of users who register through the social profiles of the clinics or who browse interacting with them. By interacting with our profiles on social networks, the user grants their express consent for the processing of their data in accordance with the privacy policies of the respective social platform and this Privacy Policy.

Users are informed that the public data provided through our clinics' profiles on social networks will be processed by our entities solely for the purpose of addressing your queries, managing comments, and keeping you informed of our healthcare activities and dental services.

Personal data will be processed in accordance with applicable legislation, respecting the secrecy and security of the information, adopting the necessary measures to prevent its loss, alteration, or unauthorised access. Personal data provided on social networks will be retained as long as the data subject does not request its erasure, revoke their consent, or use the unlinking tools offered by the social network itself.

MINORS
Access and registration on the website or through the social media profiles of our clinics is prohibited for minors under 14 years of age. Should a minor or legally incapable person wish to use them or make contact, the intervention and express consent of the holder of parental responsibility, guardianship, or legal representative will be required, backed by the document that formally accredits it. THE JOINT CONTROLLERS OF THE WEBSITE are expressly exonerated from any liability that may arise from the use of the website or social networks by minors or legally incapable persons without proper supervision.