Dentistry and oral surgery - Privacity

Eduardo Anitua Clinic

PRIVACY POLICY

This Privacy Policy provides detailed information on how we use the personal data of people who contact or use the services of CLINICA DENTAL EDUARDO ANITUA through this website (https://clinicaeduardoanitua.com).

General information

 Who is responsible for the processing of your data?

CLINICA DENTAL ANITUA, S.L. is responsible for the processing of your data, in other words, the entity is responsible for deciding how to use and protect your data.

Data Protection Officer's contact details: rgpd@clinicaeduardoanitua.com

For more information about the BTI Group, click here.

You may contact us via our website through any of our links.

Our postal address is as follows:

· C/Jose Mª Cagigal 19 - 01007 Vitoria - Gasteiz Alava (Spain)

For what purpose do we process your personal data?

Depending on the service or feature you request, we will process your data for any of the following purposes:

  1. The attention and integral management of the Clinic’s patients to:
    • Reach medical diagnoses;

    • Provide the requested healthcare services; and

    • Attend queries related to these services, as well as to manage, review, maintain, control, and follow the treatments.

  2. From an economic point of view to:
    • Manage and control payments, bills, etc. (all related to the dental and prosthetic, traumatology, sleep unit, dermatology, and ophthalmology services) requested by the patient and which have been materialized or must be materialized;

  3. So that our clinical team may attend your query;
  4. To attend your call request to arrange an appointment with you during which we will attend to any possible request;
  5. To attend your online appointment request;
  6. If you have decided to do so, to share your experience in the Clínica Eduardo Anitua with us and authorize the publication of your testimony on our website, as well as in catalogues and/or corporate brochures of the BTI Group.

To fulfil the purposes described, we will process the following categories of personal data:

  • Identification data: for example, your name, surname, phone number, email, etc.;
  • Personal data: for example, your age, nationality, image, national ID card/passport, etc.;
  • Employment data: for example, your profession;
  • Economic and transactional data: for example, your payment or card information, your account number, etc.;
  • Special data category: for example, in the event that you provide any of the following to us, your medical records or clinical history, information related to the individualized treatment that your are expected to receive, images of your radiographic series, orthopantomography, digital scanner, tomography and, if applicable, oral (mouth) CT scan, etc.
  • Connection and navigation data, which is why we encourage you to read our cookies policy: https://clinicaeduardoanitua.com/es/politica-cookies.

At the time of the data collection we will let you know which data are essential for us to provide our services. If you do not provide us with the data identified as necessary, we may not be able to provide the requested service satisfactorily.

What is the legal basis for the data processing?

The legal basis that legitimates the processing of your personal data depends on the purpose for which the data will be used. Specifically, the legal bases are as follows:

Purpose

Legal basis


1. The attention and integral management of the Clinic’s patients to:

  • Reach medical diagnoses;
  • Provide the requested healthcare services; and
  • Attend queries related to these services, as well as to manage, review, maintain, control, and follow the treatments.

The bases that legitimate the processing of your data are the following:

  • The implementation of a contract that binds us to you in order to materialize the provision of the requested healthcare service.
  • The consent that you grant us.

2. From an economic point of view to:

  • Manage and control payments, bills, etc. (all related to the dental and prosthetic, traumatology, sleep unit, dermatology, and ophthalmology services) requested by the patient and which have been materialized or must be materialized.

The bases that legitimate the processing of your data are the following:

  • The implementation of a contract that binds us to you in order to materialize the provision of the requested healthcare service.

3. So that our clinical team may attend your query.

The basis that legitimates the processing of your data is the consent that you grant to us to attend your query.

4. To attend your call request to attend to your requests.

The basis that legitimates the processing of your data is the consent that you grant to us when requesting us to call you to attend your requests.

5. To attend your online appointment request.

The basis that legitimates the processing of your data is the consent that you grant to us when filling in your online appointment request.

6. If you have decided to do so, to share your experience in the Clínica Eduardo Anitua with us and authorize the publication of your testimony on our website, as well as in catalogues and/or corporate brochures of the BTI Group.

The basis that legitimates the processing of your data is the consent that you grant to us when filling in the “patient testimony” form.

Under what circumstances will we disclose your data?

Under no circumstances will we disclose your data to third parties without informing you in advance and without the necessary legal basis.

To fulfil the purposes described in this Privacy Policy we need to grant companies of the BTI Group access to your personal data. The legitimizing basis to disclose this information is our legitimate interest in optimizing our management and corporate organization.

We occasionally hire companies that provide certain services and that need to access personal data to this end (laboratories to perform certain tests, manufacturing of prostheses, transport services, etc.). We have signed the corresponding data processor contracts that comply with the provisions of the General Data Protection Regulation (GDPR) with these companies. These contracts ensure that these companies will only process the data to which they have been granted access for the sole purpose of providing us with the contracted service, never for purposes for which we have not authorized them, and that they will not transfer said data to third companies and/or administrations. In addition, we demand that they implement security measures that guarantee the confidentiality and integrity of the personal data. We only hire companies and entities that guarantee us that they comply with the data protection provisions in force.

Unless indicated otherwise, we do not carry out international data transfers.

How long will we store the data?

In accordance with Law 41/2002 regulating patient autonomy and patients’ rights and obligations in relation to clinical information and documentation, we will store your clinical history for a minimum of 5 years.

The remainder of data derived from the treatment or healthcare services provided will be stored for at least 10 years.

In the event that a prosthesis were required, the storage period will be of at least 15 years from the date of your last visit to our clinic.

In any case, the data will be stored applying the appropriate security measures. Once all possible actions have prescribed, we will proceed to delete your personal data.

What are your rights when you provide us with your data?

The General Data Protection Regulation (GDPR) and other regulations in force grant the interested parties a series of rights in relation to their personal data, which we describe below. The application of these rights will depend, in each case, on the legal basis that legitimizes each processing, and their exercise is free of charge.

If you have granted us your consent to process your data, you may withdraw it at any time by contacting us (see section 1.1).

You may exercise your rights by contacting us in writing, attaching a photocopy of your national ID card or a similar identification document, at the following address:

· C/ Jacinto Quincoces 39, 01007 Vitoria-Gasteiz (Álava) Spain

Upon receipt of your request to exercise these rights, we will have a period of one month to respond. If you are not satisfied with our resolution, you may file a claim with the Spanish Data Protection Agency (AEPD) www.aepd.es

Click here for more information about these rights.

  1. Right of access (Article 15 of the GDPR)

    This right entitles you to obtain information from us regarding whether or not we are processing personal data concerning you and, if that were the case, to be granted access to the personal data in question. The requests to exercise this right will be analysed individually, since there are cases in which its exercise is not applicable.
  2. Right to rectification (Article 16 of the GDPR)

    This right entitles you to request the rectification of inaccurate personal data that we are processing. You also have the right to request the completion of data that you believe are incomplete. There are no exceptions in the application of this right.

  3. Right to erasure (Article 17 of the GDPR)

    You have the right to request us to delete your personal data under any of the circumstances set forth in Article 17 of the GDPR.

  4. Right to restriction of processing (Article 18 of the GDPR)

    This right allows you to request us to restrict the processing of your data in certain circumstances set forth in Article 18 of the GDPR.

  5. Right to data portability (Article 20 of the GDPR)

    In relation to the processing that is carried out using automated means, this right allows you to receive your personal data in a structured, commonly-used, machine-readable, interoperable format so that you may disclose the data to another data processor.

    This right only applies to processing that is based on your consent or in the framework of the implementation of a contract.

  6. Right to object (Article 21 of the GDPR)

    You have the right to object to the processing of your data provided that your decision is based on legitimate interest, including profiling.

We use third parties cookies to analyze user browsing.

By continuing to browse, you accept the use of cookies. For more information or to change configuration click here..