· Introduction
· Who is responsible for the processing of your personal data?
· For what purpose do we treat your data?
· What data do we deal with and what source are they obtained?
· What is the legal legitimation for the processing of your data?
· Who do your data communicate?
· How long will we keep your data?
· What are your rights?
This data protection policy is specifically adapted to the Vistahermosa Clinic website Surgery Unit (www.cirugiavistahermosa.es), as well as applications and other products and services, of which the holder of personal data could do use through the aforementioned website (collectively called “services”). For this purpose, and under the conditions collected in the data protection policy, HLA Hospital Group may communicate their personal data to other companies in the group, when necessary for the provision of such services.
This data protection policy can be modified by HLA Hospital Group, after communication to the owner of the data through the website or by other means so that it can know it and continue using our services. The fact of continuing enjoying our services after having communicated the aforementioned modifications, will mean that it agrees with them, unless express consent is necessary.
The Treatment Manager will be the company HLA Lavinia Salud, S.Lu. (hereinafter, the entity) domiciled at C/ Juan Ignacio Luca de Tena, 12 28027-Madrid. For the proper management of the processing of your personal data, HLA has appointed a data protection delegate to which you can go to solve any questions that need, being able to contact through the email dpo@grupohla.com.
1. Contact: Manage the data of the interested parties who contact Grupo HLA through the forms that Grupo HLA makes available to the user. Likewise, your data will be treated in order to manage the queries that you send us through the channels enabled for this purpose on our website.
2. Work with us: The processing of your data aims to develop the selection process, which implies the analysis of your professional profile through the information contained in your CV, as well as that provided during the development of the selection process through interviews, Group dynamics and emails exchanged.
3. Access to "patient portal": Manage your registration in "The Patient Portal", as well as subsequent data that could be generated through the aforementioned channel, in order to carry out the general administration of your account, maintenance, compliance, development, control and management of the requests that you register through the patient portal, as well as the management of your relationship with HLA.
4. Advertising of own products and services: After collecting the consent according to the current regulations on data protection, HLA can send it, both through postal mail and by email, SMS or other electronic media, both general and adapted advertising, adapted to its characteristics of the entity itself, related to the company's own services.
5. Profile with external sources: Based on the previously collected consent and the relevant information, HLA may prepare profiles based on information provided by third parties through marketing studies and statistical and segmentation techniques and procedures that allow customizing the offer of products and services appropriate to its characteristics and needs. This acceptance will not mean automatic decision making.
6. Other channels: In the terms provided in current regulations, HLA can also contact the interested party and collect your data through other channels such as telephone, email, apps ownership of HLA or social networks, in which case it will be informed about the purposes for the purposes for that your data will be treated, and where appropriate, your consent will be conveniently collected in each of these channels.
Data provided by the interested party, through the completion of the forms for this purpose enabled and of the relationships that establish with Grupo HLA.
The data treated for the development of the selection process are provided by the candidate either through their CV or the results of the interviews and evidence carried out or by third parties as old companies in which the candidate has worked in case of having Your consent.
Data provided by the interested party, through the completion of the forms for this purpose enabled and of the relationships that establish with HLA.
Data obtained from marketing studies in which the patient has agreed to participate and gave the consent to be used.
Depending on the service, the data discussed covers the following typology: identifying data (eg, name, surname, identity document, postal email address, telephone number).
Socioeconomic data (Economic, financial and insurance).
Transaction data of goods and services (eg payments of the services performed).
Commercial information data (eg interests in products or services).
Socio -economic data (economic, financial and insurance).
Health data.
Data processing is done because it is necessary to evaluate its profile for the correct development of the selection process to which the candidate has applied.
Similarly, the legal basis for the processing of your data is the provision of patient services by HLA.
The processing of your data related to "works with us" is based on the voluntary remission of its curriculum vitae and its conservation, by virtue of legitimate interest.
The sending of advertising and marketing of own or similar products to those hired by the interested party, or in the cases of third -party advertising, is based on the consent of the interested party that must necessarily be requested.
Their data will not be assigned, or communicated to third parties, unless expressly demanded by regulations or has the candidate's consent.
By virtue of the above, the following data communications seek to guarantee the correct development of the contractual relationship, as well as comply with legal obligations that require the aforementioned communications:
• Public Organizations and Administrations
• Professionals (doctors and administrative) and institutions that prove legitimate and necessary interest in prevention, medical diagnosis, health care, medical treatments, health services management or monitoring of the clinical process and administrative management.
• Professional Civil Liability Insurance Company for the strictly necessary purposes for the processing and management of claims protected by the coverage of the policy hired with them.
• Regular entities of files for information on patrimonial and credit solvency, both for their consultation in the legally established cases, and in case of breach of its monetary obligations.
Your data will be preserved during a year with the aim of being able to take into consideration for future vacancies. After this period of time, its suppression will be provided by the regulations, that is, being blocked and after the legal periods of prescription that are applied in each specific case, being eliminated.
Any interested party has the right to obtain confirmation on whether personal data is being treated in HLA, or not.
Similarly, as provided in the General Data Protection Regulations, the interested party may exercise the following rights:
• Access your data in order to know the processing of the personal data of the interested party carried out by HLA.
• Request the rectification when the interested party considers them inaccurate and are being treated by HLA.
• Request the limitation of the processing of your data in cases where the regulations contemplate.In these cases, HLA will retain the data subject to the limitation for the exercise or defense of claims as provided in the General Data Protection Regulations.
Likewise, the interested party is entitled, at any time, to oppose the sending of advertising by electronic means sent by HLA, and withdraw his consent, without affecting the legality of the treatment based before having lent said consent.
Likewise, the interested party may exercise the rights described above, by means address dpo@grupohla.com, indicating in both cases "data protection policy."
Finally, the data holder may file a claim before the Spanish Agency for Data Protection, especially when you have not obtained satisfaction in the exercise of their rights.