Privacy and data protection policy

The website www.dexeus.com is owned by Consultorio Dexeus, S.A.P.

The purpose of this privacy policy is to provide information on how Consultorio Dexeus treats your personal data in accordance with current regulations on the protection of personal data.

Data controller

The data controller is Consultorio Dexeus S.A.P, with registered office in Gran Via Carles III 71-75, 08028 Barcelona and VAT number A-08.276.867.

For the treatment of patients and staff selection, Grupo Dexeus Mujer acts as data controller. The entities that make up the co-responsibility of personal data are:

  • Consultorio Dexeus SAP, with registered office in Gran Via Carles III, 71-75, 08028 Barcelona and VAT number A08276867.
  • Dexeus Dona Manresa SL, with registered office in Calle dels Caputxins, 16, 08241 Manresa, Barcelona and VAT number B63376040.
  • Dexeus Mujer Reus SL, with registered office in Paseo Prim, 2 y 4 bajos, 43202 Reus, Tarragona and VAT number B43639582.
  • Fundación Dexeus Mujer (Fundación Santiago Dexeus Font), with registered office in Gran Via Carles III, 71-75, 08028 Barcelona and VAT number A08276867.

You can contact the data protection officer by sending an email to dpd@dexeus.com, or a letter to Consultorio Dexeus, S.A.P to Gran Via Carles III, 71-75, (08028) Barcelona.

Data processing

Below is a description of the processing carried out by Consultorio Dexeus, S.A.P:

Processing

PATIENTS

Purpose

To guarantee the registration and follow-up of the medical treatment provided by the centre; ensure the care continuum between the different health and social devices; to give the necessary information for the correct billing of the provided services, to complete your medical history at the center and implement the coordination mechanisms of medical records that may be developed. To conduct scientific research and statistics on its dissociated data, with all security measures to guarantee your data privacy.
The following purposes require your prior consent: appointment reminder by SMS and newsletters.

Legitimisation

Provision of health or social care or treatment. (Art. 9.2.h) General Data Protection Regulations.

Storage period

The provided data will be kept in accordance with the health legislation in force at all times, currently in Law 21/2000 on the rights of information concerning the health and autonomy of the patient, and clinical documentation, which provides for a period of fifteen years from the date of registration of each healthcare process in relation to the relevant documentation and a period of five years for the rest.

Recipients

Recipients are not foreseen.

International data transfers

International transfers are not foreseen.

 

Processing

WEB CONTACT AND ELECTRONIC COMMUNICATIONS

Purpose

To provide information on services and appointments request. If the electronic communications sending is authorised, we will periodically send you an email regarding Grupo Dexeus Mujer activities and news that may be of interest to you.

Legitimisation

Consent. (Article 6.1 a) General Data Protection Regulations. You can revoke your consent at any time.

Storage period

Applicants data will be collected to respond to the requests and will then be destroyed. The email will be used for sending electronic communications until you revoke your consent.

Recipients

Recipients are not foreseen.

International data transfers

International transfers are not foreseen.

 

Processing

VIDEO MONITORING

Purpose

Ensure the safety of persons, goods and facilities.

Legitimisation

Fulfilment of a public interest mission. (Article 6.1 e) General Data Protection Regulation.

Storage period

The data shall be stored for one month. Except in cases where they are requested by the Security Forces and Corps or by Courts or Tribunals.

Recipients

Security Forces and Corps. Courts and Tribunals.

International data transfers

International transfers are not foreseen.

Is it mandatory to provide all the data?

When the data are requested to process the desired action, the necessary nature of the data considered essential shall be informed. If the mandatory data are not provided, it will not be possible to process the request.

How to exercise your data protection rights?

If the processing of your personal data is based on consent, you can revoke the authorisation at any time by writing to the data protection officer at dpd@dexeus.com.

You can exercise your rights of access, rectification, deletion, opposition, portability and limitation by writing to the data controller Consultorio Dexeus SAP, based in Gran Via Carles III 71-75, 08028 Barcelona and VAT number A-08.276.867 or by contacting the data protection officer at the email dpd@dexeus.com. In any case, a photocopy of your identity card or equivalent must be attached. Once the request has been submitted, and the applicant has been identified, he or she will be informed of the proceedings arising from the request within one month. In the case of particularly complex applications, the period may be extended to a further two months (up to a maximum of 3 months), always informing of the extension of the period within the first month. You are also informed of your right, if you do not agree with the processing carried out by our Entity or consider that your rights have been infringed, to lodge a complaint at any time with the competent data protection Authority.