Privacy Policy


Introduction


At CENTRO DE SALUD VIRGEN DEL CARMEN SL, we have a high level of commitment to personal privacy, so the protection of your personal data is a priority for us.

We process data in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), and other applicable regulations.

This Privacy Policy was revised in July 2025 to comply with our obligations to provide information and transparency. Changes may apply until its next revision.


Who is responsible for the processing of your data?


  • Responsible: VIRGEN DEL CARMEN HEALTH CENTER SL
  • NIF: B53626875
  • Address: Calle Blasco Ibáñez, 25, Local 1, 03330, Crevillent (Alicante), Spain.
  • Email: info@clinicavirgendelcarmen.com


What is the origin and type of data we process?


The information we process may come from paper or digital forms, communications via email, messaging, telephone, or directly from the patient or user in the context of providing our services.


As we are a healthcare facility, the categories of data we may process include:

  • Identification data: Name and surname, ID, image, date of birth, etc.
  • Contact information: Postal address, email, telephone.
  • Health data: Information related to your medical history, diagnoses, treatments, medical tests, and any other information necessary for the provision of healthcare. This data is considered a special category and receives the highest protection.
  • Financial and insurance information: Bank or credit card details for payment of services, information from medical insurers.
  • Personal and professional data: Only when relevant to the service (for example, in the context of occupational medicine or for managing job applications).


MANDATORY OR OPTIONAL NATURE OF THE INFORMATION


The interested party, by marking the corresponding boxes and entering data in the fields marked as mandatory (for example, with an asterisk * ) in the forms, you expressly, freely, and unequivocally agree that your data is necessary to process your request. The inclusion of data in the remaining fields is voluntary.


The interested party guarantees that the personal data provided is accurate and undertakes to communicate any changes to it. The data requested and marked as mandatory are necessary for the provision of an optimal service. If not all data is provided, there is no guarantee that the information and services provided will be fully tailored to the user's needs.


For what purpose do we process your personal data?


We process your data to properly carry out our healthcare and management activities. The main purposes are:

  • Patients and users:
  • Provision of healthcare and management of your medical history.
  • Management of appointments, reminders, and service-related communications.
  • Administrative and billing management of the services provided.
  • Suppliers and collaborators: Management and maintenance of the commercial and contractual relationship.
  • Job candidates: Management of received resumes and personnel selection processes.
  • Web users: Respond to queries and requests received through our forms or contact methods.


OTHER PURPOSES


  • Video surveillance: To ensure the safety of people and property on our premises, based on our legitimate interest.
  • Commercial communications: Sending information about our services, news, or promotions, provided we have your explicit consent.


How long will we retain your data?


Personal data will be retained for the time strictly necessary to fulfill the purpose for which it was collected. In the case of health data and medical records, the retention periods established by specific health legislation will apply.

Once the relationship has ended, the data will be kept locked for the duration of the statutory limitation periods. We maintain a list of retention periods to manage the different applicable periods. After this period, the data will be securely deleted.


What is the legitimacy for processing your data?


The legal bases that allow us to process your data are:

  • The execution of a contract for the provision of health services.
  • The explicit consent of the interested party, especially for the processing of health data and for the sending of commercial communications.
  • Compliance with a legal obligation (for example, tax or health regulations).
  • The legitimate interest of the company (for example, for the management of security through video surveillance).


To which recipients will your data be communicated?


Your data will not be disclosed to third parties by default, except in the following cases:

  • To insurance companies for the management of services covered by their policy.
  • To other healthcare professionals or medical centers by referral or consultation, always with your prior consent.
  • To laboratories or other entities for the performance of diagnostic tests.
  • To the competent Public Administrations by legal obligation (Treasury, Health, etc.).
  • To data processors (consultants, software providers, etc.) who provide us with a service and who have signed the corresponding confidentiality and data protection agreement.


What are your rights?


As an interested party, you may exercise the following rights at any time:

  • Access: Confirm whether we are processing your data and access it.
  • Rectification: Request the modification of inaccurate or incomplete data.
  • Deletion: Request the deletion of your data when, among other reasons, it is no longer necessary.
  • Restriction of processing: Request that the processing of your data be restricted in certain circumstances.
  • Portability: Receive your data in a structured, commonly used, machine-readable format.
  • Opposition: Oppose the processing of your data for reasons related to your particular situation.
  • Revoke consent: Withdraw the consent given at any time, without affecting the legality of the previous processing.


To exercise your rights, you can contact us by email at info@clinicavirgendelcarmen.com or by mail to Calle Blasco Ibáñez, 25, Local 1, 03330, Crevillent (Alicante), enclosing a copy of your ID.


If you believe your rights have not been properly respected, you have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es).


Data security


We have adopted the necessary technical and organizational measures in our information system to guarantee an adequate level of security, especially in the processing of health data, in order to protect the rights and freedoms of data subjects and prevent unauthorized alteration, loss, or access to data.


However, to the extent permitted by law, we assume no liability for damages resulting from alterations that third parties may cause to our system. Any security breach will be promptly and appropriately reported to the competent authority.


Sending communications or information


Our policy regarding the sending of information by electronic means (email, etc.) is limited to sending only communications that we consider of interest or that you have consented to receive.

If you prefer not to receive these commercial messages, we will offer you the opportunity to cancel and opt out of receiving them, in accordance with Law 34/2002 on Information Society Services and Electronic Commerce.


Social networks


The company may have social media profiles. The processing of the data of those who become followers will be governed by this privacy policy and the terms of use and privacy policies of the corresponding social media platform. We will process your data for the purpose of properly managing our presence on the social media platform, providing information about activities, products, or services.

The user is primarily responsible for the privacy of their profile and the content they publish. The company will not knowingly collect personal information from minors under the age of 14 through these channels.


Employment and candidate management


Those interested in accessing our job offers can send us their information through the channels provided. This data will be processed for the purpose of managing your application for current or future selection processes, based on your consent.

The data provided will be deleted, ensuring its confidentiality, if the application is no longer of interest or once it is no longer necessary for the purpose for which it was collected.