Please read this policy carefully. In it you will find important information about the processing of your personal data and your rights under current data protection regulations.

We reserve the right to update our privacy policy at any time due to business decisions, as well as to comply with any regulatory changes or case law interpretations. If you have any questions or need any clarification regarding our Privacy Policy or your rights, please contact us via the channels set out hereinbelow.

Generally speaking, the fields of our forms that are stated as mandatory fields must necessarily be completed in order to process your requests.

1. 1.Who is the data controller of your data? The data controller of your data is the healthcare center where you are provided with medical care and Juaneda Hospitales, a corporate group that operates within the health sector that said healthcare center forms part of, and that is comprised of the following centers: https://www.juaneda.es/centros 

Companies that form part of Juaneda Hospitales: Agrupación Médica Balear, S.L.; Center de Neurologia i Psicologia Medica, S.L.; Clínica Salus Menorca, S.L.; Fertility Center Mallorca, S.L.; Fisioterapia a Domicili, S.L.; Hospital General de Muro, S.L.; Juaneda Dental, S.L.; Juaneda Servicios y Procedimientos, S.L.; Juaneda Urgencias Médicas, S.L.; Servicios Integrales de Sanidad, S.L.; Servicios de Oncología y Radioterapia, S.L.

You may contact our Data Protection Officer at: dpd@juaneda.es 

1. 2.For what purposes will we process your data and what is the legal basis for said data processing? 

Medical diagnosis and provision of healthcare services and/or treatment: For this purpose, we will process your identification data, personal characteristics data, medical and family history and health data, or any other relevant specifically protected data, that you provide to us, as well as all information that is generated from the medical acts carried out during each healthcare episode and/or diagnostic tests that are carried out at our healthcare centers.

Our healthcare centers form part of the Juaneda Hospitales Group. In order to optimise resources and provide the best possible healthcare to our patients, we keep a single and common medical record, so that a patient can receive healthcare at any of them with the peace of mind that the healthcare professionals who care for our patients have all of the clinical information generated in any diagnostic test or healthcare episode carried out at any of our healthcare centers.

When, for the healthcare that the patient requires, it is necessary to use resources or services from other healthcare centers of Juaneda Hospitales or from other services or healthcare professionals with which we collaborate, we will communicate the necessary data so that the healthcare center or collaborator can carry out the service that is required. The foregoing refers to tests and/or healthcare services that cannot be performed at the healthcare center where you are being cared for, or the participation in your healthcare of an independent medical specialist who does not belong to said center.

If you go to one of our healthcare centers to carry out a diagnostic test or to receive treatment prescribed by a doctor outside of our organisation, the data and results related to the test or treatment will be communicated to the aforementioned doctor. Likewise, if you undergo a surgical intervention at one of our centers, which is performed by a medical professional outside of Juaneda Hospitales who uses our facilities to perform surgery on his/her patients, the data related to the intervention and the healthcare episode will be communicated to said professional.

The legal basis for the foregoing data processing and communications is the need to carry them out for medical diagnosis and/or the provision of healthcare services based upon the agreement between you and our center and/or your doctor, for the provision of said healthcare services. The implementation of the single medical record for all our healthcare centers responds to the need to “obtain the maximum possible integration of the clinical documentation of each patient” as provided for under Section 14(1) of Act 41/2002, of 14 November, on patient’s autonomy and rights and obligations regarding information and clinical documentation.

If you undergo a surgical intervention by which some type of surgical implant is carried out that requires traceability and/or that is billed directly by the supplier thereof, your identification data, the implanted material and, if you have medical insurance, the policy number and the insurer that assumes the cost thereof, will be communicated to said supplier. This communication is necessary for the management of the healthcare services by virtue of the services agreement with the healthcare center where you are being cared for.

Maintenance and custody of the clinical record: We will use your identification data, contact data, personal characteristics data and health data collected during each healthcare episode and/or diagnostic test to establish your clinical record and keep it based on the obligations established in Act 41/2002, of 14 November, on patient’s autonomy and rights and obligations regarding information and clinical documentation.

This clinical record constitutes a single clinical record for all the healthcare centers that form part of Juaneda Hospitales, although it differentiates between the medical acts performed at each healthcare center, thereby complying with the precept of “maximum possible integration of the clinical documentation of the patient” and with the obligation of each center to keep the records of their patients, ensuring the security thereof, as well as the correct conservation and the recovery of the information, as established in the aforementioned Act 41/2002.

Access clinical history online: If requested, you can access your healthcare information through our online platforms. To manage and control access to said platforms, we need you to provide us with your email address and mobile phone number, and authorise us to use said information for said purposes. Keep in mind that via said email and/or mobile you will be provided with access codes, which means that if other people can access the messages you receive through these channels, they could also access your clinical information. The legal basis of this data processing is your consent, which you may revoke at any time without the foregoing affecting the data processing carried out until said moment in time.

Billing of our services: We will process your identification data, together with your economic data and health data related to medical acts and health services received at our healthcare centers for billing and accounting and administrative management purposes.

This data processing is necessary for the provision of the healthcare services or treatment requested, the management of our healthcare services and compliance with our legal accounting and tax obligations.

In the event that your healthcare services are carried out under the coverage of medical insurance, we will communicate the health information related to the medical acts performed to the insurer to which the service is billed.

The legal basis for this communication is your own consent expressed in the agreement with your medical insurer.

Issuance of healthcare attendance certificates for the patient or the companion: In the event that the patient or the companion requests a healthcare attendance certificate, the identification data of the patient and the data relating to the date of the visit or the dates of admission and discharge, will be used to issue said certificate. The legal basis of the data processing is the legitimate interest of the applicant.

Commercial communications: We will process your identification and contact data, including your email address and mobile phone number, to send you commercial communications of activities, products and services of the Juaneda Hospitales Group related to health and well-being. The legal basis for said data processing is your consent, which will be requested at the time of the data collection. You may revoke your consent at any time, without the foregoing affecting the data processing carried out until said moment in time. To request your withdrawal from data processing for commercial purposes, you can click on the link provided for said purposes in our communications or alternatively send an email to: privacy@juaneda.es

Quality and satisfaction surveys: If you authorise us to do so, we will use your identification and contact data to carry out satisfaction surveys. For said purposes, it is possible that we contact you through email or the telephone numbers, landline or mobile, that you provided us as contact information at the time of requesting our services. The data collected during the survey will be used to improve the quality of our processes and services, as well as to measure the degree of satisfaction of our clients. Once the survey has been carried out, it is possible that we contact you again to ask about your particular case or resolve any questions that your answers may raise. The legal basis of this data processing is your consent, which you may revoke at any time without the foregoing affecting the data processing carried out until said moment in time.

Statistics: We use the data we have to generate statistics and data analysis in order to improve the management and efficiency of our services. For said purposes, we use aggregate data and pseudonymised data, so that in the context of these studies it is not possible to identify which patient certain information refers to. The legal basis for said data processing is our legitimate interest in measuring the efficiency of our processes and optimising the management of our resources. For the consideration of said legitimate interest with respect to your rights and freedoms, it has been determined that the data processing had a limited impact on the privacy of the interested parties by reason that pseudonymised or aggregated data is used, which in no way whatsoever allows nor aims to obtain results in relation to any specific individual.

Video surveillance: Pursuant to the provisions of the Private Security Act 5/2014, certain healthcare centers have a video surveillance system through which real-time images of users of the center are collected. The processing of this data is carried out exclusively for the purpose of security and access control to the facilities.

1. 3.Who can we disclose your personal data to?  

We can disclose your data to:

• -Other healthcare centers or professionals, especially healthcare centers that form part of Juaneda Hospitales, when necessary for the healthcare that is being provided. 

• -To the prescribing doctor in the case of results of diagnostic tests requested by your doctor when said medical professional is external to Juaneda Hospitales. 

• -To the medical professional who performs surgery at our center, when said medical professional is external to Juaneda Hospitales. 

• -The medical insurer responsible for the healthcare service, if you receive healthcare at the expense thereof and based upon the consent given in the agreement formalised with said insurer. This communication is necessary to be able to provide the service charged to the medical insurer. 

• -To the patient’s companion in the event that the patient requests a healthcare attendance certificate. 

• -Your Tour Operator, if you are treated during a trip and the patient, considering the particular circumstances of the case, wishes information to be provided thereto regarding the state of health, for example, to receive accompaniment or help in dealings with the hospital by said Tour Operator. For said purposes, you must expressly consent thereto, which you can revoke at any time, without the foregoing affecting the data processing carried out until said moment in time. 

• -Public administrations and authorities when required and when a legal obligation exists. 

• -Suppliers of prostheses or healthcare material that requires traceability or that must be invoiced directly by the supplier, in the event that it is necessary to use this type of material for the provision of the required healthcare services. This communication is necessary to be able to carry out the service. 

When any of the indicated disclosures must be carried out and when the foregoing implies the international transfer of your data to a country for which there is no adequacy decision from the Commission, or where adequate guarantees cannot be given for said transfer, the transfer will only be carried out with your prior consent or if the disclosure is necessary to protect the vital interests of the interested party and or of other natural persons and said interested party is physically or legally incapacitated for providing their consent.

1. 4.For how long will we store your personal data? Generally speaking, we will store your data during the term of your relationship with us and in any event during the periods established in the applicable legal provisions and during the time necessary to manage any potential liabilities in relation to the data processing. 

In particular, the medical history data will be stored for a minimum of five (5) years as from the discharge date of each healthcare procedure, unless applicable law provides for a longer term for specific cases. Data with tax relevance, such as invoices and proof of payment, will be kept for up to six (6) years.

The images captured through the video surveillance systems will be kept for a maximum period of thirty (30) days, unless the data controller is aware of any fact that could be relevant for any subsequent legal action.

The data processed for the sending of our communications will be processed until such time as you request your removal from our mailing lists.

1. 5.What are your rights? You have the right to obtain confirmation of whether or not we are processing your personal data and, if so, to access said data. You can also request that your data be rectified when it is inaccurate or that data that is incomplete be completed, as well as request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected. 

In certain circumstances, you may request the limitation of the processing of your data. In said situation, we will only process the data concerned for the formulation, exercise or defence of claims or with a view to protecting the rights of other people. Under certain conditions and for reasons related to your particular situation, you may also object to the processing of your data. In said situation, we will stop processing the data except for compelling legitimate reasons that prevail over your interests or rights and freedoms, or for the formulation, exercise or defence of claims. Likewise, and under certain conditions, you may request the portability of your data so that said data be transmitted to another data controller.

You can revoke the consent that you have given for certain purposes, without the foregoing affecting the legality of the data processing carried out based upon your consent prior to said revocation.

You have the right to file a claim before the Spanish Data Protection Agency.

To exercise your rights, you must send us a request by postal mail to the addresses indicated in the section “Who is the data controller of your data?” or via email to: privacy@juaneda.es

You can obtain further information about your rights and how to exercise them on the page of the Spanish Data Protection Agency at: www.aepd.es