JUANEDA ensures that data protection policies are in place to protect the personal data of its patients and any interested parties. Accordingly, pursuant to Regulation (EU) 2016/679 of the Parliament and of the Council of 27 April 2016, on the protection of individuals and the processing of their personal data and on the free flow thereof (hereinafter referred to as the "GDPR"), JUANEDA informs the Interested Parties of the following:
1. SOURCE OF DATA
Pursuant to the provisions of Regulation (EU) 2016/679 concerning the processing of personal data, we inform you that the person responsible for processing your data is the JUANEDA centre, which assists and/or provides your healthcare services, or if you have subscribed to our newsletter or have requested information about our services and/or products offered through the websites, the data controller is the person who sends you the newsletter.
2. DATA CATEGORIES
We process the following categories of personal data for the purposes of your relationship with us:
(i) Identification and contact details of patients or their representatives including their name and surnames, nationality, address, contact details (telephone, email), marital status, signature, photograph, healthcare card, social security or insurance number;
(ii) Personal characteristics;
(iii) Transactional data related to payments, bank deposits, transfers, direct debits;
(iv)Health-related data, incorporated into the patient's medical history.
3. PURPOSE OF THE PROCESSING
The purposes for which the JUANEDA data controller processes personal data include but are not limited to the following:
(i) Provide healthcare services requested or specified by the patient and the management of administrative services necessary for effective healthcare including:
a. Managing complaints, requests and suggestions made by the patient;
b. Management, validation and payment control for the services provided; Management of visits, appointments and check-ups;
c. Conducting internal surveys;
d. Providing remote access (online) to medical results (i.e., tests, etc.) through platforms enabled by JUANEDA.
e. Managing access control, stay and length of time in our facilities;
(ii) Providing the information required by the Interested party.
(iii) Sending messages to market our products and services, newsletters, as well as special offers, even by electronic means, provided that you have previously authorised it.
(iv) To comply with the legal or statutory obligations to which JUANEDA is subject.
(v) Security and access control to the facilities via video surveillance, through which images are collected in real time of people accessing the centre.
(vi) Scientific research purposes, always with the express prior consent of the interested party.
Thus, the data collected will be processed for said purposes, regardless of the means of communication used to contact the corresponding JUANEDA centre (in person at the healthcare centre, mobile applications, website of the centre, telephone or email).
You are hereby informed that, although you are not obliged to answer all the questions you are asked when collecting you personal data, we request your collaboration so that any information given is as accurate, truthful and complete as possible so that we can provide the best possible diagnosis and treatment(patients) or information requested (website users or general public). The data requested is necessary and failing to provide it may mean that it is not possible to establish the desired patient/centre relationship. If you are representing a minor or a disabled person, you will be requested to certify your status, for the benefit of the represented party, and you will be required to provide documentation to that effect. Your signed consent shall be requested to use this data for any other purposes.
The legal basis to legitimise said processing of your data is:
(i) The free and express consent of the Interested Party;
(ii) The legitimate interest of the data controller in providing adequate healthcare, responding to requests from the interested party, complying with contractual and legal obligations and, if necessary, managing video surveillance systems;
(iii) The execution of contracts in which the Interested Party is involved;
(iv) Compliance with legal obligations;
(v) The data processing required for scientific research.
JUANEDA hereby informs you that it will process the data in a lawful, fair, transparent, adequate, relevant, limited, accurate and up-to-date manner.
All the information provided shall be treated as confidential, particularly data related to health. All professionals and staff on the workforce are obliged to safeguard its content with the required secrecy and confidentiality, in accordance with Law 14/1986 on General Health and the Law 14/1986 on Patient Autonomy, the Regulation (EU) 2016/679 on Personal Data Protection and other related provisions.
All information provided will be treated confidentially and please note that we take all necessary technical and organisational measures to prevent access by unauthorised third parties.
6. CONSERVATION PERIOD
The data provided by the Interested party will only be kept for the time strictly necessary for the purpose for which it was collected.
(i) Personal data derived from healthcare provision shall be kept for at least 5 years from the date of discharge from each healthcare process, unless regulatory or sector development require the contrary.
(ii) Processing of data collected for sending newsletters to which the Interested Party has subscribed will be kept until the Interested Party decides to withdraw its consent, unsubscribe and/or exercise its rights of opposition and/or elimination, as the case may be.
(iii) Personal data processed to manage, including but not limited to, requests for information from JUANEDA, claims, exercise of access rights, requests and suggestions sent by the Interested Party will be kept for the legally established time, or for the time necessary to process the application or for the formulation, exercise or defense of claims.
(iv) Personal data processed to comply with legal obligations shall be kept for the period of time established in the applicable legislation.
(v) Personal data processed to fulfill contractual obligations shall be kept for the duration of the contractual relationship or, as the case may be, during the period necessary for the formulation, exercise or defense of claims.
(vi) Images captured through video surveillance systems will be kept for a maximum period of 30 days after their recording, except when they have to be kept for the corresponding limitation period, as evidence of acts which violate the integrity of people, property or facilities.
(vii) Personal data processed for scientific research purposes shall be kept for an unlimited period of time, with the prior consent of the patient or after said data has been rendered anonymous.
7. TRANSFER OF DATA TO THIRD PARTIES
Patients: In order to guarantee adequate provision of healthcare services, it is necessary for entities of the Red Asistencial Juaneda Healthcare Network, external collaborators and/or certain service providers including but not limited to medical, video surveillance, archiving, destruction of stored documents, legal advisory and computer services (hosting, software providers) to process data on behalf of the person responsible as data controllers.
Web users and the general public: In order to maintain the relationship with you and provide you with the required information, it is necessary for the entities of the Red Asistencial Juaneda Healthcare Network, external collaborators and/or certain service providers, including but not limited to video surveillance, legal advisory and computer services (hosting, software providers), to process data on behalf of the person responsible as data controllers.
The Interested Parties data will not be disclosed to third parties, except with the prior consent of the former, legitimate interest of the data controller or due to a legal obligation, except in the following cases and to the following recipients:
(i) insurance companies to which the patient is a beneficiary,
(ii) public authorities or a third party in the case of liability insurance,
(iii) hotels or tour operators who channel the relationship with the insurer), whenever the patient so indicates,
In such cases, the Centre may provide information on services rendered to said entities, including personal data of the patient, for the purpose of managing, coordinating and processing the payment for the services rendered by the JUANEDA centre, otherwise, it would not be possible to provide healthcare services due to not being able to bill properly.
If the patient has an insurance contract with an insurance company located outside the European Economic Area whose legislation does not provide adequate guarantees equivalent to those set out in the GDPR, an international data transfer may be necessary. Such transfers take place with the explicit prior consent of the patient and after fully informing him/her, with the exclusive purpose of being able to provide the patient healthcare services and facilitating the management and payment verification for the services provided.
(iv) Furthermore, in cases where, due to the treatment provided, it is necessary to use a prosthesis or other specific surgical material, your personal data may be provided to the suppliers, solely and exclusively for this purpose.
(v) The data may also be disclosed to ambulance service providers and to any other collaborators who may be required to provide the services, informing the Interested Party, in accordance with the provisions of the GDPR.
(vi) To transfer their data to the Balearic Islands Healthcare Service in the cases provided for by law, to consulates and Law enforcement bodies (upon prior request of police, judicial, tax authorities);
In the event that you oppose or fail to agree with these circumstances, please inform the JUANEDA centre before receiving the healthcare service. The contracts entered into with the aforementioned third parties, pursuant to the provisions of the GDPR, guarantee that the data provided will be processed solely and exclusively for the specific, explicit and legitimate purposes for which it was obtained and it will not be disclosed to entities outside the contractual relationship with these third parties, unless legally stipulated otherwise.
8. ACCESS RIGHTS
We inform you that you have the possibility to exercise at any time and free-of-charge, except in the cases of art. 12.5 of Regulation (EU) 679/2016, the right to access your information contained in the entity’s processing systems, as well as its rectification, cancellation and opposition, processing limitation, data portability, withdrawal of consent without being subject to automated individualised decisions. You can exercise these rights by writing to <<firstname.lastname@example.org>>, enclosing a copy of your national identity document, passport or other valid document that can be used for the purpose of identification. You are entitled to ask the DPO any questions relating to the processing of your personal data, by emailing <<email@example.com>>, or by submitting a complaint to the control authority, which in Spain is the Spanish Data Protection Agency (AEPD), if you feel it is appropriate.
|Basic Information on Data Protection|
|Data controller||RED ASISTENCIAL JUANEDA: Agrupación Medica Balear, S.L.; Centre de Neurologia i Psicologia Medica, S.L.; Clínica Salus Menorca, S.L.; Clínica Scandinavica Playa del Inglés, S.A.; Fertility Center Mallorca, S.L.; Fisioterapia a Domicili, S.L.; Hospital General de Muro, S.L.; Juaneda Dental, S.L.; Juaneda Servicios y Procedimientos, S.L.; Juaneda Urgencias Médicas, S.L.; Saniconsult Ibérica, S.L.; Servicios Integrales de Sanidad, S.L.; Servicios de Oncología y Radioterapia, S.L.|
|Main purpose of the treatment|| Your data may be used for the following purposes: |
i) Management of the hospital's health and administration services, necessary for the integral healthcare of the patient;
ii) To send you reminders of your appointments or check-ups, including by instant messaging, with your prior consent.
iii) Management, validatation and payment control for the services provided;
iv) Issuing of doctor’s notes for the health care services provided;
v) Sending of marketing messages on our products and services, newsletters, and special offers, always with the prior consent of the patient.
vi) To conduct internal surveys aimed at improving the quality of our healthcare services and how they are managed.
|Recipients|| Your personal data will not be transferred to third parties, except in cases of legal obligation, vital or legitimate interest, provision of the service or prior consent of the interested party. It may be necessary for the provision of the service and only relevant and adequate data considered necessary will be disclosed for the purpose indicated to: |
(i) For contracted Spanish or international general insurance and/or health insurance companies, for the sole purpose of managing how the care services provided are paid for.
(ii) Law enforcement bodies (upon prior request of police, judicial, tax authorities).
(iii) Red Asistencial Juaneda healthcare network centres (https://www.juaneda.es/centros/)
|Legitimisation of data processing||Data is only processed once the patient or interested party has given their consent when requesting an appointment online.|
|Rights||You may exercise your rights of access, rectification, cancellation, opposition, limitation of processing or portability of data, and not to be subject to individualised automated decisions. You may also revoke your consent after giving it by firstname.lastname@example.org, attaching a photocopy of your identity document, passport or other valid identification document. You are entitled to ask the DPO any questions relating to the processing of your personal data to the address indicated, by submitting a complaint to the Spanish Data Protection Agency (AEPD), if you feel it is appropriate.|
|Held until||Your data will only be kept for the time that is strictly necessary for the purpose for which it was collected.|