PRIVACY POLICY

In compliance with the General Data Protection Regulation, we inform you:

1. Data Controller. Who will process your data?

MEDICAL SERVICE JIM S.L, with CIF:B93360733 and with address for the purposes of this contract at Alameda Principal 21, 7º4 29001 MALAGA – MALAGA

2. Data protection contact

Contact: secretaria@medicalservice.care

3. Purpose. What will your data be used for?

3.1 If you access the facilities of our clinic, to guarantee the security of the premises through video surveillance.

3.2 If you exercise a right related to data protection: To manage the obligations of attending to the exercise of rights related to the protection of data of individuals.

3.3 If you are notified of a security breach: to manage and assess any security breaches that occur.

3.4 If you send your resume to participate in selection processes: To manage job candidates through selection processes.

3.5 If you are a patient, we will process your health data, which is essential for the provision of this service.

3.6 If you have a business or administrative relationship with us: If you are a party to a contract as a self-employed individual or a natural person, the purpose is to maintain and develop the contractual relationship. If, as a party to a contract, you are a representative or contact person of a legal entity, the purpose is to maintain contact with the entity you represent or work for.

3.7 If you are a natural person or a contact person of a legal entity or a sole proprietor to manage communication actions, doubts and queries that you may make to us.

4. Retention periods or criteria. How long will we keep your data?

4.1 If you access the facilities of our clinic, 1 month from the date of recording by our cameras.

4.2 If you exercise a right related to data protection: your data will be kept for three years from the date the right is fulfilled. Statute of limitations for very serious infringements.

4.3 If you are notified of a security breach: your information will be kept for three years from the date the right to service is terminated. Statute of limitations for very serious offenses.

4.4 If you send your resume to participate in selection processes: for the time necessary to fulfill the purpose for which it was collected and to determine possible responsibilities and address any claims that may be filed against the entity in the future, and in the case of keeping your data for subsequent selection processes as long as you do not request its deletion.

4.5 If you are a patient, we will keep them in accordance with Law 41/2002, of November 14, basic regulating the autonomy of the patient and rights and obligations in matters of information and clinical documentation, up to 5 years after the care.

4.6 If you have a business or administrative relationship with us: if you are a party to a contract and are self-employed or a natural person, your data will be kept for the time necessary to fulfill the purpose for which it was collected and to determine any potential liabilities and address any claims that may be filed against the entity in the future. If you are a representative or contact person of a legal entity, your data will be kept for as long as you maintain your representation or professional position, or until you request its deletion.

4.7 If you are a contact person of a legal entity or a sole proprietor and the legal entity or your company is to be the recipient of our commercial offers, we will keep your information until you exercise your right to object.

4.8 If you are a student or interested party, we will keep them indefinitely unless you tell us otherwise, in order to have the corresponding certificates and/or diplomas available.

5. Legal basis: Why are we legally entitled to process your personal data?

5.1 If you access our clinic facilities, we guarantee security based on legitimate interest.

5.2 If you exercise a right related to data protection: Because the processing is necessary for compliance with a legal obligation applicable to the controller (Article 6.1.c) of Regulation (EU) 2016/679 General Data Protection Regulation).

5.3 If you are notified of a security breach: Because the processing is necessary for compliance with a legal obligation applicable to the controller (Article 6.1.c) of Regulation (EU) 2016/679 General Data Protection Regulation).

5.4 In the event that you send your CV to participate in selection processes: Because the processing is necessary for the application of pre-contractual measures (Article 6.1.b) of Regulation (EU) 2016/679 General Data Protection Regulation).

5.5 If you are a patient, we are authorized by the consent you have given us either in the patient registration form or by checking the box in the case of the website.

5.6 If you have a business or administrative relationship with us: If you are a party to a contract and are self-employed or a natural person, the purpose of the processing is to maintain and develop the contractual relationship. We are authorized to do so because it is permitted by Article 9.2.c) of Regulation (EU) 2016/679 (General Data Protection Regulation), as it is necessary for the performance of a contract or for the application of pre-contractual measures at the request of the data subject. If you are a party to a contract as a representative of a legal entity or are a contact person of that legal entity, we are authorized to process your data because the processing is necessary for the satisfaction of legitimate interests pursued by the controller or by a third party (Article 6.1.f) of Regulation (EU) 2016/679 (General Data Protection Regulation).

5.7 If you are a contact person of a legal entity or a sole proprietor and the legal entity or your company is to be the recipient of our commercial offers
Because the processing is necessary for the satisfaction of legitimate interests pursued by the controller or by a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data (Article 6.1.f) of Regulation (EU) 2016/679 General Data Protection Regulation.

5.8 If you are a student or interested party, with the consent you give us in the forms for this purpose.

6. Obligation to provide your data Why are you or are you not obliged to provide your data? 

6.1 If you are a patient, your data is necessary for the correct care and follow-up of your medical history or diagnostic tests.

6.2 If you have a business or administrative relationship with us as a supplier and you need to sign a contract: You have the obligation to provide us with your data because it is necessary to carry out the contract; therefore, refusal to provide it prevents us from signing said contract.

7. To which recipients will your data be communicated or transferred?

7.1 If you access the facilities of our clinic, to the State Security Forces and Corps in case of an incident.

7.2 If you exercise a right related to data protection: the data may be communicated to the Spanish Data Protection Agency. Compliance with a legal obligation applicable to the data controller (Article 6.1.c) of Regulation (EU) 2016/679 General Data Protection Regulation).

7.3 If you are notified of a security breach: your data will be reported to the Spanish Data Protection Agency. This is in compliance with a legal obligation applicable to the data controller (Article 6.1.c) of Regulation (EU) 2016/679, the General Data Protection Regulation). Your data may also be reported to the State Security Forces and Corps.

7.4 In the event that you send your resume to participate in selection processes
The data will not be transferred to third parties, nor will we make any international transfers of the data to third countries or international organizations.

7.5 If you are a patient, we will not disclose your data except where legally required.

7.6 If you have a business or administrative relationship with us: If you are a party to a contract and are self-employed or an individual, your data will be sent to banks, savings banks, and rural banks for the payment and collection of invoices and expenses related to fulfilling contractual obligations. The corresponding tax return forms will be submitted to the Tax Agency (Agencia Tributaria) in accordance with Law 58/2003 of December 17, General Tax Law. If you are a party to a contract as a representative of a legal entity or are a contact person for that legal entity, we will not disclose your data to third parties unless legally obligated to do so. We will not transfer your data internationally to third countries or international organizations.

7.7 If you are a contact person of a legal entity or a sole proprietor and the legal entity or your company is to be the recipient of our commercial offers
The data will not be transferred to third parties, nor will we make any international transfers of the data to third countries or international organizations.

8. What are your rights when you provide us with your data and how can you exercise them?

8.1 Right of access: Right to obtain confirmation as to whether or not MEDICAL SERVICE JIM SL is processing personal data concerning you.

8.2 Right of rectification: Right to request the modification or rectification of your data if it is inaccurate

8.3 Right to erasure: Right to request that your data be erased or deleted due to unlawful data processing, the disappearance of the purpose that motivated the processing or collection, or when you revoke your consent or oppose its processing.

8.4 Right to restriction of processing If you contest the accuracy of the data, while we verify its accuracy, or if you have exercised your right to object to the processing of data, while we verify whether the legitimate grounds of the controller override your rights.

8.5 Right to the retention of your data · If the processing is unlawful and we oppose the deletion of the data by requesting the limitation of its use · If the data are needed for the formulation, exercise or defense of claims.

8.6 Right to data portability: In a structured, commonly used and machine-readable format, provided that it is technically possible for portability and when they have been used/processed with your consent or because there is a contract.
You can exercise these rights, along with a copy of a document that proves your identity, before the Data Protection Officer whose contact details we have included in the question about this role.

Furthermore, you have the right

• To revoke the consent given: If the processing is based on consent, you have the right to revoke it.

• To file a complaint: You can always go to the Data Protection Officer, and you also have the right to file a complaint with the Spanish Data Protection Agency.