In compliance with EU Regulation 2016/679 General Data Protection, (hereinafter, "RGPD") and Organic Law 3/2018 of December 5 on the Protection of Personal Data and guarantee of digital rights (hereinafter "LOPDGDD"), the user is hereby informed about the way in which RIBERA SALUD, SAU (hereinafter, "RIBERA SALUD") collects and processes the personal data of users through the website. www.riberasalud.com (hereinafter, the "Website").
1. IDENTIFICATION OF THE DATA CONTROLLER
The person responsible for the processing of the user's personal data is RIBERA SALUD SAU with NIF A-03681186 and registered office at Avenida de las Cortes Valencianas, number 58, Edificio Sorolla Center, CP 46015, Valencia.
The contact telephone number is +34 963 462 591 and the email address info@riberasalud.es.
For any question related to this privacy policy, the user may contact the data protection officer of the RIBERA SALUD Group by sending an email to dpo@riberasalud.es.
2. PURPOSES OF DATA PROCESSING AND LEGITIMATING BASES OF TREATMENT.
Ribera will carry out the following data processing operations, using an appropriate legal basis for each of them, respecting the rights and freedoms of the data subjects:
2.1 Manage and respond to contact requests.
- Purpose: To respond to requests and contact queries sent through the channels made available on the Website.
- Legitimizing basis: Execution of the pre-contractual relationship.
- Type of data processed: identification and contact data.
2.2 Manage the sending of electronic commercial communications
- Purpose: To manage user subscriptions to the newsletter, sending electronic commercial communications about the services, activities, and news of the Ribera Salud Group.
- Legitimate basis: User consent.
- Types of data processed: identification and contact data.
2.3 Manage applications submitted through the Employment Portal and carry out personnel selection processes.
- Purpose: To manage applications submitted through the Employment Portal for current and/or future personnel selection processes at Ribera Salud Group entities. This involves contacting job candidates (via email, telephone, or instant messaging) and conducting interviews and other activities within the selection process to assess their suitability for the vacant position.
The Ribera Group's People Team relies on artificial intelligence solutions to carry out the selection processes in the most efficient, objective, and transparent manner, both in analyzing information and conducting candidate interviews. Anyone applying for a selection process at any of our Group's entities will be able to receive messages via the WhatsApp instant messaging app (WhatsApp Legal Resources), during which our virtual assistant will invite you to maintain contact regarding your application (by text message or phone, at the candidate's discretion), in order to gather all the information necessary to evaluate your application. The content of the candidate's interactions with our virtual assistant (text messages, audio recordings, or phone call recordings) is recorded so that the HR department's decision is as informed and objective as possible. In any case, if you have any questions about the operation of our selection process, candidates can contact our team via email: empleo@riberasalud.es - Legitimate basis: Execution of the pre-contractual relationship.
- Types of data processed: identification data, contact data, academic and professional data, personal characteristics, employment data, and any other data provided by the candidate during the selection process (any other data contained in the CV, information provided during interactions with our virtual assistant, the content of communications that the candidate may send us in relation to their selection process, etc.).
2.4 Manage the initiatives promoted within the framework of the Ribera Life program.
- Purpose: Management of initiatives promoted within the framework of the Ribera Life program, our corporate wellness program that aims to foster a collaborative work environment (e.g., Ribera Pádel Tour, contests, raffles, etc.).
- Legitimate basis: Consent of the interested party.
- Types of data processed: identification data, contact data and employment data.
2.5 Manage registrations for training sessions and conferences.
- Purpose: To manage registrations for training sessions and conferences held at companies within the Ribera Salud Group, as requested by interested parties.
- Legitimate basis: Execution of the contractual relationship.
- Types of data processed: identification data, contact data, academic and professional data, and employment data.
2.6 Manage the purchase and services provided by the Minds program.
- Purpose: To manage the purchase and provision of psychological services offered through the Ribera Group's Minds program, based on the highest standards of quality and excellence.
- Legitimate basis: Execution of the contractual relationship.
- Types of data processed: Identification data, personal characteristics data, transactions for goods and services, financial data, health data, employment data, image and voice data, as well as any other data provided by the interested party that is related to the contracted service.
2.7 Manage and respond to patient appointment requests.
The person responsible for processing your personal data is the company that owns the Ribera Salud Group healthcare center that provides you with healthcare. You can find the information at the following link: https://www.riberasalud.com/sociedades-del-grupo-ribera/:
- Purpose: To enable registration on the website to allow appointment management for patient users and their families.
- Legitimizing basis: Execution of the pre-contractual relationship.
- Types of data processed: Identification data, contact data and data relating to personal characteristics.
2.8 Manage patient healthcare
The person responsible for processing your personal data is the company that owns the Ribera Salud Group healthcare center that provides you with healthcare. You can find the information at the following link: https://www.riberasalud.com/sociedades-del-grupo-ribera/:
- Purpose: The provision of health care services, diagnosis and medical treatments, for the preparation and conservation of clinical and social history, and the general management of health services and other activities organized by the health center.
- Legitimizing basis: Compliance with a legal obligation and execution of the contractual relationship.
- Type of data processed: Identification data, personal characteristics data, transactions of goods and services, financial data, health data. The collection of personal data may be carried out at the health center or will be provided, where appropriate, by insurance companies, accident insurance companies, prevention services or by the competent public administrations.
2.9 Manage and respond to complaints, thanks and suggestions
The company to which you address your complaint, gratitude, or suggestion is responsible for processing your personal data. You can find the information at the following link: https://www.riberasalud.com/sociedades-del-grupo-ribera/:
- Purpose: To manage complaints, acknowledgements, and suggestions submitted through the communication channels made available on the Website.
- Legitimizing basis: Compliance with a legal obligation and execution of the contractual relationship.
- Types of data processed: Identification data, personal characteristics data, health data, as well as any other data provided by the interested party that is related to the complaint, acknowledgement, or suggestion.
3. RECIPIENTS OF PERSONAL DATA
3.1. Communication of data to third parties.
Your data may be transferred in accordance with the following circumstances:
- The data of the interested parties may be accessible by other centers of the Ribera group (https://www.riberasalud.com/sociedades-del-grupo-ribera/) to ensure that the processing is carried out in accordance with the purposes described above (e.g., if you register for a training session at the Ribera Povisa Hospital, your data will be transferred to this Hospital for the appropriate control and management of the session).
- In accordance with current legislation, your data may be communicated to the health authority and other public bodies with jurisdiction over the matter.
- If you are a client of a private insurance company, your data will be shared by the group entity that provides healthcare services to the private insurance company for payment purposes.
- At the request of the Tax Agency, Courts or Tribunals or other competent Public Administrations
3.2. Those in charge of treatment
User data may be processed by appropriate service providers contracted by companies within the Ribera Salud Group. These service providers will only process the data for the defined purposes.
4. INTERNATIONAL DATA TRANSFERS
The Ribera Salud Group will process user data entirely within the European Union. Therefore, it does not plan to carry out any international data transfers. If it does, it will do so with the safeguards established by law.
5. CONSERVATION PERIOD.
The Ribera Salud Group will retain users' personal data for the time necessary to fulfill the purpose for which it was processed or until the data subject requests its deletion, and in any case, for the period necessary to comply with the corresponding legal obligations.
Likewise, regarding the treatment related to the sending of electronic commercial communications, the data of the users who have consented to their reception will be kept until the user requests the cancellation of said reception, following the instructions that they will find at the bottom of each email.
6. EXERCISE OF RIGHTS REGARDING DATA PROTECTION.
At any time, the user may exercise their rights of access, rectification or deletion, opposition, limitation and portability of their data by sending an email to the following email address dpo@riberasalud.es or by postal mail to the following address, Cortes Valencianas, number 58, Sorolla Center Building, Postal Code 46015 of Valencia (Spain) under the reference subject: “Data Protection”.
Likewise, the user is informed that if they consider that the exercise of their rights has not been satisfied, they may file a claim with the Spanish Agency for Data Protection. More information in www.aepd.es.
7. UPDATES
The organization reserves the right to modify the contents of this Website at any time, and may add new features and modify the current policy. In such cases, a corresponding update will be posted on the Website so that users are aware of any changes.
Last updated: June 2025





