Data Protection Policy

In compliance with EU Regulation 2016/679 General Data Protection, (hereinafter, "RGPD") and Organic Law 3/2018 of December 5 on the Protection of Personal Data and guarantee of digital rights (hereinafter "LOPDGDD"), the user is hereby informed about the way in which RIBERA SALUD, SAU (hereinafter, "RIBERA SALUD") collects and processes the personal data of users through the website. www.riberasalud.com (hereinafter, the "Website").

1. IDENTIFICATION OF THE DATA CONTROLLER

The person responsible for the processing of the user's personal data is RIBERA SALUD SAU with NIF A-03681186 and registered office at Avenida de las Cortes Valencianas, number 58, Edificio Sorolla Center, CP 46015, Valencia.

The contact telephone number is +34 963 462 591 and the email address info@riberasalud.es.

For any question related to this privacy policy, the user may contact the data protection officer of the RIBERA SALUD Group by sending an email to dpo@riberasalud.es.

2. PURPOSES OF DATA PROCESSING AND LEGITIMATING BASES OF TREATMENT.

Ribera will carry out the following data processing operations, using an appropriate legal basis for each of them, respecting the rights and freedoms of the data subjects:

2.1 Manage and respond to contact requests.

Purpose: To respond to requests and contact queries sent through the channels made available on the Website.
Legitimizing basis: Execution of the pre-contractual relationship.
Type of data processed: identification and contact data.

2.2 Manage the sending of electronic commercial communications

Purpose: To manage user subscriptions to the newsletter, sending electronic commercial communications about the services, activities, and news of the Ribera Salud Group.
Legitimate basis: User consent.
Types of data processed: identification and contact data.

2.3 Manage applications submitted through the Employment Portal.

Purpose: To manage applications submitted through the Employment Portal for current and/or future personnel selection processes for Ribera Salud Group entities.
Legitimizing basis: Execution of the pre-contractual relationship.
Types of data processed: identification data, contact data, academic and professional data, personal characteristics, and employment data.

2.4 Manage the initiatives promoted within the framework of the Ribera Life program.

Purpose: Management of initiatives promoted within the framework of the Ribera Life program, our corporate wellness program that aims to foster a collaborative work environment (e.g., Ribera Pádel Tour, contests, raffles, etc.).
Legitimate basis: Consent of the interested party.
Types of data processed: identification data, contact data and employment data.

2.5 Manage registrations for training sessions and conferences.

Purpose: To manage registrations for training sessions and conferences held at companies within the Ribera Salud Group, as requested by interested parties.
Legitimate basis: Execution of the contractual relationship.
Types of data processed: identification data, contact data, academic and professional data, and employment data.

2.6 Manage the purchase and services provided by the Minds program.

Purpose: To manage the purchase and provision of psychological services offered through the Ribera Group's Minds program, based on the highest standards of quality and excellence.
Legitimate basis: Execution of the contractual relationship.
Types of data processed: Identification data, personal characteristics data, transactions for goods and services, financial data, health data, employment data, image and voice data, as well as any other data provided by the interested party that is related to the contracted service.

2.7 Manage and respond to patient appointment requests.

The person responsible for processing your personal data is the company that owns the Ribera Salud Group healthcare center that provides you with healthcare. You can find the information at the following link: https://www.riberasalud.com/sociedades-del-grupo-ribera/:

Purpose: To enable registration on the website to allow appointment management for patient users and their families.
Legitimizing basis: Execution of the pre-contractual relationship.
Types of data processed: Identification data, contact data and data relating to personal characteristics.

2.8 Manage patient healthcare

Purpose: The provision of health care services, diagnosis and medical treatments, for the preparation and conservation of clinical and social history, and the general management of health services and other activities organized by the health center.
Legitimizing basis: Compliance with a legal obligation and execution of the contractual relationship.
Type of data processed: Identification data, personal characteristics data, transactions of goods and services, financial data, health data. The collection of personal data may be carried out at the health center or will be provided, where appropriate, by insurance companies, accident insurance companies, prevention services or by the competent public administrations.

3. RECIPIENTS OF PERSONAL DATA

3.1. Communication of data to third parties.

Your data may be transferred in accordance with the following circumstances:

The data of the interested parties may be accessible by other centers of the Ribera group (https://www.riberasalud.com/sociedades-del-grupo-ribera/) to ensure that the processing is carried out in accordance with the purposes described above (e.g., if you register for a training session at the Ribera Povisa Hospital, your data will be transferred to this Hospital for the appropriate control and management of the session).
In accordance with current legislation, your data may be communicated to the health authority and other public bodies with jurisdiction over the matter.
If you are a client of a private insurance company, your data will be shared by the group entity that provides healthcare services to the private insurance company for payment purposes.
At the request of the Tax Agency, Courts or Tribunals or other competent Public Administrations

3.2. Those in charge of treatment

User data may be processed by appropriate service providers contracted by companies within the Ribera Salud Group. These service providers will only process the data for the defined purposes.

4. INTERNATIONAL DATA TRANSFERS

The Ribera Salud Group will process user data entirely within the European Union. Therefore, it does not plan to carry out any international data transfers. If it does, it will do so with the safeguards established by law.

5. CONSERVATION PERIOD.

The Ribera Salud Group will retain users' personal data for the time necessary to fulfill the purpose for which it was processed or until the data subject requests its deletion, and in any case, for the period necessary to comply with the corresponding legal obligations.

Likewise, regarding the treatment related to the sending of electronic commercial communications, the data of the users who have consented to their reception will be kept until the user requests the cancellation of said reception, following the instructions that they will find at the bottom of each email.

6. EXERCISE OF RIGHTS REGARDING DATA PROTECTION.

At any time, the user may exercise their rights of access, rectification or deletion, opposition, limitation and portability of their data, directly by sending their request in writing accompanied by a photocopy of their ID or equivalent documentation, to the Data Protection Officer, by sending an email to the following email address. dpo@riberasalud.es or by postal mail to the following address Cortes Valencianas, number 58, Edificio Sorolla Center, Postal Code 46015 of Valencia (Spain) under the reference subject: "Data Protection".

Likewise, the user is informed that if they consider that the exercise of their rights has not been satisfied, they may file a claim with the Spanish Agency for Data Protection. More information in www.aepd.es.

Last updated: April 2025