Grupo Ribera Salud is committed to respecting the privacy of users and the protection and security of their personal data. This is why, in accordance with current regulations on data protection (Regulation (EU) 2016/679 of the Parliament and of the Council of April 27, 2016, Organic Law 3/2018, of December 5, Protection of Personal Data and guarantee of digital rights), Grupo Ribera Salud informs in this data protection policy about how it collects and processes the personal data of users and patients on the website. https://riberasalud.com/povisa/ . (hereinafter referred to as “Website”).
1. IDENTIFICATION OF THE DATA CONTROLLER
The person responsible for the processing of personal data is Hospital Povisa S.A., (hereinafter, “Hospital Ribera Povisa”) with CIF A-36.606.788 and registered office C/ Salamanca, 5, 36211 Vigo, Pontevedra (Spain).
The contact telephone number is +34 986 41 31 44 and the email address info@povisa.es.
For any question related to this privacy policy, the user may contact the data protection officer of Hospital Povisa, SA by sending an email to dpd@povisa.net.
Without prejudice to the foregoing, regarding the processing related to the management of sending newsletters, the data controller is RIBERA SALUD, SAU, with CIF A-03681186 and registered office at Avenida Cortes Valencianas, number 58, Edificio Sorolla Center, 46015 Valencia. (Spain).
2. INFORMATION ON THE PURPOSES OF THE TREATMENT
The following data processing will be carried out through the Website, using an appropriate legitimizing basis for each of them, respecting the rights and freedoms of the interested parties:
2.1 Manage and respond to contact requests.
- Purpose: respond to contact requests made by the user through the means made available on the website (email, telephone and contact form).
- Legitimizing basis: execution of the pre-contractual relationship.
- Type of data processed: Identification data and contact data.
2.2 Manage and respond to patient appointment requests
- Purpose: answer appointment requests made by patients or users through the means made available on the website (email, telephone and contact form).
- Legitimizing basis: execution of the pre-contractual relationship.
- Type of data processed: Identification data, contact data and the voice of users in those calls in which they are informed about their recording.
2.3 Patient healthcare management
- Purpose: The provision of health care services, diagnosis and medical treatments, for the preparation and conservation of clinical and social history, and the general management of health services and other activities organized by the health center.
- Legitimizing basis: Compliance with a legal obligation and execution of the contractual relationship.
- Type of data processed: Identification data, personal characteristics data, transactions of goods and services, financial data, health data. The collection of personal data may be carried out at the health center or will be provided, where appropriate, by insurance companies, accident insurance companies, prevention services or by the competent public administrations.
2.4 Management of sending surveys on service quality
- Purpose: Carry out surveys to know the patients' assessment of the quality of the service.
- Legitimating basis: legitimate interest
- Type of data processed: identification and contact data.
2.5 Management of registrations for the course/day/conference requested by the interested party.
- Purpose: manage the registration of the day, course or conference that the interested party has requested.
- Legitimizing basis: execution of the pre-contractual relationship.
- Typology of data processed: Identification data, contact data, academic data, professional data and financial data.
2.6 Teaching, research or statistical activities.
- Purpose: to develop teaching, research or statistical activities with scientific or educational purposes to improve health care, complying with specific regulations in this regard.
- Legitimating basis: legitimate interest and consent of the interested party.
- Type of data processed: Identification data, contact data, personal characteristics data and health data.
2.7 Video surveillance
- Purpose: video surveillance to guarantee the safety of people, property and facilities.
- Legitimating basis: legitimate interest and compliance with a legal obligation applicable to the data controller.
- Type of data processed: Identification data.
2.7 Dissemination of images and phonographic material from conferences, events and courses.
This data processing will be carried out by the entity RIBERA SALUD, SAU, with CIF A-03681186 and registered office at Avenida Cortes Valencianas, number 58, Edificio Sorolla Center, 46015 Valencia (Spain).
- Purpose: to disseminate and promote the conferences, courses and training events through the Ribera Salud Group websites and its social networks.
- Legitimating basis: consent of the interested party.
- Type of data processed: personal images and/or phonographic material.
2.8 Manage the sending of electronic commercial communications.
This data processing will be carried out by the entity RIBERA SALUD, SAU, with CIF A-03681186 and registered office at Avenida Cortes Valencianas, number 58, Edificio Sorolla Center, 46015 Valencia (Spain).
- Purpose: Management of user subscriptions to the newsletter/newsletter by sending electronic commercial communications about services, activities and news.
- Legitimizing basis: User consent
- Type of data processed: Name, surname and email
3. RECIPIENTS OF PERSONAL DATA
3.1.Communication of data to third parties.
Except legal obligation, the personal data collected through the web will not be communicated to third parties.
Notwithstanding the foregoing, we hereby inform you that, for the provision of health care services, when strictly necessary, the data may be communicated, in accordance with the provisions of current legislation, to the health authority and other organizations. authorities with competence in the matter, as well as insurance companies or other paying entities when the interested party indicates that the care expenses must be paid by them.
Likewise, users are informed that if they are clients of private insurers and go to the Ribera Povisa Hospital, the data of said interested party will be communicated by the Ribera Povisa Hospital to the private insurer for the purposes of payment for the services, prior subscription by part of the patient of a document in which the insured authorizes the Ribera Povisa Hospital to communicate said information.
3.2. Processors
The processing of user data may be carried out by suitable service providers, contracted by the Ribera Povisa Hospital. These service providers will only process the data for the purposes established by the Ribera Povisa Hospital, including for the management of the sending of electronic commercial communications.
4. INTERNATIONAL DATA TRANSFERS
The Ribera Povisa Hospital will process the user's data entirely within the territory of the European Union, which is why it does not plan to carry out any international data transfer.
5. CONSERVATION PERIOD.
The Ribera Povisa Hospital will keep the personal data of the users for the time necessary to carry out the purpose for which they are processed or until the interested party requests the deletion of their personal data, and in any case, during the period necessary for the compliance with the corresponding legal obligations.
Likewise, regarding the treatment related to the sending of electronic commercial communications, the data of the users who have consented to their reception will be kept until the user requests the cancellation of said reception, following the instructions that they will find at the bottom of each email.
6. EXERCISE OF RIGHTS REGARDING DATA PROTECTION.
At any time, the user may exercise their rights of access, rectification, deletion, opposition, limitation and portability of their data, by sending their request in writing to the following email address dpd@povisa.net, or by postal mail to the following address, C/ Salamanca, 5, 36211 Vigo, Pontevedra (Spain), under the reference subject: "Data Protection", indicating the right/s you wish to exercise.
Likewise, the user is informed that if they consider that the exercise of their rights has not been satisfied, they may contact the data protection delegate of the Ribera Povisa Hospital by sending their request to the email address dpd@povisa.net or file a claim with the Spanish Data Protection Agency. More information in www.aepd.es.
Last update: February 2024
