Privacy policy

PERSONAL DATA TREATMENT AND PROCESSING

Puighivet Sardà S.L.U., as the Data Controller, with VAT Registration number ESB-63.243.570, informs you under the current legislation on the Protection of Personal Data, that the personal data collected through the different forms of the website, those that you send to the contact email addresses and those that you can provide in telephone conversations, will be treated for the following purposes:

  • Manage comments or queries that you make to our organisation.
  • Manage medical records of our patients.
  • Financial management of our organisation.
  • Management of the working relationship with our employees

The data you provide will be kept for the time strictly necessary to meet your request (less than six months, unless your request results in an action that requires legal reasons to keep it for a longer period of time), or during the years necessary to comply with legal obligations, such as health, labour and tax regulations.

We inform you that you can exercise the rights of access, rectification, deletion, opposition, limitation of the processing and portability of the personal data you have provided us. To do this, you can send your request to our organization by postal mail to Puighivet Sardà S.L.U., Ref. Data Protection, Muntaner 573, Baix 1ª, 08022 – Barcelona, or by sending an e-mail to info@martinez-benazet.com.

Please find below further information about the processing of personal data carried out by our society:

  1. Data Controller

Puighivet Sardà S.L.U., with VAT Registration number ESB-63.243.570, registered in the Barcelona Business Register, Volume 38933, Sheet 208, Page B 332453. To contact directly and effectively with us, you can come to our office or send us your request by postal mail, to: Muntaner 573, Baix 1ª, 08022 – Barcelona. You can also get further information regarding how we process your personal data, by sending an e-mail to info@martinez-benazet.com.

  1. List of personal data processing activities carried out by our organization

Our company processes different personal data of the interested parties, with different purposes. Please find below the different data processing activities, their purpose, the basis that legitimises each activity, the information that we may transfer to third parties, and the information-retention periods:

  1. Manage comments or queries that you make to our organisation.
    1. Origin of Data: provided by the interested party, through forms enabled for this purpose on the website, or information transmitted to the organization by email or by phone.
    1. Purpose for processing the data: manage the comments and queries that the interested party sends to our organization.
    1. Basis that legitimises the data processing: legitimate interest of our organization (processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract), and the explicit consent of the interested party for those cases where it is required.
    1. Transfer of data to third parties: we won’t be transferring any of the information provided to third parties that are outside our organization.
    1. Data retention period: less than six months, unless there is a legal reason to keep it for a longer period of time.
  2. Manage medical records of our patients.
    1. Origin of Data: provided by the interested party or by his legal representative, in person, by email or by phone.
    1. Purpose for processing the data: manage the medical records of our patients so that we can properly complete the contracted medical treatments.
    1. Basis that legitimises the data processing: legitimate interest of our organization (processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract), and the explicit consent of the interested party for those cases where it is required.
    1. Transfer of data to third parties: if formerly requested, to the public health administration agencies. We won’t be transferring any of the information provided to other third parties that are outside our organization.
    1. Data retention period: less than six months if the information is not considered relevant. Medical records and other relevant patient health information will be kept for the period required by the laws governing the health records retention periods.
  3. Financial management of our organisation.
    1. Origin of Data: provided by the interested party or by his legal representative, in person, by email or by phone.
    1. Purpose for processing the data: manage the financial activity of our organisation according to the current tax and commercial regulations.
    1. Basis that legitimises the data processing: legitimate interest of our organization (processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract, and processing is necessary for compliance with a legal obligation under EU law or the laws of a Member State).
    1. Transfer of data to third parties: if necessary, to the public administration such as the Tax Agency or Social Security.
    1. Data retention period: the period required by the public administration until the expiration of responsibilities.
  4. Management of the working relationship with our employees
    1. Origin of Data: provided by the interested party or by his legal representative in person, by email or by phone.
    1. Purpose for processing the data: manage the working relationship with our employees.
    1. Basis that legitimises the data processing: legitimate interest of our organization (processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract, and processing is necessary for compliance with a legal obligation under EU law or the laws of a Member State).
    1. Transfer of data to third parties: if necessary, to the public administration such as the Tax Agency or Social Security.
    1. Data retention period: the period required by the public administration until the expiration of responsibilities.

Your rights regarding your Personal Data:

Regarding the Personal Data you may have provided Puighivet Sardà S.L.U., you have the possibility to freely and freely exercise the following rights:

  • The right to be informed about the collection and the use of your personal data.
    • The right to access personal data and supplementary information.
    • The right to have inaccurate personal data rectified, or completed if it is incomplete.
    • The right to erasure (to be forgotten) in certain circumstances.
    • The right to restrict processing in certain circumstances.
    • The right to data portability, which allows the data subject to obtain and reuse their personal data for their own purposes across different services.
    • The right to object to processing in certain circumstances.
    • The right to withdraw consent at any time (where relevant).

You may submit your request to Puighivet Sardà S.L.U. in writing, by sending your request by the following means:

  • e-mail: info@martinez-benazet.com
  • Postal mail: Muntaner 573, Baix 1ª, 08022 – Barcelona, Ref. “Data Protection Rights”.
  • By coming to our office.

If you are dissatisfied with the way we have handled your application and want to make a complaint, you can contact with your local Regulation Body, or with the Spanish Data Protection Agency on www.aepd.es.