Privacy
In compliance with the principles of lawfulness and transparency and in order to provide the information to the interested parties as established by Articles 13 and 14, we inform you of the characteristics of the personal data processing carried out under the responsibility of Santiago de la Hoz López:
Processing:
(I) Human Resources Management.
(II) Handling requests received through the Website.
(III) Preparation and follow-up of Budgets.
(IV) Billing, accounting, and tax management.
(V) Administrative management.
(VI) Management of medical records.
(VII) Handling the exercise of rights.
(VIII) Notification of Security Breaches when applicable.
(IX) Video surveillance.
Purpose:
(I) Recruitment, training, payroll preparation, and sending other necessary documents for the employment relationship.
(II) Handling requests received through the Website.
(III) Preparation and follow-up of Budgets.
(IV) Issuing invoices to clients, preparing official accounting, and calculating, presenting, and settling taxes, as well as preparing commercial documents like balance sheets and reports.
(V) Administrative management involving collections, payments, and relations with suppliers.
(VI) Provision of dental and stomatological services and treatments.
(VII) Addressing requests for the exercise of rights related to personal data.
(VIII) Notifying the interested parties and the Control Authority of any security breaches that may affect the rights and freedoms of the interested parties.
(IX) Ensuring the security of persons, property, and premises.
Legitimacy:
(I) and (III) Application of contractual and pre-contractual measures.
(II) Legitimate interest.
(IV) Law 58/2003, of December 17, General Tax Law.
(V) Legitimate interest.
(VI) Law 41/2002, regulating the autonomy of the patient and rights and obligations regarding information and medical documentation.
(VII) and (VIII) Regulation (EU) 2016/679 of the European Parliament and Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data.
(IX) Public interest.
Retention Period:
(I) Duration of the employment contract and the necessary period to address responsibilities arising from the employment relationship.
(II) The necessary period to attend to the request and while the responsibilities derived from them last.
(III) Validity period of the proposal.
(IV) and (V) Six years for commercial purposes, and the necessary period to address responsibilities arising from tax settlements.
(VI) Five years after the completion of the assistance process and the necessary period to address responsibilities arising from it.
(VII) and (VIII) The period necessary to fulfill this purpose, as well as while the responsibilities derived from them last.
(IX) The retention time of the images.
Recipients:
(I) Health professionals.
(II) and (III) Spanish Data Protection Agency.
Exercise of Rights:
You can exercise your right of access, rectification, deletion, limitation, and opposition to the processing, in the terms and conditions established in the personal data protection regulation Regulation (EU) 2016/679 of the European Parliament and Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data, by sending a request via email to dlhsanti@gmail.com or in writing to: Calle Alisios, 24. CP: 28221, Majadahonda (Madrid), clearly indicating the Reference: “Data Protection” along with a document proving your identity, such as a photocopy of your ID, as well as to file a claim with the Spanish Data Protection Agency.
Privacy Policy
Who is responsible for the processing of your data?
The owner of the dental clinic and this website is Santiago de la Hoz López, so any personal data you provide through this website, as well as any data collection forms conducted in person, will be processed under the responsibility of Santiago de la Hoz López.
What personal data do we collect? (How do we obtain it?)
We will ask for the minimum data required to fulfill the purposes indicated in the previous section, usually, name, surname, address, and contact details to notify you of appointments.
Additionally, regarding your Medical Record, all health data and history that we are legally required to ask for.
How do we use the personal data we process under our responsibility?
We use your data for the following purposes:
(I) Management of the clinic’s Human Resources.
(II) Handling requests received through the Website.
(III) Preparation and follow-up of Budgets.
(IV) Providing assistance and Managing the Medical Record.
(V) Billing, accounting, and tax management.
(VI) Administrative management involving collections, payments, and relations with suppliers.
(VII) Exercise of rights.
(VIII) Notification of Security Breaches.
(IX) Video surveillance.
We use your data solely for each purpose necessary, for example, for Human Resources management, we send data to our labor advisor to prepare employment contracts and payroll, also to the bank for salary payments, and to the Tax Agency to report the annual tax withholdings, to the Health and Safety company, and we are legally obligated to inform the Ministry of Health about the clinic’s workforce at any given time. However, except for obligations or for receiving services necessary for our activity, we do not communicate or process data for additional purposes.
How long do we keep your data?
When data processing is required by law, the law typically establishes the period for processing or retaining the data. For example, the Commercial Code requires data to be retained for accounting and commercial purposes for six years, but there are cases such as the application of certain deductions that require retaining economic evidence for a longer period, sometimes up to fifteen years.
Health data is retained for five years from the date of discharge or completion of treatment.
Disclosure to Third Parties
As with the above cases, the data communicated to third parties is always limited to the minimum necessary. For example, we sometimes communicate patient data to other health professionals when necessary to create a complex diagnosis or to complement treatment with professionals from other specialties, such as dental technicians.
What security measures do we apply to personal data?
Santiago de la Hoz López has appropriate policies and technical and organizational measures to safeguard and protect your personal data against illegal or unauthorized access, accidental loss or destruction, damage, illegal or unauthorized use, or disclosure.
We will also take all reasonable precautions to ensure that our staff and employees who have access to your personal data have received the proper training.
In any case, the user is informed that any data transmission via the internet is not completely secure and, as such, is done at their own risk. While we will do our best to protect your personal data, Santiago de la Hoz López cannot guarantee the security of the personal data you transmit to us via email, WhatsApp, or through the website form. Therefore, we ask you to exercise caution and never communicate health data or sensitive information over the internet or public communication networks, unless done in an encrypted manner or through private networks.
What are your rights as a data subject?
You have the right to request the deletion of your data when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
You have the right to obtain confirmation of whether Santiago de la Hoz López is processing your personal data.
You have the right to access your personal data and obtain a copy of them, as well as to request the rectification of inaccurate data or, if applicable, request their deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances, you may request the limitation of the processing of your data, in which case we will only retain it for the exercise or defense of claims.
In certain circumstances and for reasons related to your particular situation, you may object to the processing of your data. Santiago de la Hoz López will stop processing the data, unless there are legitimate imperative reasons or the exercise or defense of potential claims.
You also have the right to data portability, as well as to revoke any consents you have provided.
You can exercise these rights by submitting a request via email to dlhsanti@gmail.com or in writing to: Calle Alisios, 24. CP: 28221, Majadahonda (Madrid).
, attaching a copy of your ID or another document proving your identity, and clearly stating the right you wish to exercise.
Finally, you may file a complaint with the Spanish Data Protection Agency, especially if you have not received satisfaction in the exercise of your rights.
