PRIVACY POLICY
1. DATA CONTROLLER
Identity: IBC Comprés
Postal address: Calle Zorrilla 12, 08100 Mollet del Vallès
Phone: 668 547 709
Email: contacto@ismaelabaez.com
Registration / Health Data: Podiatry health center. Professional registered with number 1903 in the College of Podiatrists of Catalonia.
2. PURPOSE OF DATA PROCESSING At IBC Comprés, we process the information provided to us by interested parties for the following purposes:
Appointment management and healthcare: To manage appointment requests, reminders, and the correct provision of the requested podiatry services.
Contact and web forms: To respond to inquiries, questions, or requests for information sent to us through the website’s channels.
Legal obligations: To comply with the legal obligations applicable to medical centers and health specialties (such as the retention of medical records).
3. LEGAL BASIS (LEGITIMACY) The legal basis for processing your data varies depending on the service:
Healthcare and Appointment Management: Performance of a contract for the provision of healthcare services or application of pre-contractual measures (Art. 6.1.b GDPR). In the case of health data (special category), it is legitimized based on the provision of healthcare or medical treatment (Art. 9.2.h GDPR).
Contact forms: The express consent of the user by checking the acceptance box before submitting the form (Art. 6.1.a GDPR).
Legal obligations: To comply with the applicable health regulations regarding patient autonomy and medical records (Art. 6.1.c GDPR).
4. DATA RETENTION PERIODS
Health data and medical records: Will be retained for the minimum periods required by applicable state and regional health legislation (as a general rule, a minimum of 5 years from the last treatment or discharge of each care process).
General contact data: Will be retained while the professional or commercial relationship is maintained and, subsequently, for the legal periods to address possible liabilities.
5. RECIPIENTS AND DATA TRANSFER Your health data is strictly confidential and will not be transferred to third parties under any commercial concept. Only the following will have access to them:
The authorized healthcare and administrative staff of the center.
Data processors: Technology providers necessary for the operation of the center (such as medical management software and cloud storage), who operate under strict confidentiality contracts according to Art. 28 of the GDPR.
Public bodies or competent authorities when there is a legal obligation to provide them.
6. USER RIGHTS Any person has the right to obtain confirmation as to whether IBC Comprés is processing personal data concerning them. Users can exercise their rights of:
Access: To know what data we hold about you.
Rectification: To modify inaccurate or incomplete data.
Erasure: To request that we delete your data (provided that health legislation for the retention of medical records allows it).
Objection and Restriction: To object to or restrict certain processing of your data.
Data Portability: To receive your data in a structured electronic format.
To exercise these rights, you can send a written request accompanied by a copy of your identity document (DNI/NIE) to the center’s postal address (Calle Zorrilla 12, 08100 Mollet del Vallès) or to the email address: contacto@draismaelabaez.com.
