Privacy policy

Privacy information

Below is the Privacy Policy governing the website https://grupopedrojaen.com/, owned by GRUPO DERMATOLÓGICO Y ESTÉTICO PEDRO JAEN, S.A. (hereinafter, GRUPO PEDRO JAÉN).

We kindly ask you to take a few minutes to read our Privacy Policy. We aim to explain, in a simple, clear and transparent manner, how we process and protect your personal information and your rights. The security of you and your personal data is essential to us, and we take its protection very seriously.

Data controller

Identification: GRUPO DERMATOLÓGICO Y ESTÉTICO PEDRO JAÉN, S.A.

Registered address: Calle Cinca 30, 28002 Madrid, Spain

Tax ID: A87917092

Telephone: +34 914 317 861

Email: dpo@grupopedrojaen.com

Data Protection Officer contact: dpo@grupopedrojaen.com

What is your data used for?

GRUPO DERMATOLÓGICO Y ESTÉTICO PEDRO JAÉN, S.A. processes the information you provide for the purposes set out below:

Provision of healthcare

Purpose and legal basis

To provide the healthcare required and to carry out the clinical follow-up arising from such care. (performance of a contract to which the data subject is party, Article 6(1)(b) GDPR)
To manage and administer administrative procedures, including the management of charges, payments and direct debits, and to comply with applicable legal and contractual obligations. (performance of a contract, Article 6(1)(b) GDPR)
RGPD)
To carry out communications inherent to the doctor–patient relationship. (legitimate interest of the controller, Article 6(1)(f) GDPR)
To carry out statistical analyses and market studies. (legitimate interest of the controller, Article 6(1)(f) GDPR)

Retention:

Personal data will be retained for as long as the relationship with the data controller is maintained and for the periods required by applicable regulations. In the case of health data derived from the care provided, such data will be retained for at least five years from the discharge date of each care process, or for a longer period where required by the relevant regional regulations.

Contact and appointments

Purposes and legal basis:

To respond to enquiries or any type of request made by users through any of the contact methods made available on the data controller’s website. (legitimate interest of the controller, Article 6(1)(f) GDPR)
To send you advertising and marketing communications by email, fax, SMS, MMS, social media or any other electronic or physical means, present or future, enabling marketing communications. These communications will be carried out by the controller and will relate to its products and services, or those of its partners or suppliers with whom it has entered into a promotional agreement. In such cases, third parties will never have access to personal data. (data subject’s consent, Article 6(1)(a) GDPR)
To schedule appointments and meetings with the data controller. (legitimate interest of the controller, Article 6(1)(f) GDPR)
To carry out statistical analyses and market studies. (legitimate interest of the controller, Article 6(1)(f) GDPR)

Retention:

Data will be retained until your request for information has been dealt with and, in any event, for as long as any legal actions arising from the purpose and processing do not become time-barred. Subscriber data will be retained indefinitely until you unsubscribe or exercise your right to erasure.

Whistleblowing channel

Purposes and legal basis

To manage and follow up reports received through the established channels, in compliance with Law 2/2023 of 20 February. (compliance with a legal obligation, Article 6(1)(c) GDPR)

Retention:

For the periods established by law and, in any event, until any legal actions arising from the purpose and processing are time-barred.

Call recording

Purposes and legal basis

To improve service quality by addressing your requests and returning calls where necessary. Satisfaction surveys may also be sent. (legitimate interest of the controller, Article 6(1)(f) GDPR)

Retention:

Data will be retained for no longer than necessary to fulfil the purposes of processing. When it is no longer necessary and applicable legal time limits have expired, it will be deleted using appropriate security measures to ensure anonymisation or complete destruction.

Complaints and claims:

Purposes and legal basis:

To process and manage complaints and claims submitted by patients or their legal representatives regarding the healthcare received, in order to provide an appropriate response and, where applicable, adopt corrective measures.

Retention:

Data arising from complaint, claim and suggestion procedures will be retained during processing and thereafter for the period required by applicable legislation and until any potential legal actions become time-barred.

Recipients

Your data may be disclosed to the following third parties in order to fulfil the purposes described above:

Hospitals with which we have agreements and/or healthcare professionals linked to GRUPO PEDRO JAÉN, to carry out the actions necessary for the patient’s healthcare management.
Insurance companies and banking entities, to manage and control payment for services provided.
Any entity linked to GRUPO PEDRO JAÉN, such as Fundación Dr. Pedro Jaén (Tax ID: G02724755).
Public bodies linked to or dependent on local, regional or national public administrations, where required and/or under a legal obligation.
Auditing entities, for compliance with legal obligations, internal control and compliance with requirements established by the standards implemented at GRUPO PEDRO JAÉN.

In all other cases, personal data will not be disclosed to third parties except where required by law or by court order.

International transfers

No international data transfers are carried out (outside the European Economic Area).

Your rights

GRUPO PEDRO JAÉN guarantees the exercise of your rights at all times. You have the right to withdraw your consent at any time. You may also exercise your rights of access, rectification, erasure, restriction of processing, objection, and data portability.

Right of access: You have the right to obtain confirmation as to whether your personal data is being processed and, where that is the case, access to information about such processing.