Privacy Policy

TARRÚS OFTALMÒLEGS, SCP under takes to protect the privacy of users who access this website and / or any of its services. The use of the website and / or any of the services offered byTARRÚS OFTALMÒLEGS, SCP implies the acceptance by the user of the provisions contained in this Privacy Policy and that their personal data be treated as stipulated in it. Please note that although there may be links from our website to other websites or social networks, this Privacy Policy does not apply to the websites of other companies or organizations to which the website is redirected.TARRÚS OFTALMÒLEGS, SCP It does not control the content of third party websites, nor does it accept any responsibility for the content or the privacy policies of these websites.

Basic information on data processing (Regulation (EU) 2016/679 and LO 3/2018)

Responsible for the treatment	TARRÚS OFTALMÒLEGS, SCPNIF: J55026322Av. Gran Via Jaume I, 30 2n B 17001 GironaE-mail: info@tarrusoftalmolegs.cat
Purpose of the treatment	The evaluation, diagnosis, treatment, control of pathologies and carrying out medical interventions in the specialty of ophthalmology.
Legitimation	The data processing is necessary for the provision of medical services.
Dyears that we treat	Identification and contact data of patients or their representatives. Health-related data integrated into the patient’s medical history. Transactional data (payments)
Addressees	The data will only be communicated when it is strictly necessary for the provision of the service and to comply with legal obligations. The recipients of the data may be the healthcare insurance companies, with which the patient has contracted the provision of the requested services, in order to manage, validate, verify and control the payment of the healthcare services provided; to providers of medical equipment; diagnostic laboratories; banking entities for the collection of services and / or public administration when legally required.
Data retention period	SaveThe data will be kept for the time strictly necessary to provide health services, according to medical and legal criteria. In any case, the documents that make up the medical history will be kept for a minimum of fifteen years counted from the date of discharge of each healthcare process, in accordance with Law 21/2000, of December 29, on the rights of information concerning the health and autonomy of the patient, and the clinical documentation.
People rights	Interested parties have the right to exercise the rights of access, rectification, limitation of treatment, deletion, portability and opposition, sending their request to our address.
Additional Information	You can find additional and detailed information below in the “Privacy Questions”.

Questions about privacy

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, (RGPD), and Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of the digital rights (LOPDGDD we offer you the following information about the processing of your personal data:

Who is responsible for the processing of your data?

Identity: TARRÚS OFTALMÒLEGS, SCP

NIF: J55026322

Direction: Av. Gran Via Jaume I, 30 2n B 17001 Girona

Tel .: 972205917

E-mail: info@tarrusoftalmolegs.cat

For what purpose do we process your personal data?

• We process the information provided to us to provide our ophthalmology medical services.
• In the event that you contact us through the contact form on our website, we will treat them to manage your query.
• If you give us your consent, we can also process your data to send you information about our activities, products or services.
• If you send us a resume, we will process the data in order to manage the CV ‘s base for the selection of personnel.

 How long will we keep your data?

The data will be kept for the time strictly necessary to provide health services, according to medical and legal criteria.

• The documents that make up the clinical history will be kept for a minimum of fifteen years counted from the date of discharge of each healthcare process, in accordance with Law 21/2000, of December 29, on the rights of information concerning health and patient autonomy, and clinical documentation.
• In the case of accounting and tax documentation, for commercial purposes it will be kept for 6 years in accordance with Art. 30 of the Commercial Code, and for tax purposes it will be kept for 4 years, in accordance with articles 66 to 70 of the General Tax Law.
• In the case of resumes, the data will be kept for one year.

What is the legitimacy for the treatment of your data?

• The legal basis for the treatment lies in the provision of medical care, which necessarily implies having to process your data.
• If you contact us through our website, the legitimacy to process your data is in your consent.
• Regarding the information that is sent through the web by minors under 14 years of age, it will be an essential requirement that it be done with the parental consent, the guardian or the legal representative of the minor so that the personal data can be processed. If not, the minor’s legal representative will notify us as soon as it becomes known.

To which recipients will your data be communicated?

The data will only be communicated when it is strictly necessary for the provision of the health service and to comply with legal obligations. The recipients of the data may be the healthcare insurance companies, with which the patient has contracted the provision of the requested services, in order to manage, validate, verify and control the payment of the healthcare services provided; to providers of medical equipment; diagnostic laboratories; banking entities for the collection of services and / or public administration when legally required.

What are your rights when you provide us with your data?

• Anyone has the right to obtain confirmation on whether or not we are treating their personal data.
• Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. .
• In certain circumstances the interested parties may request the limitation of the processing of their data, in this case we will only keep them for the exercise or defense of claims.
• Also, in certain circumstances and for reasons related to their particular situation, the interested parties may object to the processing of their data. In this case we will stop processing the data, except for compelling legitimate reasons or for the exercise or defense of possible claims.
• Data subjects also have the right to the portability of their data.
• Every interested party shall have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects on it or significantly affects it in a similar way.
• Finally, the interested parties have the right to file a claim with the competent Control Authority.

How can you exercise your rights?

Sending a letter attaching a copy of a document that identifies you, to our physical or electronic address.

 How have we obtained your data?

The personal data we process comes from the interested party. The interested party guarantees that the personal data provided is true and is responsible for communicating any changes to these. The data that is marked with an asterisk will be mandatory in order to provide you with the requested service.

 What data do we process?

The categories of data that we can treat in the provision of our services are:

• Identification and contact data of patients or their representatives.
• Health-related data integrated into the patient’s medical history.
• Transactional data (payments)

In the case of resumes, also:

• Personal characteristics
• Academics and professionals

We also inform you that our website does not load cookies, so we do not obtain information from web users by this means.

The data is limited, since we only process the data necessary for the provision of our services and the management of our activity.

What security measures do we apply?

We apply the security measures established in article 32 of the RGPD, therefore, we have adopted the necessary security measures to guarantee a level of security appropriate to the risk of data processing that we carry out, with mechanisms that allow us to guarantee confidentiality, integrity, permanent availability and resilience of treatment systems and services.

Some of these measures are:

• Information on data processing policies for staff.
• Regular backups.
• Data access control.
• Regular verification, evaluation and assessment processes.