1. Who is responsible for processing your data?

This Privacy Policy applies to all personal data provided by the interested party to JORDI NAVARRO FRANCESCA, as well as to any individual interested in the activities and services we offer through our website and/or any other communication channels.

The purpose of this Privacy Policy is to inform clearly and transparently about how we process personal data in compliance with current data protection regulations.

For any questions related to this Privacy Policy, you can contact JORDI NAVARRO FRANCESCA at the email address in**@*******************ca.com or at the postal address C/ Vía Ronda de s’Estancia 55, 07740, Es Mercadal (Menorca).

2. What is the purpose for which we process your personal data?

The purpose of the processing is specified below:

• Providing healthcare services to patients: Managing medical records, scheduling appointments, diagnosing, performing podiatric treatments, issuing reports, and monitoring patient progress, in accordance with Article 6.1 c) of the GDPR.
• Appointment scheduling and requests: Facilitating appointment bookings through our website, telephone, email, or other available communication channels, as per Articles 6.1 a) and 6.1 b) of the GDPR.
• Sharing health data with other professionals: For clinical case studies, presenting data at conferences or professional courses for educational purposes, or publishing in scientific journals for medical dissemination, in accordance with Article 6.1 a) of the GDPR.
• Managing user inquiries: Addressing queries through our customer service and other communication channels, as per Article 6.1 a) of the GDPR.
• Receiving job applications: Processing applications for job openings, in accordance with Article 6.1 a) of the GDPR.
• Video surveillance for security purposes: Recording the perimeter of our facilities using surveillance cameras, in accordance with Article 6.1 f) of the GDPR.
• Sending commercial communications: Distributing promotional materials, offers, and appointment reminders, with explicit user consent obtained through each form, in accordance with Article 6.1 a) of the GDPR.
• Administrative and accounting management: Handling client and supplier records, in accordance with Article 6.1 f) of the GDPR.
• Compliance with legal obligations: Managing and processing duties arising from adherence to applicable regulations, in accordance with Article 6.1 c) of the GDPR.

JORDI NAVARRO FRANCESCA maintains a Record of Processing Activities detailing each processing operation carried out as the data controller.

To learn more about the Record of Processing Activities, you may contact JORDI NAVARRO FRANCESCA through any of the identified communication channels.

3. How long do we retain your personal data?

For each processing activity, data will be retained for the time necessary to fulfill the purpose for which it was collected and to determine any potential liabilities that may arise from such purpose and data processing.

When processing is based on consent, data will be retained until the consent is withdrawn or a request for data deletion is made.

Only the data necessary for each processing activity is requested; therefore, failure to provide this data may result in the inability to provide the requested services or maintain established relationships.

4. What are the rights of the affected individuals?

We inform you that you may exercise the following rights:

• Right of access to your personal data to know which are being processed;
• Right to rectification of any inaccurate personal data;
• Right to erasure of your personal data when possible;
• Right to request the restriction of processing of your personal data when the accuracy, legality, or necessity of the data processing is in doubt. In such cases, we may retain the data for the exercise or defense of claims.
• Right to object to the processing of your personal data when the legal basis for processing is legitimate interest. JORDI NAVARRO FRANCESCA will cease processing your data unless there are compelling legitimate grounds or for the formulation, exercise, or defense of claims.
• Right to data portability when the legal basis for processing is your consent.
• Right not to be subject to decisions based solely on automated processing of your data that produce legal effects or similarly significantly affect you, unless such decision is necessary for the performance of a contract, authorized by law, or based on your consent.

These rights may be exercised free of charge by the data subject, and where applicable, by their representative, through a written request addressed to in**@*******************ca.com, or by written communication with acknowledgment of receipt addressed to JORDI NAVARRO FRANCESCA at the postal address C/ Vía Ronda de s’Estancia 55, 07740, Es Mercadal (Menorca, Balearic Islands). In both cases, please provide a copy of your ID card.

In addition to the above rights, the data subject has the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. JORDI NAVARRO FRANCESCA may continue processing the data subject’s data to the extent permitted by applicable law.

The data subject is reminded that they can contact the Spanish Data Protection Agency at www.agpd.es if they are dissatisfied with the attention received regarding their rights.

5. Data sharing

We may share your data with third-party service providers who process data on behalf of JORDI NAVARRO FRANCESCA, with whom a contract has been established that sets the conditions and requirements for the use of personal data, and with public authorities to comply with legal obligations affecting certain data processing activities.

If you provide prior consent, your data may also be shared with other healthcare professionals as part of a clinical study, with scientific publications as a tool for medical dissemination, and with conferences or professional courses for educational purposes.

6. What security measures have we implemented?

As a healthcare center, CLÍNICA NAVARRO is obligated to maintain clinical documentation under conditions that ensure its proper maintenance and security, even if not necessarily in the original medium, to provide appropriate patient care for the necessary duration in each case. Every healthcare facility must establish an active and diligent custody mechanism for medical records. This custody will allow the collection, integration, retrieval, and communication of information subject to the principle of confidentiality.

JORDI NAVARRO FRANCESCA is committed to fulfilling its obligation to keep personal data confidential and to safeguard it, adopting the necessary measures to prevent its alteration, loss, unauthorized processing, or access, in accordance with applicable regulations.

JORDI NAVARRO FRANCESCA has implemented the necessary technical and organizational security measures to ensure the safety of your personal data and to prevent its alteration, loss, processing, and/or unauthorized access, considering the state of the technology, the nature of the stored data, and the risks to which they are exposed, whether arising from human action or the physical or natural environment, in accordance with applicable regulations.

7. Links

The website of JORDI NAVARRO FRANCESCA may include hyperlinks to other sites not operated or controlled by JORDI NAVARRO FRANCESCA. Therefore, JORDI NAVARRO FRANCESCA does not guarantee or assume responsibility for the legality, reliability, usefulness, truthfulness, and timeliness of the content of such websites or their privacy practices. Before providing your personal information to these external websites, please be aware that their data protection compliance may differ from ours.

8. Modification of the Privacy Policy

JORDI NAVARRO FRANCESCA may modify its Privacy Policy in accordance with the applicable legislation at any given time. In any case, any modification of the Privacy Policy will be duly notified to the affected individuals to ensure they are informed of the changes made to the processing of their personal data and, if the applicable regulations require it, to allow them to give their consent to the processing.