PRIVACY POLICY

Who is responsible for processing your data?

WATERED TOOTH SPACE (ANTONIO GÓMEZ DEL CUETO). NIF: 10862781L. Dir. postal: Aguado Street, 18, 33202 Gijon, Asturias. Telephone: 984842576. Email: espaciodentalaguado@gmail.com.

For what purpose do we process your personal data?

Management of attention and response to queries, complaints or incidents, exercise of rights and/or requests for information related to the provision of services offered by the organization, via email, telephone, social networks, as well as any other means of contact provided and/or consented to by the interested party..
Contact with the interested party through the means of communication provided in order to manage the response to queries, requests and/or communications made by the interested party and/or derived from the contractual/commercial relationship, as well as appointment reminder.
Internal use, contractual and regulatory compliance, administrative management, economic and accounting derived from the commercial relationship and/or provision of agreed services.
Evaluation of suppliers/collaborators with whom the Controller maintains a contractual/commercial relationship, in order to verify correct compliance with the different regulations and/or policies that apply to them and/or are required by the Responsible Party., including the required guarantees regarding data protection.
Sending commercial communications with the client as long as there is a prior contractual relationship, in accordance with the provisions of article 21 the LSSICE, to the extent that they are referred to services similar to those contracted.
Contact and sending commercial communications, through the means of communication provided by the interested party, in case you had expressly consented, to the extent that they are not covered by the article 21 of the LSSICE, In which case, the advertising exclusion systems will be consulted first. (Robinson List or similar lists established for this purpose).
Quality control of the organization's services for internal use, including the evaluation of customer satisfaction.
Regulatory compliance: investigation, monitoring and auditing of controls established for crime prevention, as well as other regulatory management and compliance systems that may be applicable., both related to the user/interested party and internal (between them, compliance management of money laundering prevention measures).
Management of claims arising from non-compliance with contractual requirements, regulations and/or internal policies established by the Controller.
Statistical and historical purposes in order to improve the commercial strategy of the services offered by the Controller (in which case the data will be anonymized)
Dissemination of images derived from the services we have provided and/or the publication and/or communication of graphic material that may incorporate the image of the owner in corporate media and/or other public communication media to the extent that the interested party has unequivocally consented to this..
Management derived from the development of any structural modification operation of companies or the contribution or transfer of a business or branch of business activity, provided that the treatments were necessary for the successful completion of the operation and guarantee, when appropriate, continuity in the provision of services.
In the event that you had provided us with your resume or had requested to participate in a personnel selection process managed by the company itself or an external company hired for this purpose, Your data will be processed internally for the management of said process., for incorporation into the job market and for the offer and management of possible employment or collaboration offers that may be generated in the future.. In addition, Your data may be processed for the evaluation of skills and for the request of references to companies/third parties with whom you have had some type of professional/training relationship., to the extent expressly authorized.
Other purposes described in additional consents expressly requested by the organization, in your case.
No type of “profile” will be created based on the information provided nor will automated decisions be made based on profiles.

All data requested by the Controller are necessary for the effectiveness of the purposes outlined.. The concealment of information or its non-communication on your part may have an impact on the results of our services or the impossibility of providing them.

What is the legitimacy for the processing of your data??

The basis of legitimation of the processing of your data is the following:

The execution of a contract and/or request of the interested party. The data requested is necessary for the correct provision of the same.
Comply with a legal obligation: Administrative regulations, trade, tax, fiscal, accountant, civil and financial, health and consumer and user defense legislation, as well as the regulations inherent to the contracted operation/service and those associated with the sector that may be applicable..
Satisfy a legitimate interest of the Controller: data processing as parts of a commercial relationship and/or contract, that are necessary for its maintenance or compliance, fraud prevention, Cases of legitimate interest in which the controller could be an injured party and the processing and communication of the non-compliant data to third parties is necessary in order to manage regulatory compliance and defend the interests of the controller., the legitimate interest of direct marketing enabled by the LSSICE (sending commercial electronic communications about products or services similar to those contracted by the client with whom there is a prior contractual relationship), as well as assumptions of legitimate interest of specific treatments contemplated in the LOPDGDD.
Ultimately, the express consent of the interested party provided unequivocally through data protection clauses. Said consent can be revoked at any time..

How have we obtained your data?

Through the interested party himself or his legal representative.
Through third parties with which the data controller maintains a commercial relationship or provision of services..
Through third parties at the request of the contracting party.
Through public organizations related to the purpose of the contracted service provision.
Data extracted from public information.

What category of data do we process??

We process identification and contact data; Business information data; Financial economic data and/or payment conditions; Other type of data: Contact details of people in the organization involved or related to the service that is the subject of the contract/request, as well as the personal data of third parties that you could provide us.

The data structure we process contains specially protected data, specifically health, to the extent that they are necessary for the provision of the requested services.

How long do we keep your data?

Your data will be kept for the period strictly necessary to achieve the purposes of the treatment., without prejudice to its conservation to make it available to the competent authorities and to deal with claims.. In such case, The data will be kept blocked until the end of the limitation period, proceeding to its elimination.

Concretely, The established legal deadlines that we apply are:

Accounting and Tax Documentation – For Tax Purposes: Accounting books and other mandatory record books according to the applicable tax regulations (IRPF, IVA, IS, etc), as well as the documentary supports that justify the annotations recorded in the books (including computer programs and files and any other supporting documentation that has fiscal significance), must be preserved, at least, during the statute of limitations for Tax Crimes – General Tax Law and Penal Code, Prescription violations 10 years.
Accounting and Tax Documentation – For Commercial Purposes: Books, correspondence, documentation and justifications concerning your business -Commercial Code– 6 years.
Clinical history: art. 17.1 of the Law 41/2002: The organization has the obligation to keep clinical documentation in conditions that guarantee its correct maintenance and security., during the time appropriate to each case and, at least, five years counted from the date of discharge of each care process. According to the section 2 of the same article, clinical documentation will also be retained for judicial purposes and, when there are epidemiological reasons, research or organization and operation of the National Health System.
The data processed for the sending of commercial communications will be kept until you revoke the consent granted..
The images/sounds captured by alarm systems with image capture will be deleted within a maximum period of one month from their capture., except when they have to be kept to prove the commission of acts that violate the integrity of people, goods or facilities (in which case, The images will be made available to the competent authority within a maximum period of 72 hours since the existence of the recording became known), or are related to serious or very serious criminal or administrative infractions in matters of public security, with an ongoing police investigation or with an open judicial or administrative procedure (Instruction 1/2006, of 8 November, of the AEPD, on the processing of personal data for surveillance purposes through camera or video camera systems and Art.22 LOPDGDD) – 30 days.
Curriculums: 1 year, except in cases where the candidate is selected in which case, will become part of the HR data processing of the contracting organization.
The data processed for the sending of commercial communications will be kept until you revoke the consent granted and/or request its limitation..
The data of potential users/clients of our services or collected to respond to a request for information will be kept for a maximum of 1 year since collection, being subsequently eliminated if a contractual relationship has not been formalized or at the time the interested party requests it..

To which recipients can your data be communicated?

Your data will not be sold, rented or made available to third parties, with the exception of providers who are in charge of the treatment, by legal compliance or by express authorization. So, Your data may be communicated or transferred to:

Organizations or people hired by the Data Controller to provide services linked to the purposes of treatment (as an example: collection management and credit insurance entities, Management auditors, accounting and/or regulatory compliance, computer maintenance companies, other professionals who perform services in collaboration with the organization, personnel selection process management companies). These third party service providers of the Controller, will access the user's personal data as data processors. In any case, The communication of data to third parties is carried out as long as they certify the availability of a Personal Data Protection System in accordance with the requirements of current legislation/regulations on the matter.. Some of the aforementioned service providers are located in countries outside the European Economic Area or do not offer a level of security equivalent to the Spanish one.. In these cases, International transfers are based on the authorization of the Directorate of the Spanish Control Authority, in model clauses approved by the Commission.
Agencies or bodies of the Public Administration with powers in the matters covered by the purposes of the treatment: AEAT, Social security, Courts and Tribunals, public records, etc.
Professional associations to the extent necessary.
Third parties that have been expressly authorized by the data owner.
Financial Entities: Direct debit of receipts and/or collection management of bills and other means of payment.
Security Forces and Bodies: To the extent that a justified right is required for the investigation of a regulatory breach and/or similar.
Media for the promotion/publication of the organization's activities (public and/or private, like web pages, social networks, newspapers, etc.).

What are your rights?

You have the right to obtain confirmation as to whether we are processing personal data that concerns you., or not.

Interested persons have the right to access their personal data, as well as to request the rectification of inaccurate data or, in your case, request its deletion when, among other reasons, The data is no longer necessary for the purposes for which it was collected.

In certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims.

In addition, and for reasons related to a particular situation, interested parties may object to the processing of their data, in which case the Data Controller will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.

Under the right to portability, The interested parties have the right to obtain the personal data that concerns them in a structured format of common use and machine reading and to transmit it to another person responsible..

In the event that you have given consent for a specific purpose, the user has the right to withdraw consent at any time, without affecting the legality of the treatment based on consent prior to its withdrawal.

Where to go to exercise your rights?

If you wish to exercise your rights, you must go to the channel established for the exercise of rights by the data controller. (espaciodentalaguado@gmail.com), in order to respond to your request and/or by writing to the postal address indicated in this Privacy Policy.

What information is required to exercise your rights?

To exercise your rights, we need to prove your identity and the specific request you make to us, because we request the following information:

Documented information (written/email) of the petition in which the request is specified.
Proof of identity as the owner of data subject to exercise (Name, surname of the interested party and photocopy of the DNI of the interested party and/or the person who represents him or her, as well as the document accrediting such representation, in your case.
Address for notification purposes, date and signature of the applicant (in case of writing), or full name and surname (in case of email), or validation of the request in a private area of the communication channel with a personal authentication key for your identity.
When the person responsible for the treatment has reasonable doubts regarding the identity of the natural person making the request, may request that additional information be provided necessary to confirm the identity of the interested party..

What is the General Procedure for Exercising your rights??

Once we have received the required information, we will proceed to respond to your request in accordance with the general procedure for exercising the rights of the Data Controller.:

The data controller will provide the data subject with information relating to his or her actions on the basis of a request in accordance with the articles 15 a 22 (Rights of the interested party), y, in any case, within one month of receipt of the request.
This period may be extended for another two months if necessary., taking into account the complexity and number of requests.
The person responsible will inform the interested party of any such extensions within a period of one month from receipt of the request., indicating the reasons for the delay.
When the interested party submits the application by electronic means, Information will be provided by electronic means when possible, unless the interested party requests that it be provided in another way.
If the data controller does not process the interested party's request, will inform you without delay, and no later than one month after receipt of the request, of the reasons for their failure to act and the possibility of filing a claim with a supervisory authority and taking legal action.
The information provided will be free of charge, except reasonable fee for administrative costs.
The data controller may refuse to act on the request., although it will bear the burden of demonstrating the manifestly unfounded or excessive nature of the request.

What claim methods exist??

If you consider that your rights have not been properly taken care of, You have the right to file a complaint with the competent data protection authority (www.agpd.es).

International data transfers

It is possible that one of our service providers processes personal data in a third country not established in the territory of the European Union. (As a general rule, the data is processed and/or stored in EU territory.). In such case, our organization will apply all measures and controls available at its disposal to protect your personal data. The main measures adopted in this case are the signing of standard contractual clauses approved by the European Commission, accession to international agreements, and the application for approved and recognized certifications or codes of conduct. The platforms and providers that offer the greatest guarantees in this regard have been selected..

Likewise, The information collected by third-party cookies may be subject to this type of operations. You can obtain more information about these transfers in our Cookies Policy.

In any case, if you have any complaint or knowledge of misuse or bad practice of these companies, Please let us know so that we can take the appropriate measures through our contact email. (espaciodentalaguado@gmail.com).

User Responsibility

The user who provides us with their data guarantees that they are older than 14 years and that the data provided to the Controller are true, exact, complete and updated. For these purposes, The user confirms that he is responsible for the veracity of the data communicated and that he will keep said information appropriately updated so that it responds to his real situation., taking responsibility for any false and inaccurate data that may be provided., as well as damages, direct or indirect, that could be derived.

In addition, and to the extent that the user provides personal data of third parties, You have the obligation to inform and have the consent of said third parties for said treatment.

Confidentiality and security in data processing

The data managed by our company will be treated with the utmost reserve and confidentiality.. Our company has established all the technical and organizational means at its disposal to avoid the loss, misuse, disturbance, unauthorized access or copy of the data provided.

In relation to the personal data that the Controller may access as a result of the contracted services., We inform you that the appropriate confidentiality clauses have been signed with the staff.

WATERED TOOTH SPACE (ANTONIO GÓMEZ DEL CUETO) undertakes to maintain secrecy regarding the information to which it accesses, not to disclose or publish it, well directly, either through third parties or companies, or make it available to third parties, except legal obligation, communication to suppliers with whom you have signed the corresponding Data Processor contract and/or who have the authorization of the client/interested party. This obligation of confidentiality has an indefinite nature., subsisting upon termination of the contract for any reason. WATERED TOOTH SPACE (ANTONIO GÓMEZ DEL CUETO) undertakes to communicate and enforce compliance with the personnel under its charge and hired on its own behalf, the obligations established regarding confidentiality and data protection.

Changes in Privacy Policy

The Data Controller reserves the right to make, whenever, how many modifications, variations, deletions or cancellations in the contents and in the form of presentation of the same that it deems appropriate, since we recommend that you consult our privacy policy whenever you consider it relevant. If you do not agree with any of the changes, You can exercise your rights in accordance with the procedure described in this Privacy Policy.

If you need more information regarding any of the points indicated in this Privacy Policy, You can contact the Responsible by email addressed toespaciodentalaguado@gmail.com.