Privacy policy

Data controller

In accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), we inform you that the controller of the personal data collected on https://dentalpalafrugell.com is:

• Owner: Codol 2013, S.L.P.
• Trade name: Clínica Dental Palafrugell
• Tax ID (NIF): B55159982
• Address: Carrer de Sant Sebastià, 87, baixos, 17200 Palafrugell (Girona)
• Email: dental@medicpalafrugell.com
• Phone: +34 972 30 65 64
• Registry details: Centre sanitari autoritzat per la Generalitat de Catalunya amb el número de registre E17776940

Data protection officer (DPO)

Our data protection officer is SIB TRAINING, S.L.U. (Sib Prodasa). For more information, you can contact them through their website: sibprodasa.es.

Data we process and purposes

We only process the data strictly necessary for the following purposes:

• Handling the enquiries and requests you send us by phone, email or social media.
• Managing the data submitted through the Site's forms, for the purpose indicated on each form.
• Producing anonymous usage statistics for the Site (only if you accept analytics cookies).
• Counting visits and page views in aggregate, using our own cookieless analytics (Rybbit).
• Protecting the Site's forms against spam and automated use (Google reCAPTCHA).

Health data

Health data is a special category of data (Art. 9 GDPR). We process it to provide, manage and, where applicable, invoice your healthcare (Art. 9(2)(h) GDPR), and all of the centre's staff are bound by professional secrecy.

Please do not include detailed clinical information in the Site's forms: we do not need it to answer you, and it is better discussed at your appointment or by phone. If you do include it, we will treat it with due confidentiality and only to deal with your enquiry, with your explicit consent (Art. 9(2)(a) GDPR).

We keep clinical records for the periods set by health law (Spanish Law 41/2002 on patient autonomy and, in Catalonia, Law 21/2000), and we only disclose them to third parties when the law requires or allows it: for example, to your health insurer if you come through it, or to the health authorities.

Legal basis

The legal basis for processing is the data subject's consent (Art. 6.1.a GDPR) when you contact us or accept non-essential cookies, and our legitimate interest (Art. 6.1.f GDPR) in responding to the communications you send us. We do not make automated decisions or build profiles.

Cookieless audience measurement is based on our legitimate interest (Art. 6.1.f GDPR) in knowing how the Site is used so that we can improve it. You may object to it at any time by writing to dental@medicpalafrugell.com.

Protecting the forms with reCAPTCHA is based on our legitimate interest (Art. 6(1)(f) GDPR) in preventing spam and fraudulent use of the Site.

Data retention

We keep data only for as long as necessary for the purpose for which it was collected and, afterwards, for the periods required to comply with legal obligations. Contact data is kept while the relationship lasts or until you request its deletion.

Recipients

We do not disclose personal data to third parties, except where legally required. The technical providers that serve us (web hosting and, where applicable, analytics) act as data processors with the guarantees of Art. 28 GDPR. If you accept analytics cookies, Google Ireland Ltd. processes usage data in aggregate form under its own privacy policy; international transfers may occur under the Standard Contractual Clauses and the EU-US Data Privacy Framework. Cookieless analytics (Rybbit) runs on a server operated by Somia Digital as data processor: it infers your country and city from your IP address and, together with your browser, creates an encrypted identifier that does not identify you. It stores nothing on your device and does not share data with third parties.

The forms use Google reCAPTCHA (Google Ireland Ltd.) to tell people from bots: Google processes your IP address and technical data about your device and browsing under its privacy policy, with possible transfers to the United States covered by the EU-US Data Privacy Framework and the Standard Contractual Clauses.

Your rights

You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to dental@medicpalafrugell.com, indicating the right you wish to exercise and attaching a copy of an identity document if identity verification is required.

If you consider that the processing does not comply with the regulations, you may lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan 6, 28001 Madrid) or the Catalan Data Protection Authority.

Security

We apply appropriate technical and organisational measures to guarantee the confidentiality, integrity and availability of the data, taking into account the state of the art and the nature of the data processed.

Updates to this policy

We may update this policy to adapt it to regulatory or Site changes. The current version will always be the one published on this page, with the revision date indicated in the heading.