Privacy policy
How we collect and process the data you provide to us, in accordance with the GDPR and the Spanish LOPDGDD.
This is a courtesy translation. The Spanish version is the legally binding text.
At CLINICA DERMAINTEGRA SLP we understand that a transparent relationship with all users is essential. Below you will find our Privacy Policy, so that you are always properly informed about how we collect and securely process any data you provide.
Your data will be processed in accordance with current legislation and, specifically, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).
Reading our Privacy Policy carefully will give you the information you need to know what we will do with the data you provide.
1. Who is the Data Controller?
If you, or an authorised person, have provided us with your data, we inform you that CLINICA DERMAINTEGRA SLP, tax ID B21823448, is the controller of that data.
- Address: C/ Faisán nº 1, Local 12, 18014 Granada, Spain
- Contact email: info@dermaintegra.com
- Data Protection Officer: Grupo Isonor
2. What personal data do we process?
The personal data we process is that which users voluntarily provide when using our services, as well as data arising from communications or from any contractual or pre-contractual relationship with us.
3. What is the purpose and legal basis for processing your data?
Your personal data is processed to manage the relationship you have with us and to meet our legal obligations. Below we detail the purposes of each processing activity, its legal basis and the retention period.
| Processing activity | Purpose | Data categories | Legal basis | Retention period |
|---|---|---|---|---|
| Human resources and employment | Comprehensive management of the employment relationship: contracts, payroll, social security, timekeeping, occupational risk prevention, health surveillance, corporate training, selection and supervision of IT resources. | Identification and contact data Personal characteristics Social circumstances Academic and professional data Employment details Health data Attendance and sick leave | Performance of a contract or pre-contractual measures (Art. 6.1.b) Legal obligation (Art. 6.1.c) Legitimate interest (Art. 6.1.f) Employment and social security obligations (Art. 9.2.b) | During the employment relationship and, afterwards, blocked as required by law. |
| Recruitment and candidate management | Management of recruitment processes, assessment of applications and filling of current or future vacancies. | Identification and contact data Personal characteristics Social circumstances Academic and professional data Assessment in selection tests Special categories (only if applicable): degree of disability | Performance of a contract or pre-contractual measures (Art. 6.1.b) Consent of the data subject (Art. 6.1.a) | Job candidates (CVs): maximum 1 to 2 years from receipt Consent given until withdrawn |
| Customer management and provision of services | Provision, follow-up and development of contracted services, handling of enquiries or incidents, and management of the contractual relationship, invoicing and payments. | Identification and contact data Personal characteristics Academic and professional data Commercial information Economic, financial and insurance data Transaction and service data | Performance of a contract or pre-contractual measures (Art. 6.1.b) Legal obligation (Art. 6.1.c) | During the contractual relationship and subsequent legal limitation period. |
| Supplier and contractor management | Management of the contractual or pre-contractual relationship with suppliers and contractors, approval, receipt of services, order management, invoicing and payments. | Identification and contact data Personal characteristics Academic and professional data Commercial information Transaction and service data | Performance of a contract or pre-contractual measures (Art. 6.1.b) Legal obligation (Art. 6.1.c) | During the contractual relationship and subsequent legal limitation period. |
| Corporate communication, web, social media and image | Management of the corporate image, promotional content, events and news through the website, social media and institutional media. | Identification and contact data Preferences and browsing data | Consent of the data subject (Art. 6.1.a) Legitimate interest (Art. 6.1.f) | Consent given until withdrawn Until the data subject objects |
| Video surveillance | Capture of images by the video surveillance and/or alarm system to protect the entity's assets. | Identification and contact data | Legitimate interest (Art. 6.1.f) | Maximum 1 month |
4. Will your data be disclosed to third parties?
There will be no disclosure, transmission or transfer of personal data, unless necessary to provide the service, required by law, or with the express consent of the user.
To manage our services efficiently, we may need to engage providers to process data under our instructions (for example, hosting, legal or accounting services). In such cases, processing on behalf of third parties will be governed by a contract guaranteeing confidentiality and compliance with the regulations.
5. How do we manage electronic communications?
Users may receive commercial communications only when they have given their express and voluntary consent.
In every communication, users will have the option to object to receiving further messages by requesting to be removed from our database. The request will be processed as soon as possible.
6. What are your rights?
Data protection regulations give you the following rights, which you can exercise at any time:
- Right of access: to know what data of yours we are processing.
- Right to rectification: to correct inaccurate or incomplete data.
- Right to erasure ("right to be forgotten"): to request deletion of your data when it is no longer necessary for the purpose for which it was collected.
- Right to restriction of processing: to limit the use of your data in certain cases.
- Right to data portability: to receive your data in a structured format and transmit it to another entity.
- Right to object: to object to a specific processing activity.
- Right not to be subject to a decision based solely on automated processing: to avoid decisions made exclusively by algorithms.
To exercise any of these rights, you can write to CLINICA DERMAINTEGRA SLP at the address or email given in section 1. Please include your full name, your request and a copy of your ID or other identifying document.
If you believe there is a problem or an infringement of the regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Acceptance and changes to this Privacy Policy
By using our Website, it is understood that you have read and accept the terms of this Privacy Policy.
CLINICA DERMAINTEGRA SLP reserves the right to modify this policy to adapt it to legislative or case-law changes. We recommend checking this page periodically to stay up to date.