PRIVACY POLICY

Responsible for the processing of personal data collected via the website

CREU BLANCA, the legal entity responsible for the collection and processing of personal data, is the company responsible for the processing of the personal data provided by the USER through this website, taking responsibility for the same following the provisions of current legislation on the protection of personal data: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals concerning the processing of personal data and the free movement of such data.

Data Protection Delegate

CREU BLANCA has a Data Protection Delegate (DPD-DPO). If you wish, you may contact him/her by writing to: Paseo Reina Elisenda de Montcada nº 17 (08034) Barcelona or by e-mail to the following address: rgpd@creublanca.es.

Personal data processed, purpose and legitimisation of the data processing

At CREU BLANCA, depending on how the USER provides us with their personal data, we process the following categories. The purpose of the processing varies according to the channel through which the USER has provided it:

Request for a medical visit:

Purposes:

Management of the data provided by applicants to arrange appointments with the different centres of the Group under the different specialities and/or medical tests.

Category of data:

First name.

Surname.

Address.

Insurance company.

Passport.

City.

Postal Code.

Telephone.

E-mail address.

Medical test.

Speciality.

Legitimation

The legal basis for the present processing is the express consent of the user when requesting the medical visit, and the processing of the data is necessary to manage the appointments requested by the user.

Appointment request:

Purpose:

Management of the data provided by the user to manage their registration as a user, to use the web services offered by the website and to send the user commercial information from the Group.

Category of data:

E-mail.

Legitimation

The legal basis for the present processing is the use of our registration form, the processing of the data being necessary for registration as a user and the sending of commercial information.

Creu Blanca Club

Purpose:

Management of the user’s data to register with Club Creu Blanca and manage their membership, as well as the sending of commercial information and the enjoyment of the Group’s advantages.

Category of data:

First name.

Surname.

ID NUMBER.

Date of birth.

Email address.

Sex

Address.

Telephone.

Mobile phone.

Legitimation:

The basis for the present treatment is the use of our registration form to join Club Creu Blanca, being the treatment of the data necessary for the registration as a user, the use of our advantages and the sending of commercial information.

Consult your case

Purpose:

Management of user data to resolve queries made in relation to medical doubts raised by users.

Category of data:

Name

Surname

Telephone number.

E-mail address.

Documentation that may be attached.

Legitimation:

The basis for the present processing is the completion of your query through our query form, the processing of the data being necessary to provide you with a reply.

Suggestion box

Purpose:

Management of user data to deal with suggestions made.

Data category:

First name.

Surname.

Telephone

E-mail address.

Documentation that may be attached.

Legitimation:

The basis for the present treatment is the realization of your suggestion through our form.

Contact form

Purpose:

Management of user data to resolve queries concerning medical doubts raised by users.

Category of data:

Name.

Telephone number.

E-mail address.

Legitimation:

The basis for the present processing is the completion of your inquiry through our inquiry form, the processing of the data being necessary to provide you with a reply.

Retention of data

We store USER data provided through our forms, depending on the method of user input.

Request for a medical visit: 6 months after the possible visit or cancellation of the visit and/or until the prescription of the legal actions that may arise.
User discharge: until the user requests to be discharged as such.
What’s wrong with me, doctor?: one year and/or until the statute of limitations of any legal actions that may arise.
Request for group quotations: one year and/or until the statute of limitations for any legal action that may arise.
Online payment: 5 years and/or until the statute of limitations for any legal actions that may arise.
Creu Blanca Club: until the user requests cancellation of membership.
Consult your case: one year and/or until the statute of limitations of any legal actions that may arise.
Suggestion box: six months and/or until the statute of limitations of any legal actions that may arise.
Contact form: six months and/or until the expiry of the statute of limitations for any legal actions that may arise.

Recipients of communications

The USER’s personal data may be communicated to the CREU BLANCA group. The companies that make up the CREU BLANCA Group are the following: Centro de Exámenes Médicos, S.A. (A43091388), Diagnosis, S.A. (A08689333), Exámenes Médicos por Imagen, S.L. (B59347864), Medical Resonancia Magnética, S.A. (A59347914), Instituto Clínico de Alta Tecnología, S.A. (A17049479), Medical Imaging, S.L. (A17049479), Medical Imaging, S.L. (A17049479), Medical Imaging, S.L. (A17049479). (A17049479), Medical Imaging, S.L. (B66985342), Diagnosis Virtual, S.L. (B57259160), Paracelso Diagnóstico Médico, S.A. (A99009433), FAMACEMERI, S.L. (B62435219), Fundació Privada Imothep (G60963816) and TEGIN CONSULTORES SL (B99513913). No information is provided for commercial purposes to third parties outside the IRSJG group.

Rights of interested parties

The USER, at any time, may contact our Data Protection Delegate (DPD), revoke the consent provided, and/or exercise their rights of access, rectification, suppression, opposition, limitation of processing, and/or data portability by writing to the DPD at the address provided established in this Policy or at the following e-mail address: rgpd@creublanca.es

Likewise, the USER has the right to oppose direct marketing and/or unsubscribe from the newsletter through the options provided when sending the newsletter or under the terms established in the previous paragraph.

If the USER considers that his/her rights have been violated, he/she also has the right to complain to the competent supervisory authority.

Origin of the data

In principle, the data always originates from the owner of the data. If you receive a communication from CREU BLANCA and have no record of having provided us with your data, a third party may have usurped your status/identity. In this case, please inform us through the means provided in this Privacy Policy.

In this sense, the user is responsible for the authenticity of the data provided, ensuring that it is accurate, current, and complete for the purpose for which it is provided, and assuming liability for damages, both for loss of profit and consequential damages, which could be generated by such inaccuracies or falsehoods. In any case, if the data provided in the corresponding forms belongs to a third party, the user is solely responsible for the correct acquisition of consent and information by the third party on the aspects reflected in this legal notice and privacy policies.