(Effective date: 29/09/2023)
08520 DENTAL SLP with CIF: B66638347 and located at the address for these purposes at: Carrer Papers 15, Les Franqueses de Vallès, 08520, Barcelona. Telephone: (+34) 935.950.247 Email:info@cerarootclinic.com from now on CeraRoot CLINIC.
The Data Protection Officer (DPD) is TECNODOSIS SL. You can contact him at the following email: gdpr@cerarootclinic.com
In the treatment of your personal data, we will apply the following principles that conform to the requirements of the new European data protection regulation.
Principle of legality, loyalty and transparency: Always require your consent for the processing of your personal data for one or more specific purposes that you previously with absolute transparency.
Principle of data minimization: We will only ask for the data that is strictly necessary in relation to the purposes for which we require it.
Principle of limitation of retention period: The data will be kept in our database for no longer than necessary for the purposes of treatment, depending on the purpose, we will inform you of the corresponding retention period in any case.
Principle of integrity and confidentiality: Your data will be treated in such a way that adequate security of personal data is guaranteed and confidentiality is guaranteed.
You should know that we take all necessary precautions to prevent unauthorized access or misuse of our users’ data by third parties.
The legal basis for the processing of your data is the free, specific, informed and unequivocal consent, in order to execute the contract for the provision of dental services formalized by the acceptance of the budget, or, where applicable, the preparation of previous budget.
Exceptionally, and always with prior consent, they could have been obtained by other means.
The personal data we process, for the legitimate purposes we explained in point 6., and depending on the services, can be:
Names and surnames
postal address
NIF / Passport
Telephone and / or mobile
Dental X-rays (periapical, fin/bite, cephalometry or teleradiography, dental tap, orthopantomography)
Intraoral and facial photos and videos.
Health data obtained from conversations with you
Data relating to medical insurance
We process your personal data with the primary purpose of collecting health data in order to facilitate the best healthcare, keeping a record of all those data that, under medical criteria, allow truthful and up-to-date knowledge of your state of health and that have relevance for the medical treatment to be performed.
Likewise, we also process your personal data to manage all additional services related to health care (analysis laboratories, prosthetics), the relationship with your insurance or mutual entity, and for accounting and fiscal management, in particular, the invoicing of the services provided.
Likewise, as long as we previously have your consent for the management and development of marketing activities and the sending of commercial communications by electronic means.
Provide medical care: personal information is processed in order to provide you with the health care you need, as well as to properly manage the health services and perform the administrative tasks necessary for the provision of care, as in the following examples:
to send appointment reminders;
Issuing proof of hospital visit documents for family members or others who have ties to you and who can request this document in compliance with applicable regulations;
To communicate with another health center when indicated;
To process any incident or claim submitted by the person using the service and / or for you, the patient;
Administer surveys aimed at collecting your opinion on the care offered to you; these surveys will be used exclusively in order to improve and develop our care services and management activities; i
To provide the services offered through the patient portal: personal information belonging to patients who register as users of the portal may be processed for the purposes of accessing and using the tool.
Scientific research: your data can be treated for scientific purposes, in accordance with the specific regulations governing this treatment.
Procedures: for anonymization and the use of a pseudonym: for the purposes of scientific or statistical research, your data may be subjected to certain procedures so that they are not identifiable or so that they can no longer be linked anywhere if there is no additional information to appear separately. .
Processing of requests for information, complaints, suggestions, complaints and exercise of data protection rights, etc..: Your data will be processed to attend to the request by any means necessary, including telephone calls and / or electronic means.
Compliance with legal obligations: to comply with applicable legal obligations, it may be necessary to process personal information. Specifically, these obligations may be related to compliance with legislation on data protection, taxation, health, etc.
Drafting and execution of the contract: personal information is processed to manage the contractual relationship with the patient.
Video surveillance: Some healthcare facilities have a video surveillance system that takes real-time images of people using the facility’s services. These data are processed for the sole purpose of security and to monitor the people who appear on the premises.
Newsletter distribution: if you provide explicit consent, your data may be used to send digital newsletters from the publications to which you are subscribed.
Distribution of advertising materials by any means in case of additional consent: if you so accept, we can transfer your data to business entities that are part of the CeraRoot Group to inform, by any means and for promotions and advertising purposes – in relation to the facilities, services, products or events related to the health and healthcare – from the companies of the CeraRoot group (under no circumstances will your data be used to send you advertising content from third parties).
The information collected is processed for the purposes set out and in no case will the data be processed for purposes that conflict with those set out here. Remember that processing data for purposes related to scientific research or statistical measurements is not considered incompatible with the original purpose.
We process your data with the same level of care and quality at all times, regardless of the channel you may choose to communicate with us (for example, a facility’s website, mobile apps, face-to-face, telephone , computer).
Purpose and Legal Basis
Provision of healthcare:
treatment necessary for the prevention, diagnosis, provision of medical care or treatment, as well as to manage care systems and services Processing is necessary for the performance of a contract in which the person concerned is interested. party and / or the legitimate interests pursued by the data controller.
Scientific research:Treatment based on scientific or statistical research purposes
Request attention:processing based on the consent of the affected person and / or the legitimate interests pursued by the
Compliance with legal obligations:The treatment is necessary for the fulfillment of a legal obligation to which the person in charge is subject
Formalization and execution of the contract:processing is necessary for the performance of a contract to which the interested party is a party.
video surveillance:the processing is necessary for the performance of a task carried out in the public interest as established in the provisions of Law 5/2014 on private computer security
Newsletter sending:Processing based on the consent of the person concerned
Sending Ads:Processing based on the consent of the person concerned
Your personal data may be transferred to the following recipients for the reasons indicated:
Public administrations: for compliance with the legal obligations to which we are subject due to our activity.
Mutual funds and insurance companies: in case they access our services through medical insurance and for the sole purpose of being able to manage the management and collection of the services provided.
Analysis laboratories, dental prosthetics and similar: with the sole purpose of giving you the contracted treatment.
Health professionals, collaborators of the clinic: with the sole purpose of being able to carry out the contracted treatment.
Tax and accounting management: with the sole purpose of managing our accounting (issuing invoices, submitting tax returns, commercial obligations…)
In no case did we transfer your personal data to any person or entity either inside or outside the EEC, except in the case of international patients from outside the EEC, or collaborating professionals from outside the EEC, or collaborating companies laboratories, or suppliers of services or products in order to carry out the contracted treatment.
In general, your data will only be kept for the time strictly necessary for the purpose for which it was collected.
The personal data provided, as well as those derived from the health care provided, will be kept for the appropriate time in each case (according to medical and legal criteria), and at least ten years counted from the date of discharge of each care process, unless the autonomous and / or specific regulations establish a minimum retention period higher than that indicated, in which case it will be what the applicable regulations provide.
After this minimum period, and having ended the assistance and contractual relationship, the person responsible for keeping the data properly blocked, during the term of the terms corresponding to the legal prescription.
Personal data processed for the purpose of scientific research will be kept under a conservation criterion for a maximum period of five years from the end of the research. With regard to the data processed for the purposes of scientific research, the control authorities of the autonomous communities may, upon request from the data controller and in accordance with the procedure established by law, agree on the full maintenance of certain data, given the historical, statistical or scientific values in accordance with the legislation that is applicable in each case.
The personal data provided in order to manage any request for information, complaint, suggestion, claim, exercise of data protection rights, etc., will be kept for the time necessary to process the request, and in any case during the legally established time, as well as during the period necessary for the formulation, exercise or defense of claims.
The data processed for the fulfillment of legal obligations are kept for the time established in the applicable legislation.
The data requested for the formalization and execution of the contract will be kept for the duration of the contractual relationship, as well as for the period necessary for the formulation, exercise or defense of claims, at least five years.
The images captured through the video surveillance systems must be kept for a maximum period of 30 days, unless the data controller is aware of any fact that may be relevant for a subsequent judicial action.
The data processed by the sending of newsletters to which they have subscribed, will be kept until the user revokes his consent, unsubscribes from the newsletter and / or exercises the rights of opposition and / or deletion .
The data processed by the sending of commercial communications will be kept until the interested party revokes the consent and / or exercises the rights of opposition and / or deletion.
Anyone has the right to obtain confirmation as to whether or not we are processing personal data that affects them.
Interested parties have the right to:
Request access to personal data relating to the interested party.
Request its rectification or deletion.
Request the limitation of your treatment.
Object to treatment.
Request data portability.
We have at your disposal the corresponding models so that you can exercise your rights.
Those interested will be able to access their personal data, as well as request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes that were collected.
In certain circumstances, interested parties may request the limitation of the processing of their data, in which case they will only be kept for the exercise or defense of claims.
In certain circumstances and for reasons related to their particular situation, interested parties may object to the processing of their data.
The interested parties will also have the right to effective judicial protection and to present a claim before the control authority, in this case, the Spanish Data Protection Agency, if they consider that the processing of personal data concerning them infringes the European Regulation on Data Protection.
