Clínica Girona S.A., in compliance with European Data Protection Regulation 679/2016, guarantees the protection and confidentiality of all personal data provided to us by our clients, “users”, on the Website.

Basic information

In accordance with Article 13 of the General Data Protection Regulation (GDPR), Clínica Girona S.A., as the data controller, informs you of the following relevant aspects:

  • Data Controller.- Clínica Girona S.A.
  • Purpose.The purpose of the information provided by interested parties is processed for the purpose of managing the sending of the information they request from us, and to provide interested parties with the requested information. The data provided will be retained for as long as a commercial relationship is maintained and its deletion is not requested.
  • Rights Exercise.To: protecciodades@clinicagirona.cat
  • Withdrawal.Free
  • Recipients.-- Data will not be shared with third parties unless legally required.
  • Claim.Spanish control authority
  • Additional Information.- You can consult additional and detailed information on data protection and privacy at www.clinicagirona.cat

Clínica Girona S.A. is responsible for the processing of personal data it collects and processes, providing you with the following contact methods:
Clínica Girona S.A. with NIF A17001025, with its registered address at Carrer Barcelona, 206, 17005 Girona, and email address: protecciodades@clinicagirona.cat

Policy Range

When you access and use our website www.clinicagirona.cat, you agree to accept this privacy policy, as well as the provisions contained in the Legal Notice and cookie policy.

We are providing you with the information so that, prior to documenting your personal data, you can access the Privacy Policy and any other relevant information regarding Data Protection.

This policy also serves to provide additional second-level information, of those informative clauses that redirect to this one, for that purpose.

Purpose of Processing

Clínica Girona S.A. will process the information you provide for the following purposes:

  • To manage any type of request, suggestion, or petition regarding our professional services that you may formulate.
  • Commercial communications: Processing of your data for the purpose of informing you about articles of interest and general information about our services via email.
  • Administrative, accounting, and tax management.
  • To manage data provided by job candidates through their Curriculum Vitae (CV) for the selection process. You expressly authorise the Campsite to process your data for the stated purpose.

Clínica Girona S.A. will process your data and information provided for selection processes with the strictest confidentiality, adopting the necessary technical and organisational measures to prevent loss, misuse, alteration, and/or unauthorised access.

Data retention period

The retention period for personal data will vary depending on the service you may contract or provide.
In any case, it will be the minimum necessary, and may be adjusted according to the circumstances that apply in each case, and current legislation.

Legitimisation

The legal basis for processing data is the consent of the data subjects for the processing and management of any request for information or enquiry about our professional services, as well as for sending commercial communications by Clínica Girona S.A. when the processing is necessary for the performance of a contract.

Data provenance

All personal data processed through our website is obtained directly from the data subject.

Rights

In compliance with the European data protection regulation – commonly referred to as the GDPR – we inform you of the rights you hold as the data subject and owner of the personal data we collect and process, including the following rights:

  • You have the right to withdraw your consent to the processing of your personal data, free of charge and at any time.
  • The right to access your personal data, as well as the right to rectification, is hereby acknowledged.
  • You have the right to object to the processing of your personal data, as well as the right to erasure, commonly known as the right to be forgotten. Likewise, you have the right to object to processing for automated individual decision-making.
  • You have the right to obtain restriction of processing of your personal data.
  • You have the right to request the portability of your personal data.
  • You have the right to lodge a complaint with the relevant data protection supervisory authority, which is the Spanish Data Protection Agency (agpd.es).

The aforementioned rights recognised can be exercised by means of a request sent via email to: protecciodades@clinicagirona.cat or via the contact methods we make available to you, indicating in the subject line of the message or communication the reference: *GDPR Rights. Likewise, in order to process this request, we require additional information that allows us to verify the identity of the person exercising the right and linked to the processing of personal data. Additional or documentary information will be required to prove the identity of the affected or interested person exercising the right in question.

Withdrawal

By virtue of Directive 2002/58/EC concerning the services of the information society and the possibility of sending promotional or advertising communications by electronic means, incorporate or provide recipients of these communications with simple and free mechanisms to withdraw consent granted for the purpose of sending them, fully complying with European and national regulations on the matter.

Cookie Policy

A ‘Cookie’ is a small file that is stored on the user's computer and allows us to recognise them. The collection of cookies helps us to improve the quality of our website, enabling us to control which pages our users find useful and which they do not.

Cookies are essential for the functioning of the internet, offering countless advantages in the provision of interactive services, making your browsing and usability of our website easier. Please note that cookies cannot damage your equipment and that, if they are enabled, they help us to identify and resolve errors. If you would like more information about cookies, please click on this link: https://clinicagirona.cat/cookies/

Data breach notification

In the event that your data is compromised, Clínica Girona S.A. will notify you and the relevant supervisory authorities within 72 hours by email with information on the scope of the breach, the affected data, any impact on services, and Clínica Girona S.A.'s action plan with measures to protect the data and limit any potential negative effects on data subjects.

A “personal data breach” refers to a security violation that results in the destruction, loss, alteration, unauthorised disclosure of, or access to, personal data which has been transmitted, stored or otherwise processed in connection with the provision of the Service, whether accidentally or unlawfully.

Doubts and modifications

If you have any questions about this Privacy Policy, please contact us by sending an email to the address protecciodades@clinicagirona.cat

Use of artificial intelligence systems in medical diagnosis

With the aim of improving the quality of care and diagnostic accuracy, this healthcare centre uses Artificial intelligence (AI) systems with a tool to support medical personnel in the interpretation of X-rays and other medical images.

These systems are certificates in accordance with Regulation (EU) 2017/745 on medical devices meet the requirements set out in the Regulation (EU) 2024/1689 on Artificial Intelligence (AI Act).

The algorithms used analysing medical images to identify potential anomalies or clinical patterns, but they do not issue diagnoses autonomously or make automated decisions with legal or significant effects for the patient.
The final clinical decisions are always adopted by qualified medical professionals.

The processing of personal data in this context is carried out in accordance with the Regulation (EU) 2016/679 (GDPR) I am with Organic Law 3/2018 on Personal Data Protection and the Guarantee of Digital Rights, applying the necessary technical and organisational measures to guarantee its security and confidentiality.

In the event that your medical images or health data may be used for purposes of research or further training of AI models, they will be asked explicit and separate consent, guaranteeing anonymisation pseudonymisation of the data according to current regulations.

To exercise your rights of access, rectification, erasure, restriction or objection, you may contact Data Protection Officer (DPO) from the centre via post: protecciodades@clinicagirona.cat to the postal address indicated in this policy.