Clínica Girona S.A., in compliance with European Data Protection Regulation 679/2016, guarantees the protection and confidentiality of any personal data our clients, “users,” provide to us on the website.

Basic information

In accordance with Article 13 of the European General Data Protection Regulation (GDPR), Clínica Girona S.A., as the data controller, informs you of the following relevant aspects:

  • Data ControllerClínica Girona S.A.
  • PurposeThe information that interested parties provide to us is processed for the purpose of managing the sending of the information they request from us. The data provided will be kept as long as a business relationship is maintained and its deletion is not requested.
  • Rights ExerciseTo: protecciodades@clinicagirona.cat.
  • WithdrawalFree.
  • RecipientsData will not be passed to third parties unless legally obliged to do so.
  • ClaimSpanish control authority
  • Additional InformationYou can consult additional and detailed information on data protection and privacy at www.clinicagirona.cat

Clínica Girona S.A. is responsible for the processing of personal data that it collects and processes, making the following means available to you to contact them:
Clínica Girona S.A, with tax identification number A17001025, and registered office at Carrer Barcelona, 206, 17005 Girona, at the email address: protecciodades@clinicagirona.cat

Policy Range

When you access and use our website (www.clinicagirona.cat), you agree to accept this privacy policy, as well as the provisions contained in the Legal Notice and cookie policy.

We are providing you with this information so that, prior to documenting your personal data, you can access the Privacy Policy and any other relevant information regarding Data Protection.

Likewise, this policy serves to provide additional second-level information for those informational clauses that redirect to it, for this purpose.

Purpose of Processing

Clínica Girona S.A. will process the information you provide for the following purposes:

  • To manage any type of request, suggestion, or petition regarding our professional services that you may formulate.
  • Commercial communications: Processing of your data for the purpose of informing you of articles of interest and our services via email.
  • Administrative, accounting, and tax management.
  • To manage data provided by job applicants through their Curriculum Vitae (CV) for the purpose of the selection process. You expressly authorise the processing of your data for the stated purpose.

Clínica Girona S.A. will process your data and information provided for selection processes with the strictest confidentiality, adopting the necessary technical and organisational measures to prevent loss, misuse, alteration, and/or unauthorised access.

Data retention period

The retention period for personal data will vary depending on the service you may contract or provide.
In any event, it will be the minimum necessary, and may be maintained according to the circumstances that apply in each case and current legislation.

Legitimisation

The legal basis for processing data is the consent of the data subjects for the processing and management of any request for information or enquiry about our professional services, as well as for sending commercial communications by Clínica Girona S.A. when the processing is necessary for the performance of a contract.

Data provenance

All personal data processed through our website is obtained directly from the data subject.

Rights

In compliance with the European data protection regulation – commonly known as GDPR – we inform you of the rights you possess as the owner and data subject of the personal data we collect and process, including the following rights:

  • You have the right to withdraw your consent to the processing of your personal data, free of charge and at any time.
  • The right of access to your personal data is recognised, as is the right to rectification thereof.
  • You have the right to object to the processing of your personal data, as well as the right to erasure, commonly known as the right to be forgotten. Likewise, you have the right to object to processing for automated individual decisions.
  • You have the right to obtain restriction of processing of your personal data.
  • You have the right to request the portability of your personal data.
  • You have the right to lodge a complaint with the relevant data protection supervisory authority, in this case the Spanish Data Protection Agency (agpd.es).

The aforementioned rights recognised may be exercised by means of a request directed to the email address protecciodades@clinicagirona.cat or through the contact methods we make available to you, indicating in the subject line of the message or communication the reference: GDPR Rights. Likewise, in order to process this request, we require additional information that allows us to verify the identity of the person exercising their rights and who is linked to the processing of personal data, requiring the provision of additional or documentary information to verify the identity of the affected party or interested party exercising the right in question.

Withdrawal

Directive 2002/58/EC, in relation to information society services and the possibility of sending promotional or advertising communications by electronic means, incorporates or provides recipients of these communications with simple and free mechanisms to withdraw the consent given for the purpose of sending them, in full compliance with the European and national regulations on the matter.

Cookie Policy

A Cookie is a small file stored on the user's computer that allows us to recognise them. The set of cookies helps us to improve the quality of our website, enabling us to control which pages our users find useful and which they do not.

Cookies are essential for the internet to function, providing countless advantages in the delivery of interactive services, facilitating your navigation and usability of our website. Please note that cookies cannot harm your equipment, and the fact that they are enabled helps us to identify and resolve errors. If you would like more information about cookies, please click on this link: https://clinicagirona.cat/cookies/

Data breach notification

In the event that your data is compromised, Clínica Girona S.A. will notify you and the competent supervisory authorities within 72 hours via e-mail with information regarding the scope of the breach, the affected data, any impact on the service, and Clínica Girona S.A.'s action plan with measures to protect the data and limit any possible negative effects on the data subjects.

“Personal data breach” means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed in connection with the provision of the service.

Doubts and modifications

If you have any questions about this Privacy Policy, please contact us by sending an email to the address protecciodades@clinicagirona.cat

Use of artificial intelligence systems in medical diagnosis

With the aim of improving the quality of care and diagnostic accuracy, this healthcare centre uses Artificial intelligence (AI) systems with a tool to support medical personnel in the interpretation of X-rays and other medical images.

These systems are certificates in accordance with Regulation (EU) 2017/745 on medical devices meet the requirements set out in the Regulation (EU) 2024/1689 on Artificial Intelligence (AI Act).

The algorithms used analysing medical images to identify potential anomalies or clinical patterns, but they do not issue diagnoses autonomously or make automated decisions with legal or significant effects for the patient. The final clinical decisions are always adopted by qualified medical professionals.

The processing of personal data in this context is carried out in accordance with the Regulation (EU) 2016/679 (GDPR) I am with Organic Law 3/2018 on Personal Data Protection and the Guarantee of Digital Rights, applying the necessary technical and organisational measures to guarantee its security and confidentiality.

In the event that your medical images or health data may be used for purposes of research or further training of AI models, they will be asked explicit and separate consent, guaranteeing anonymisation pseudonymisation of the data according to current regulations.

To exercise your rights of access, rectification, erasure, restriction or objection, you may contact Data Protection Officer (DPO) from the centre via post: protecciodades@clinicagirona.cat to the postal address indicated in this policy.