1. Who is responsible for the Processing of your Personal Data?
   Name: INSTITUT ODONTOLOGIC SANTA ANNA
   Address: Av. de la República Argentina, 271, 08023 Barcelona
   Contact telephone number: 93 212 48 64
   Email: dentalsantaanna@gmail.com
2. Who is the Data Protection Officer and what does he do?
   The Data Protection Officer is responsible for diligently ensuring
   for compliance with data protection regulations; you can put in
   Contact at the following email: dpd@utpr.es
3. Principles that we will apply to your personal information
   When processing your personal data, we will apply the following principles
   that comply with the requirements of the new European protection regulation
   of data.  Principle of legality, loyalty and transparency: We will always require your
   consent to the processing of your personal data for one or
   several specific purposes that we will inform you in advance with absolute
   transparency.  Data minimization principle: We are only going to request the data
   strictly necessary in relation to the purposes for which the
   we require.  Principle of limitation of the conservation period: The data will be kept
   in our database for no longer than is necessary for the
   purposes of the treatment, depending on the purpose, we will inform you of the period of
   corresponding conservation in any case.  Principle of integrity and confidentiality: Your data will be treated in such a way
   manner that ensures adequate security of personal data and
   confidentiality is guaranteed.  You should know that we take all necessary precautions to avoid
   unauthorized access or misuse of our users' data by
   part of third parties.
4. How have we obtained your data?
   The legal basis for the processing of your data is free consent,
   specific, informed and unequivocal, for the purpose of the execution of the contract
   of provision of dental services formalized by the acceptance of
   budget, or, where appropriate, the preparation of a prior budget.
   Exceptionally, and always with prior consent, there could have been
   obtained by other means.
5. What personal data do we process?:

The personal data that we process, for the legitimate purposes that you
We explain in point 6., and depending on the services, they can be:

• Names and surnames
• mailing address
• NIF
• Phone
• Email
• Dental x-rays (periapical, fin/bite, cephalometry or
• teleradiography, dental CT, orthopantomography)  Health data obtained from conversations with you
• Data relating to medical insurance.

6. For what purpose we process your personal data
   We process your personal data with the primary purpose of collecting your data
   of health in order to provide you with the best health care, leaving
   record of all those data that, under medical criteria, allow the
   true and up-to-date knowledge of your health status and that they have
   relevance to the medical treatment to be performed.
   Likewise, we also process your personal data to manage all the
   additional services related to healthcare (laboratories)
   analysis, prosthetics), the relationship with your insurance or mutual entity, and for the
   accounting and tax management, in particular, the billing of services provided.
   Likewise, as long as we previously have your consent for the
   management and development of marketing activities and sending communications
   commercial by electronic means.
7. When and for what reason we may provide your data to third parties.
   Your personal data may be transferred to the following recipients by the
   reasons stated,

• Public administrations: for compliance with obligations
• laws to which we are subject for our activity.  Mutual companies and insurance companies: in the event that you access our
• services through medical insurance and with the sole purpose of being able to
• manage the management and collection of the services provided.  Analysis laboratories, dental prosthetics and similar: with the only
• purpose of giving you the contracted treatment.  Health professionals, clinic collaborators: with the only
• purpose of being able to carry out the contracted treatment. In any case,
• The data never leaves the clinic.  Tax and accounting management: with the sole purpose of managing our
• accounting (issue invoice, presentation of tax returns,
• commercial obligations….)

8. International data transfers
   In no case do we transfer your personal data to any person or entity
   neither inside nor outside the EEC.
9. How long do we keep your personal data
   Medical history: the legally established deadlines for this type of
   document that is currently established at 15 years.
   Other personal data (names and surnames, postal address, NIF): deadlines
   legally established by tax and commercial legislation
10. What are your rights?
    Anyone has the right to obtain confirmation as to whether we are
    processing personal data that concerns you or not.
    Interested persons have the right to

• Request access to personal data relating to the interested party.
• Request its rectification or deletion.
• Request limitation of your treatment
• Oppose the treatment.
• Request data portability.

We have the corresponding models at your disposal so that you can
exercise your rights.
Interested parties will be able to access their personal data, as well as request the
rectification of inaccurate data or, where appropriate, request its deletion when,
among other reasons, the data are no longer necessary for the purposes for which they were
collected.
In certain circumstances, interested parties may request the limitation
of the processing of your data, in which case they will only be kept for the
exercise or defense of claims.
In certain circumstances and for reasons related to your situation
In particular, interested parties may object to the processing of their data.
The interested parties will also have the right to effective judicial protection and
file a claim with the supervisory authority, in this case, the
Spanish Data Protection Agency, if they consider that the processing of
personal data that concerns you infringes the European Regulation of
Data Protection.