Privacy policy

This Privacy Policy is part of the General Terms and Conditions that govern this Website.

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of personal data (General Data Protection Regulation), as well as the applicable national regulations on the subject, we inform you of the following:

Who is responsible for processing your data?

Controller name: ARROYO HERNANDEZ DENTAL S.L.

Address: Calle l´Ordana nº8, 03550 Sant Joan d’Alacant.

Phone: 965651523

Email: clinica@dentaljavierarroyo.com

Data Protection Officer contact:

Name: ALBADAT CONSULTORA, S.L.

Email: clinica@dentaljavierarroyo.com

You may contact us through any of the means above.

We reserve the right to modify or adapt this Privacy Policy at any time. We recommend that you review it periodically.

If you belong to any of the following categories, please consult the corresponding section:

PATIENTS

For what purposes will we process your personal data?

  • Provision of medical and healthcare services.
  • Providing information regarding your clinical test results and any other medical tests.
  • Access control, stay and presence management in our facilities.
  • Administrative management.

What is the legal basis for processing your data?

The legal basis for processing medical and health data is established in Law 41/2002 of 14 November on Patient Autonomy and Rights and Obligations in terms of clinical information and documentation. It also includes the execution of a medical-health service contract.

Compliance with a legal obligation

In the context of health and tax inspections, access to health data by the competent authorities is covered by Royal Legislative Decree 8/2015 of 30 October, approving the consolidated text of the General Social Security Law, as well as Laws 33/2011 of 4 October on General Public Health and 14/1986 of 25 April on General Health.

Likewise, access by duly authorised healthcare personnel within the scope of their inspection duties is supported by Law 41/2002 on Patient Autonomy.

How long will we keep your personal data?

In accordance with Article 17 of Law 41/2002, clinical documentation will be retained for a minimum of 5 years from the date of discharge of each healthcare process and for the period required by a judge or court.

Who will your data be shared with?

Your data may be shared with the Regional Health Service and Social Security partner entities that are legally required to access such data for the proper provision of medical and healthcare services.

If the medical care is provided through agreements with Insurance Companies or under policies or coverage that you, as a patient, benefit from, the ENTITY may provide information about the services rendered, including personal data, as requested by the insurance companies or entities under which coverage the service is provided, as this is essential for the provision and billing of such services.

Likewise, in cases where your treatment requires the use of prostheses or other specific surgical materials, your personal data may be communicated to the supplier entities solely and exclusively for this purpose.

WEBSITE, EMAIL, AND APPOINTMENT CONTACTS

What data do we collect through the website?

We may process your IP address, operating system, browser type, and even the duration of your visit, anonymously.

If you provide your data through the contact form, you will be identified in order for us to contact you if necessary.

For what purposes will we process your personal data?

  • To respond to your enquiries, requests, or applications.
  • To manage the requested service, respond to your request, or process your enquiry.
  • To send electronic information related to your request.
  • To send commercial or event-related information by electronic means, provided you have given express authorisation.
  • To carry out analysis and improvements to the website, as well as to our products and services.
  • To improve our marketing strategy.

What is the legal basis for processing your data?

Your acceptance and explicit consent: In cases where a request requires completing a form and clicking a “submit” button, doing so necessarily implies that you have been informed and have expressly given your consent to the content of the clause attached to that form or to this privacy policy.

All of our forms indicate mandatory fields with a * symbol. If you do not provide these fields, or do not tick the checkbox to accept the privacy policy, the form will not be submitted. Typically it includes the phrase: “I have read and accept the Privacy Policy.”

CLIENTS

For what purposes will we process your personal data?

  • Preparation of quotes and follow-up communications between both parties.
  • To send electronic information related to your request.
  • To send commercial or event-related information by electronic means, with express authorisation.
  • To manage administrative, communication, and logistics services.
  • To handle billing and applicable tax declarations.
  • To perform related transactions.
  • To manage monitoring and collections.

QUALITY SURVEYS

For what purposes will we process your personal data?

• To assess the quality of the service provided.

• To improve the services offered, in accordance with quality standards.

What is the legal basis for processing your data?

The legal basis is the explicit consent of the respondent.

SUPPLIERS

For what purposes will we process your personal data?

• To send electronic information related to your request.

• To send commercial or event-related information by electronic means, with express authorisation.

• To manage administrative, communication, and logistics services.

• To perform related transactions.

• To handle billing and applicable tax declarations.

• To manage control and payments.

What is the legal basis for processing your data?

The legal basis is the acceptance of a contractual relationship, or failing that, your consent by contacting us or offering your products by any means.

SOCIAL MEDIA CONTACTS

For what purposes will we process your personal data?

• To respond to your enquiries, requests, or applications.

• To manage the requested service, respond to your request, or process your enquiry.

• To engage with you and create a community of followers.

What is the legal basis for processing your data?

The acceptance of a contractual relationship within the relevant social media platform, and in accordance with its privacy policies (we recommend you review the privacy policy of each social media network you use).

How long will we keep personal data?

We can only view or remove your data in a limited manner, as we maintain a specific profile. We will process your data for as long as you allow us by following us, being friends, or liking/following our pages.

Any data correction, limitation, or content restriction must be done through your social media profile settings.

JOB APPLICANTS

What is the purpose of processing your personal data?

  • To organise selection processes for the recruitment of employees.
  • To schedule interviews and evaluate your application.
  • If you have given your consent, we may share your CV with partner companies or affiliates with the sole aim of helping you find employment.

How long will we keep your personal data? 

We inform you that one year after receiving your CV, we will proceed with its secure deletion.

What is the legal basis for processing your data? 

The legal basis is your unequivocal consent when submitting your CV.

Do we include personal data of third parties? 

As a general rule, we only process data provided by the data subjects themselves. If you provide data of third parties, you must first inform and obtain their consent, otherwise you release us from any responsibility for the breach of this requirement.

Do we process data of minors? 

We do not process data of minors under 14 years of age without the authorisation of a parent or legal guardian. Please do not provide such data if you are under that age or provide data of third parties who are under that age. ARROYO HERNANDEZ DENTAL S.L. is not responsible for any non-compliance with this provision.

Do we send electronic communications? 

We will only do so to manage your request if this is one of the means of contact you have provided.

If we send commercial communications, they will have been previously and expressly authorised by you.

What security measures do we apply? 

Rest assured: we have adopted an optimal level of protection for the personal data we handle, and we have installed all technical and organisational means available to us, according to the current state of technology, to prevent loss, misuse, alteration, unauthorised access, and theft of personal data.

Who will your data be shared with? 

Your data will not be transferred to third parties, except in the case of legal obligation. Specifically, they will be shared with the Spanish Tax Agency and banks or financial institutions for the payment of services or purchased products, as well as with data processors necessary for the execution of agreements.

If a purchase or payment is made using an app, website, platform, bank card, or any other online service, your data will be shared with or processed by that platform, always with the highest security standards.

Our website developers, maintenance providers or hosting services will have access to the website when instructed. These providers are bound by a service contract that requires them to maintain the same level of privacy as we do.

If you are a patient, we may share your data with the Regional Health Service and Social Security collaborators due to legal obligations. Also, with your insurance providers. More information is available in the “Patients” section.

Any international data transfers using US-based apps will be made under the Privacy Shield agreement, ensuring those American software providers comply with EU data privacy regulations.

What are your rights?

  • To know whether or not we are processing your data.
  • To access your personal data.
  • To request the rectification of your data if it is inaccurate.
  • To request the deletion of your data if it is no longer necessary for the purposes for which it was collected or if you withdraw your consent.
  • To request the restriction of the processing of your data in certain cases, in which case we will only keep it in accordance with current regulations.
  • To receive your data in a structured, commonly used, and machine-readable format (data portability). If you prefer, we can send your data to a new data controller that you designate. This is only valid in certain situations.
  • To file a complaint with the Spanish Data Protection Agency or other competent authority if you believe we have not handled your request properly.
  • To withdraw your consent for any processing to which you previously consented, at any time.

If you update any data, we would appreciate being informed to keep our records current.

Do you want a form to exercise your rights? 

We have forms available to exercise your rights, which can be requested by emailing clinica@dentaljavierarroyo.com or you can use those provided by the Spanish Data Protection Agency or third parties. These forms must be signed electronically or accompanied by a copy of your ID.

If someone represents you, they must also provide a copy of their ID or sign the form electronically.

Forms may be submitted in person, by post or by email to the address provided at the beginning of this document.

How long does it take to respond to your rights request? 

It depends on the right being exercised, but no longer than one month from your request, two months if the matter is very complex. We will inform you if we need more time.

Do we use cookies? 

You can check our cookies policy at the corresponding link from the homepage of our website.

How long will we keep your personal data? 

Personal data will be kept while you remain connected with us.

Once that relationship ends, personal data processed for each purpose will be retained for the legally required periods, including the period during which a judge or court may require it, based on the statute of limitations for legal actions.

Data will be retained until the aforementioned legal periods expire or, if there is no such legal period, until the data subject requests deletion or revokes the given consent.

We will retain all information and communications relating to the provision of our service, while warranty periods last, to handle any potential claims.

THIRD PARTY SERVICES USED ON THIS WEBSITE 

To provide services strictly necessary for the development of our activity, https://dentaljavierarroyo.com/ uses the following providers under their respective privacy conditions:

Hosting: Webempresa
Website platform: WordPress.Org
Website theme: Generate Press
Newsletter and messaging services: Sendinblue
Chat: WhatsApp
Tracking and analytics: Google (Analytics)

Sendinblue: used to automate commercial newsletters and to send emails with product and/or service promotions. Privacy Policy: https://es.sendinblue.com/legal/privacypolicy/

WhatsApp: tool used for communication with users, clients, and participants via WhatsApp Ireland Limited (for users located in Europe). Contact: https://www.whatsapp.com/contact/?subject=messenger and Privacy Policy: https://www.whatsapp.com/legal?eea=1#privacy-policy

https://dentaljavierarroyo.com/ also studies user preferences, demographics, traffic patterns, and other collective information to better understand our audience and their needs. This tracking also helps us display the most relevant ads.

Occasionally, THE WEBSITE MANAGER may use applications or tools not included in this list if they provide better support for a specific task. In such cases, users will be informed as necessary.

Any user or individual may establish a hyperlink or technical linking device (e.g., links or buttons) from their website to https://dentaljavierarroyo.com/ (the “Hyperlink”). The existence of a Hyperlink does not imply any relationship between https://dentaljavierarroyo.com/ and the owner of the website where it is established, nor does it imply approval or acceptance of its content or services. In any case, https://dentaljavierarroyo.com/ reserves the right to prohibit or disable any Hyperlink to the website at any time.

DO YOU NOT WISH TO RECEIVE COMMERCIAL INFORMATION FROM US OR WANT TO WITHDRAW YOUR CONSENT?

In accordance with Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce, you may object at any time to the use of your information for advertising purposes, market research, or satisfaction surveys. You may also revoke your consent at any time (without retroactive effect).

To do so, please send an email to: clinica@dentaljavierarroyo.com. If you have received advertising via email, you can also object directly by clicking the link provided in the email and following the instructions. Another simpler option is to access your user account and select the appropriate settings.

Please note that our systems may take up to 48 hours to fully process your request to unsubscribe or revoke consent, during which you may still receive messages.

Regarding data associated with the social media profiles of THE WEBSITE MANAGER, exercising access rights depends on the functionality of the social network and access to user profile information. We recommend checking the privacy policies of each social network.

You may stop interacting with, following, or receiving information from our social media profiles, delete content you are no longer interested in, or restrict your sharing settings through the platform’s privacy settings.

Users can access the privacy policies of each social network and configure their profiles accordingly. We encourage you to familiarise yourself with the terms of use before engaging:

PERSONAL DATA COLLECTION SYSTEMS AND THEIR PURPOSES

  1. Cookies: When users browse this site or register, cookies are stored. You may consult our cookies policy at any time for more information and deactivation instructions.
  2. Chat system: Users can ask questions via the website chat, managed by WhatsApp.
  3. Newsletter subscription: Users can subscribe to our newsletter via Sendinblue by entering their name and email.
  4. Contact form for estimates: Users may request an estimate by submitting their name, email, budget, and target website.
  5. Tracking systems: Google (Analytics and Tag Manager) is used to study user preferences, demographics, and traffic to better understand our audience. You can view Google’s privacy policies here.

DIGITAL MEDICAL RECORD

To improve diagnostic and treatment processes, the data controller offers a Digital Medical Record (DMR) service. The DMR includes personal data from past and present clinical events concerning the data subject.

The DMR may include hospital records, emergency reports, discharge letters, lab and radiology test results, or outpatient specialist reports.

Health professionals working with the data controller may access the DMR only if necessary in the patient’s best interest.

Users always have the right to:

a. Know who has accessed their DMR; b. Revoke consent to the DMR; c. Request concealment/deletion of specific health information in the DMR or revoke previous concealment/deletion requests; d. Contact the data controller or the Data Protection Authority in case of complaints.

Additional resources:

We also use Facebook Ads to attract customers. Ads can be segmented by location, demographics, interests, etc. Data collected is subject to this privacy policy as soon as the user accepts cookies and privacy terms.

We will not share, sell, or rent your personal information. However, we may share certain information with authorised third-party service providers to deliver services.

SOCIAL MEDIA PLUGINS

Our website offers links and services related to various social networks (e.g., Facebook’s “Like” button). If you are a member and click the relevant link, the network may connect your profile data with your website visit.

You should understand the data handling policies of each social network. Configure your social profile settings to ensure privacy. We recommend reviewing terms before use:

CHANGES TO THIS PRIVACY POLICY

THE WEBSITE MANAGER reserves the right to amend this privacy policy to reflect legal or industry practice updates. Any changes will be posted on this page with sufficient notice prior to implementation.

Book your appointment with our specialists

Book now