Skip to main content

Privacy policy

Who is the data controller of your personal data?

Company name: Sedanreb, SL
Address: Hortal d’en Pou, 54, ground floor, 17200 Palafrugell
Contact telephone: 621 241 648 – 872 202 777
Email address: clinica@empordaodontolegs.com

Who is the Data Protection Officer and what do they do?

The Data Protection Officer is responsible for ensuring diligent compliance with data protection regulations. You may contact them at the following email address: dpo@utpr.es

Principles we will apply to your personal data

In the processing of your personal data, we will apply the following principles, in accordance with the requirements of the new European General Data Protection Regulation:

Principle of lawfulness, fairness and transparency: we will always require your consent for the processing of your personal data for one or more specific purposes, about which we will inform you in advance with full transparency.

Principle of data minimisation: we will only request data that is strictly necessary in relation to the purposes for which it is required.

Principle of storage limitation: data will be stored in our database for the time necessary for the purposes of processing; depending on the purpose, we will inform you of the relevant retention period in each case.

Principle of integrity and confidentiality: your personal data will be processed in such a way as to ensure appropriate security and confidentiality.

You should be aware that we take all necessary precautions to prevent unauthorised access to or misuse of user data by third parties.

How have we obtained your data?

The legal basis for the processing of your data is your free, specific, informed and unambiguous consent, for the purpose of executing the dental service contract formalised by acceptance of the estimate or, where appropriate, the preparation of a prior estimate.

Exceptionally, and always with your prior consent, the data may have been obtained by other means.

What personal data do we process?

The personal data we process, for the legitimate purposes explained in point 6 and depending on the services, may include:

  • First and last name
  • Postal address
  • NIF (tax identification number)
  • Telephone number
  • Email address
  • Dental radiographs (periapical, bitewing, cephalometric or teleradiography, dental CT scan (CBCT), orthopantomography)
  • Health data obtained from conversations with you
  • Data relating to medical insurance
For what purpose do we process your personal data?

We process your personal data primarily for the purpose of collecting your health data in order to provide you with the best possible healthcare, recording all data which, under medical criteria, allows accurate and up-to-date knowledge of your health status and which is relevant to the medical treatment to be carried out.

We also process your personal data to manage all additional services related to healthcare (analysis laboratories, dental technicians), the relationship with your insurance provider or mutual insurance company, and for accounting and tax management, in particular the invoicing of services provided.

Likewise, always with your prior consent, for the management and development of marketing activities and the sending of commercial communications by electronic means.

  • Public authorities: for compliance with legal obligations to which we are subject due to our activity.
  • Mutual insurance companies and insurance providers: in the event that you access our services through medical insurance, and solely for the purpose of managing and charging for the services provided.
  • Analysis laboratories, dental prosthetic technicians and similar: solely for the purpose of providing the contracted treatment.
  • Healthcare professionals collaborating with the clinic: solely for the purpose of carrying out the contracted treatment. In any case, the data never leaves the clinic.
  • Tax and accounting consultancy: solely for the purpose of managing our accounting (issuing invoices, submitting tax returns, commercial obligations…).
When and why can we share your data with third parties?

Your personal data may be disclosed to the following recipients for the reasons indicated below:

International data transfers

Under no circumstances do we transfer your personal data to any person or entity, either within or outside the EEA.

How long do we keep your personal data?
  • Medical record: the legally established retention period for this type of document, currently 5 years.
  • Other personal data (name, address, NIF): the periods established by tax and commercial legislation.
What are your rights?

Any person has the right to obtain confirmation as to whether or not Sedanreb, SL is processing personal data concerning them.

Data subjects have the right to:

  • request access to their personal data
  • request rectification or erasure
  • request restriction of processing
  • object to processing
  • request data portability

We provide the appropriate forms to exercise these rights.

Data subjects may access their personal data and request rectification of inaccurate data, or, where appropriate, request erasure when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

Under certain circumstances, data subjects may request restriction of processing; in such cases, the data will only be retained for the exercise or defence of legal claims.

Under certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data.

Data subjects also have the right to effective judicial protection and the right to lodge a complaint with the supervisory authority, in this case the Spanish Data Protection Agency, if they consider that the processing of their personal data infringes the European Data Protection Regulation.