Logotipo Clínica Zabalegui

Privacy Policy

Privacy Policy

This Privacy Policy has been developed in accordance with the provisions of the Organic Law on Personal Data Protection currently in force, as well as Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, hereinafter referred to as the GDPR.

The purpose of this Privacy Policy is to inform the owners of the personal data being collected about specific aspects relating to the processing of their data, including the purposes of the processing, contact details for exercising their rights, data retention periods, and security measures, among other things.

Data controller

  • Name: ION ZABALEGUI S.L.
  • Address: C/ San Vicente 8, (Edif. Albia 1), Floor 12 – 48001 Bilbao, Bizkaia
  • Contact telephone number: 944 231 608
  • Email: recepcion@ionzabalegui.com
  • Data Protection Officer: TECNODOSIS S.L. dpd@utpr.es

Data processing

Any personal data requested will consist solely of that which is strictly necessary to identify and respond to the request made by the data subject, hereinafter referred to as the interested party. Such information will be processed fairly, lawfully and transparently in relation to the interested party. Furthermore, personal data will be collected for specific, explicit and legitimate purposes and will not be further processed in a manner incompatible with those purposes.

The data collected from each data subject will be adequate, relevant and not excessive in relation to the purposes for which it is collected in each case, and will be updated whenever necessary.

The data subject will be informed, prior to the collection of their data, of the general points regulated in this policy so that they can give their express, precise and unequivocal consent to the processing of their data, in accordance with the following aspects.

Purposes of processing

The explicit purposes for which each of the processing operations is carried out are set out in the information clauses included in each of the data collection channels (web forms, newsletters, etc.).

However, the personal data of the interested party will be processed for the sole purpose of providing an effective response and attending to the requests made by the user, specified alongside the option, service, form or data collection system used by the owner.

 

Legitimacy

As a general rule, prior to processing personal data, ION ZABALEGUI S.L. obtains express and unequivocal consent from the owner of the data by incorporating informed consent clauses into the various information collection systems.

However, in cases where the consent of the data subject is not required, the legal basis for the processing carried out by ION ZABALEGUI S.L. is the existence of a specific law or regulation that authorises or requires the processing of the data subject’s data.

Recipients

As a general rule, ION ZABALEGUI S.L. does not transfer or communicate data to third parties, except when legally required to do so. However, if necessary, such transfers or communications of data are reported to the interested party through the informed consent clauses contained in the various means of collecting personal data.

Origin

As a general rule, personal data is always collected directly from the data subject. However, in certain exceptional cases, data may be collected through third parties, entities or services other than the data subject. In this regard, this point will be communicated to the data subject through the informed consent clauses contained in the different means of collecting information and within a reasonable period of time, once the data has been obtained, and no later than one month thereafter.

Retention periods

The information collected from the data subject will be kept for as long as necessary to fulfil the purpose for which the personal data was collected, so that once the purpose has been fulfilled, the data will be deleted. Such deletion will result in the data being blocked and kept available only to public administrations, judges and courts, in order to deal with any liabilities arising from the processing, during the limitation period for such liabilities. Once this period has expired, the information will be destroyed.

Browsing data

With regard to browsing data that may be processed through the website, if data subject to regulations is collected, we recommend consulting the Cookies Policy published on our website.

Rights of data subjects

Data protection regulations grant a series of rights to data subjects or data owners, website users, or users of ION ZABALEGUI S.L.’s social media profiles.

The rights of the persons concerned are as follows:

  • Right of access: the right to obtain information about whether your own data is being processed, the purpose of the processing being carried out, the categories of data being processed, the recipients or categories of recipients, the retention period and the origin of such data.
  • Right of rectification: the right to obtain the rectification of inaccurate or incomplete personal data.
  • Right to erasure: the right to obtain the erasure of personal data.
  • Right to object: the right to object to certain processing based on the consent of the data subject.
  • Right to restriction: the right to obtain restriction of data processing.
  • Right to portability: the right to obtain data in a structured, commonly used and machine-readable format, and to transmit it to another data controller in accordance with data protection regulations.

Likewise, the data subject has the right to lodge a complaint with the competent supervisory authority.

Interested parties may exercise the aforementioned rights by contacting recepcion@ionzabalegui.com or by writing to the following address: C/ San Vicente 8, Edificio Albia 1, Planta 12 – 48001 Bilbao, Bizkaia, indicating in the subject line the right you wish to exercise and attaching proof of identity (e.g. ID card).

In this regard, ION ZABALEGUI S.L. will respond to your request as soon as possible, taking into account the deadlines set out in data protection regulations.