PRIVACY POLICY

In compliance with the General Data Protection Regulation 2016/679 of the European Parliament and of the Council (hereinafter, “GDPR”) and Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights, Ribera Salud Group hereby informs the user on how the personal data will be gathered and processed in the following website: www.riberasalud.com

1. Identification of the Data Controller.

The Data Controller of the user’s personal data is Torrevieja Salud, S.L.U. with tax ID no. B54404785 and registered address at Avenida de las Cortes Valencianas, number 58, Edificio Sorolla Center, 46015, Valencia, Spain.

Users may get in touch with the company by calling the following number: +34 965 725 915, or at the following email address: info.ciudadquesada@riberacare.com.

For matters regarding this Privacy Policy, the user may contact the RIBERA SALUD Group’s Data Protection Officer by sending an email to: dpo@riberasalud.es.

2.- Processing Purposes and Legal Basis.

The following data processing operations will be carried out by the data controller through the Website, with the appropriate legal basis, respecting the rights and freedoms of the interested parties:

2. 1 Manage information and contact requests.

• Purpose: deal with requests for contact through the means made available on the website (email, telephone, contact form, etc.), in order to be able to attend the petitions of the services offered.
• Legal basis: Execution of the pre-contractual or contractual relationship with the patient.
• Types of data processed: identification, contact and health data. 

2. 2 Patient care management

• Purpose: The provision of health care services, diagnosis and medical treatments requested.
• Legal basis: Execution of the pre-contractual or contractual relationship with the patient.
• Types of data processed: identification, contact, health, and financial data. The collection of personal data may be carried out by the website, the telephone, the health centres of Ribera Group in which you will be attended () or they may be provided, where appropriate, by insurance companies, mutual accident insurance companies.

 

2.3 Managing and dealing with patient appointment requests.

• Purpose: Manage the medical appointments requested through the channels indicated on the Website.
• Legal basis: Execution of the pre-contractual or contractual relationship with the patient.
• Types of data processed: identification, contact, personal and health data.

2.3 Financial guidance.

• Purpose: Provide the Financial advice services detailed on the website for the payment of the medical treatments or other services requested by the patient.
• Legal basis: Execution of the pre-contractual or contractual relationship with the user.
• Types of data processed: identification data, contact data, transactions of goods and services, financial data and health data.

2.4 Manage the assistance of transfers, accommodation or language services.

• Purpose: The provision of transfer, accommodation, and/or language services published and requested through the Website.
• Legal basis: Execution of the pre-contractual or contractual relationship with the patient.
• Types of data processed: identification data, contact data, transactions of goods and services, financial data and health data.

2.5  Manage user subscription to the newsletter.

This data processing will be carried out by the entity RIBERA SALUD, S.A.U, with Tax Identification Code A-03681186 and registered office at Avenida Cortes Valencianas, number 58, Edificio Sorolla Center, 46015, Valencia, Spain.

• Purpose: manage user subscriptions to the newsletter by sending electronic commercial communications about the services.
• Legal basis: consent from the parties interested.
• Types of data processed: identification and contact data.

 

3.- Recipients.

3.1. Communication of data to third parties. 

Your data may be transferred in accordance with the following assumptions:

• Patient data may be accessed by centers of the Ribera group (https://www.riberasalud.com/sociedades-del-grupo-ribera/ ) in order to guarantee the adequate continuity of care and provision of the above-mentioned services.
• In accordance with the provisions of current legislation, your data may be communicated to the health authorities and other public bodies with competence in the matter.
• In the case of Patients that use private health insurance companies, their data will be communicated to the insurance company for the payment of the services. At the request of the Tax Agency, Courts or Tribunals or other competent Public Administrations.

3.2. Data Processors 

The processing of patients’ data may be carried out by suitable service providers hired. Said service providers will only process the data for the purposes defined by the Data Controller.

4. International Data Transfers

Data controller will carry out the treatment of the patient’s data entirely in the territory of the European Union, for which reason it does not foresee any international transfer of data.

5.- Storage Periods.

RIBERA SALUD will keep the user’s personal data for as long as needed in order to be able to process the data for the purposes it was gathered for, unless the user objects to the processing or withdraws their consent, depending on the legal basis. In any case, the personal data will be stored for the periods of time required by law to abide with legal obligations.

Likewise, regarding the treatment related to the sending of electronic commercial communications, the data of the users who have consented to their reception will be kept until the user requests the cancellation of said reception, following the instructions that they will find at the bottom of each email.

6.- User Rights.

The user has the right of access, rectification, deletion, objection, restriction and data portability; users may exercise these rights by sending a signed petition, together with a photocopy of their ID, directly to the RIBERA SALUD Group’s Data Protection Officer, or by sending an email to the following address: dpo@riberasalud.es, or a letter to the following postal address: Cortes Valencianas, number 58, Edificio Sorolla Center, 46015, Valencia (Spain), with subject line: “Data Protection”

Furthermore, users are informed that, if their requests to exercise their rights are not answered, they may file a complaint with the Spanish Data Protection Agency (AEPD). More information available at: www.aepd.es.

7. Changes.

The organisation reserves the right to modify the contents of this Website at any time, and may add new functionalities, as well as modify the current conditions. In this case, the corresponding update will be published on the Website so that the user is aware of any changes.

Last updated on: February 2025