PRIVACY POLICY

  1. Data Controller
  • Identity: GLASIR SALUD, S.L.
  • Tax ID (NIF): B72544737
  • Address: Carrer Mare de Déu de la Salut 78, 4º B1, 08024, Barcelona.
  • Contact: glasirsalud@gmail.com
  • Health Registry: Center registered in the Registry of Centers, Services and Health Establishments of the Generalitat de Catalunya under code E08756654.
  1. Purpose of Data Processing

At GLASIR SALUD, S.L., we process the personal data provided by users and patients for the following purposes:

  • Healthcare Services: Comprehensive management of psychiatric, psychological, speech therapy, and occupational therapy care, including the creation and custody of the patient's Clinical History (Medical Records).
  • Administrative Management: Management of appointments, reminders, billing, and communications related to medical follow-ups.
  • Professional Communications: Only if express consent has been granted, sending information regarding services, workshops, or health updates from the center.
  1. Lawful Basis for Processing

The processing of your data is based on the following legal conditions:

  • Performance of healthcare relationship: Necessary for the provision of the contracted health services.
  • Compliance with a legal obligation: Pursuant to Ley 41/2002 (Patient Autonomy Act) and Ley 21/2000 of the Parliament of Catalonia, which mandate the documentation and conservation of clinical records.
  • Processing of special categories of data (Health Data): According to Article 9.2.h) of the GDPR, processing is necessary for the purposes of medical diagnosis, the provision of health or social care, and the management of health systems.
  1. Data Retention

Personal data will be retained for as long as the healthcare relationship is maintained. Once concluded, the following periods will apply:

  • Clinical Histories (Medical Records): They will be kept locked and restricted for a minimum of 15 years from the discharge date of each healthcare process, in compliance with the health regulations of the Generalitat de Catalunya.
  • Administrative Data: They will be retained for the periods stipulated by commercial and tax legislation (6 years).
  • Commercial Communications: Until the data subject requests their erasure.
  1. Recipients and Confidentiality

Data will not be transferred to third parties, except under legal obligation (Health Administration, Courts) or for payment management purposes.

Confidentiality Note: All our professionals and external collaborators linked to the care provision are bound by Medical Professional Secrecy and have signed confidentiality and data protection agreements in accordance with the GDPR.

  1. Rights of the Data Subject

You have the right to obtain confirmation as to whether or not we are processing your personal data. You may exercise your rights of:

  • Access: Including the right to obtain a copy of your medical records.
  • Rectification: Of inaccurate or incomplete data.
  • Erasure (Right to be forgotten): When the data is no longer necessary (subject to the 15-year statutory medical retention period).
  • Objection and Restriction: To the processing of your data in the cases provided by law.

How to exercise your rights?

You must send a written request to glasirsalud@gmail.com or to our postal address in Barcelona, attaching a photocopy of your ID card (DNI/NIE) or equivalent document to verify your identity.

  1. Security and Protection

GLASIR SALUD, S.L. has implemented the necessary technical and organizational security measures to guarantee the integrity and confidentiality of health data. This prevents its alteration, loss, or unauthorized access, applying high-level security protocols tailored to the risks of processing sensitive data.