In compliance with the provisions of Regulation (EU) 2016/679, of April 27, 2016, relating to the protection of natural persons with regard to the processing of personal data and the free circulation of these data (General Regulation of Data Protection or RGPD), as well as the Organic Law 3/2018, of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), we inform you about the collection, treatment and use of personal data that are carried out through this website: https://centremedictredic.com, for which CERBA INTERNACIONAL S.A. is responsible.

CERBA INTERNACIONAL S.A. is the company that has acquired the different TREDIC medical centers and acts as Responsible for the Treatment of personal data collected through this website. However, for personal data processing activities that are not carried out through the website, those responsible for the processing are the respective medical centers, whose identifying and contact data are detailed below:

MEDICAL CENTERS	MEDICAL CENTERS DATA
EL MASNOU	TREDIC SL Itàlia, núm. 1, 08320, El Masnou (08320), Barcelona NIF: B08910127
LA VERNEDA	TREDIC SL Itàlia, núm. 1, 08320, El Masnou (08320), Barcelona NIF: B08910127
SABADELL	EIX CENTRE SANITARI, SL Carrer Prat de la Riba, 49, Baixos, 08206 Sabadell, Barcelona NIF: B61558672
SALOU	ESPECIALITATS MEDIQUES SALOU, SL Via Roma, 11 43840 Salou, Tarragona NIF: B43799998
REUS	CENTRE MÈDIC C.M.Q.R., SA Plaça de la Llibertat, 10, 43201 Reus NIF: A43201649

1. Who is responsible for the treatment of your data?

Identity of the person in charge: CIERBA INTERNACIONAL S.A. Spain with CIF number A08559932.

Postal address of the person in charge: Plaza Ramon Llull 7-10, 08203, Sabadell, Barcelona (Spain)

Contact phone number: 93 727 22 33

Contact email: atcl@cerba.com

On the other hand, you can contact the Data Protection Officer through the following addresses to exercise your rights: lopd@cerba.com or lopd@tredic.com

2. For what purpose do we process the data and what is the basis that legitimizes this treatment?

Below are details of the processing of personal data included in this website:

• Management of contact and information requests (Request budget, Contact):

Through the web, several contact forms are offered so that anyone interested can go to the different TREDIC Medical Centers (El Masnou, La Verneda, Sabadell, Salou, Reus) to request information or any assistance derived from the services provided by the entity . In addition, users can contact the centers by phone or email.

The legitimate basis for data processing will be the legitimate interest of TREDIC/CERBA in responding to contacts or requests sent by users.

These data will be kept for the time necessary to fulfill the request and for the time established by law, with a minimum duration of 3 years.

• Management of requested diagnostic tests:

Through the web page, a portal is made available to the user for the consultation of the analytical results carried out by any of the medical centers under the name TREDIC.

The legal basis for data processing will be the contractual relationship established between the user and the medical center.

The data and information related to the management of diagnostic tests will be kept as long as the relationship between the parties exists and, even so, as long as they do not prescribe the legally established conservation periods.

• Sending information about our activities and products:

The information collected in the forms can be used to send commercial information about the activities, products and services of TREDIC, if the user specifically authorizes it.

The legitimate basis for sending our activities and news will be the explicit consent granted by the user when selecting the optional acceptance box at the bottom of the forms enabled on the website. The user will have the right to revoke his consent at any time, without this affecting the legality of the treatment based on the consent prior to its withdrawal.

These data will be kept as long as the user does not revoke their consent to their treatment and during the time established by law, with a minimum duration of 3 years.

• User registration management:

The information collected in the registration form will be used to manage the user’s registration in the private area, as well as the consultation and access to their results and/or orders made.

The legal basis for data processing will be the consent given by the user by selecting the acceptance box of our Privacy Policy before sending the registration. The user will have the right to revoke your consent at any time without it affecting the legality of the treatment based on the consent prior to its withdrawal.

These data will be kept for the duration of the contractual relationship between the parties, as long as the user does not revoke their consent to the treatment of them, and for the period established by law, with a minimum duration of 3 years.

• Attention and management of the purchase made by the user through the purchase form located on the web.

The user’s personal data will be collected and processed in order to process the order and subsequent payment for the products and services offered on the web.

The basis of legitimization of data processing will be the execution of a sales contract in which the interested party is a party. If the user does not provide their personal data, they will not be able to manage their purchase or provide the requested service.

These data will be kept for the duration of the contractual relationship between the parties and for the time established by law for the fulfillment of fiscal obligations.

• Reception, management and resolution of communications of irregularities:

Through the enabled channel, the information relating to possible infractions communicated by the reporting persons will be managed.

The basis for legitimizing data processing will be the fulfillment of a legal obligation based on Law 2/23, of February 20. The data will be kept for the time necessary to decide whether to initiate an investigation into the facts reported.

In any case, after three months have passed since the receipt of the notification of infringement without investigative actions having been initiated, they must be deleted, unless the purpose of the conservation is to leave evidence of the operation of the procedure.

• Investigation of irregularities reported through the irregularity communication channel:

After verifying the provenance of the reported facts and determining the existence of solid evidence that supports the veracity of the communication, the data provided will be used to initiate an investigation.

The basis of legitimation is the fulfillment of a legal obligation.

Data on unproven facts or untrue information will be deleted immediately after becoming aware of this circumstance, unless this lack of veracity may constitute a criminal offense, in which case the information will be kept for the necessary time during which it is processed the judicial procedure. In the case of proven facts, once the investigation process has been completed, the data will be kept until the statute of limitations for the crimes or infractions committed, although in no case may they be kept for a period exceeding 10 years. For more information on this treatment, it is recommended to contact our Data Protection Officer (lopd@tredic.com).

3. Assignment or communication of data and international transfers

The data may be accessed by the providers who provide services in Cerba, when the purpose of the treatment so requires. Cerba has signed the processing contract with each of the suppliers to guarantee that these suppliers will treat your data in accordance with current legislation. The data may also be communicated to other companies belonging to the Cerba group to achieve the purposes detailed above. In the event that international data transfers are required, information will be provided and security measures will be implemented to ensure that the transfers are carried out securely.

No other transfers of data are foreseen, except in cases where there is a legal obligation or those service providers linked to Cerba.

4. Are automated decisions made or profiling based on the personal data provided?

There are no automated decisions or profiling.

5. What are your rights as a data subject?

The rights that you can exercise, as the owner of your personal data and at any time, are those indicated below:

• Right of access: Right to access your data and obtain confirmation of its treatment, as well as a copy of the personal data subject to treatment.
• Right of rectification: Right to have your data always up-to-date and to request the rectification of inaccurate data.
• Right to deletion: Right to request deletion when the data is not necessary for the purposes for which it was collected.
• Right of limitation: Right to request the limitation of the treatment of your personal data when the accuracy, legality or necessity of the treatment is doubtful; in such case, the data may be retained for the exercise or defense of claims.
• Right of opposition: Right of opposition to the treatment of your personal data, when the legal basis is the legitimate interest. Cerba will stop processing the data unless it has a compelling legitimate interest or for the formulation, exercise or defense of claims.
• Right of portability: Right to portability of data, when the legal basis is the existence of a contractual relationship or your consent.
• Right to revoke consent: At any time you can withdraw your consent for the treatment of your data for one or more purposes.

You can exercise your rights at any time and for free by sending an email to lopd@cerba.com or lopd@tredic.com, indicating the right you wish to exercise and your identifying information. You can also contact our Data Protection Officer via any of these email addresses.

You will also have the right to file a complaint with the Spanish Data Protection Agency if you consider that a violation of data protection legislation has been committed in relation to the processing of your personal data: www.aepd.es

6. Changes or modifications to our privacy policy

We may review this Privacy Policy at any time and publish the most updated version on our website. We recommend that you review it periodically to be informed of any changes. If an update significantly affects your rights, we will inform you accordingly.

The Privacy Policy was last updated on 10/01/2024.