This document complements and expands the information provided in the different data collection forms of the CDIAP Service.
WHO IS RESPONSIBLE FOR THE TREATMENT OF YOUR DATA?
Aspace Catalunya Foundation – CIF: G08393936 – c. Tres Pins 31, 08038, Barcelona
932002534 - aspace@aspace.cat
Data protection delegate contact: protecciodedades@aspace.cat
FOR WHAT PURPOSE DO WE PROCESS YOUR PERSONAL DATA?
At CDIAP ASPACE we process the information provided by interested parties in order to provide health and social assistance, with which we complete the patient's clinical history. This same information is used in the invoicing processes for the services provided by ASPACE as a supplier to the Generalitat de Catalunya.
Additionally, the data may be used (with the express consent of the person concerned) for other purposes, such as:
- Clinical research
- Dissemination of the entity: information regarding the processing of data with it purpose
- Institute
- Management of internship student data
A "criticality or complexity profile" can be drawn up for CDIAP ASPACE users based on the information provided. In no case are automated decisions made based on this profile.
HOW LONG WILL WE KEEP YOUR PERSONAL DATA?
The health and social data provided by the interested persons will be kept throughout the care process and once it has ended, in accordance with law 21/2000, they will be kept for a minimum of 15 years, with the possibility of extending the term case of relevant data for healthcare purposes, advance wishes, epidemiological and research data.
WHAT IS THE LEGITIMATION FOR THE TREATMENT OF YOUR DATA?
The legal basis for the processing of your data is the execution of the assistance contract signed with the interested party.
In the case of students on internships, the execution of the internship contract or agreement in application of article 6.1 letter b) GDPR.
For other purposes: The express consents of the interested party, without in any case the withdrawal of any of these consents conditions the execution of health care.
TO WHICH RECIPIENTS WILL YOUR DATA BE COMMUNICATED?
ASPACE transmits data from patients treated there to:
- Generalitat de Catalunya: basic invoicing data for services as a provider entity.
- Public and private entities that have a direct relationship with the patient: as part of the assistance process, we coordinate with schools, CAPs, EAPs, etc.
Apart from the above, ASPACE contracts different products or services in order to carry out health and rehabilitation services:
- iSalus: Offers connection services to CatSalut applications. There is a data processor contract that regulates the privacy of the data used.
- ecosystem: Aspace uses Office 365 as a corporate mail server, under the EU-US Privacy Shield agreement. Information available at: https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK
- Iron mountain: Company that takes care of clinical records on paper for patients who stop visiting. There is a data processor contract that regulates the privacy of the data used.
WHAT ARE THE RIGHTS WHEN THE DATA IS PROVIDED TO US?
- Anyone has the right to get information about whether at the Aspace Catalunya Foundation we are processing personal data that affect them, or not.
- Interested persons have the right to access to your personal data, as well as to request the rectification of inaccurate data or, where appropriate, request yours deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
- Interested persons have the right to request the portability of your data. The Aspace Catalunya Foundation will facilitate this portability as long as it is technically feasible.
- In certain circumstances, those interested may request the limitation of treatment of your data, in which case we will only keep them for the exercise or defense of claims.
- In certain circumstances and for reasons related to their particular situation, those interested may object to treatment of your data. The Aspace Catalunya Foundation will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.
- The interested person has the right to withdraw any consent previously granted This will not affect the legality of treatments already carried out based on withdrawn consent.
- For exercise any of these rights, the interested person will have to address Carrer Tres Pins 31-35 in Barcelona or the electronic address protecciodedades@aspace.cat, providing an identification document and setting out the right that you want to exercise, and if applicable the reasons or particular situation that makes it necessary. A right request form can be found at the web address: www.aspace.cat/ca/protecciodedades.
- In any case, the interested person can present one claim before the Catalan Data Protection Agency if you believe that the Aspace Catalunya Foundation has not satisfied your rights correctly.
HOW DID WE OBTAIN YOUR DATA?
In general, the data we process are always provided by the interested person or their family.
In some cases (with the patient's authorization) basic and contact data can be obtained from the Central Register of insured persons of the Department of Health of the Generalitat of Catalonia, to facilitate the validation of your data.
