Privacy Policy

This Privacy Policy explains how we process the personal data you provide through the website quenet-torrent.com, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Act 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD).

1. Data controller

2. Data we process

We process the data you voluntarily provide through the website forms, by email, by telephone or via WhatsApp:

• Identification and contact data: name and surname, telephone number, email address and, where applicable, country or city of residence.
• Health data: only such data as you choose to include on your own initiative in the enquiry field or in the clinical documentation you send us (diagnosis, reports, test results). These data fall within the special categories of Article 9 GDPR and receive reinforced protection.
• Browsing data: IP address, device and cookie identifiers, pages visited and traffic source, where you have given your consent.

Please do not include sensitive clinical information in the web forms unless it is essential. Where appropriate, we will provide you with a secure channel for sending clinical documentation.

3. Purposes and legal basis

Providing the data marked as mandatory is necessary in order for us to handle your request. If you do not provide it, we will not be able to process your enquiry.

4. Retention periods

• Contact data and enquiries: for as long as the relationship is maintained and, once it ends, for the limitation periods applicable to any legal actions that may arise.
• Medical records, should a care relationship come into existence: for the period laid down in Spanish Act 41/2002 and the applicable regional legislation, with a minimum of five years from the discharge of each episode of care.
• Accounting and tax data: for the periods required by commercial and tax legislation.
• Browsing data: for the periods set out in the Cookie Policy, and until you withdraw your consent.

5. Recipients

Your data is not disclosed to third parties except where legally required. However, the following types of providers may access your data as processors, under a signed data processing agreement:

• Web hosting and email providers.
• Customer relationship management and web form platform (HubSpot).
• Web analytics and digital advertising providers (Google), where you have consented to the use of cookies.
• Partner healthcare centres and professionals, solely where necessary to provide the care you have requested.
• Professional advisers and law or accountancy firms providing services to the Controller.

Some of these providers may transfer data outside the European Economic Area. Such transfers are covered by European Commission adequacy decisions or by Standard Contractual Clauses, together with any additional measures required. You may request information about the safeguards applied by writing to the address given in section 1.

6. Your rights

You may exercise the following rights at any time:

• Access: to find out what data of yours we process.
• Rectification: to correct inaccurate or incomplete data.
• Erasure: to request deletion of your data where it is no longer necessary.
• Objection: to object to certain processing activities.
• Restriction: to request that we suspend processing in the cases provided for by law.
• Portability: to receive your data in a structured, commonly used format.
• Withdrawal of consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

To exercise these rights, send a request to consultas@quenet-torrent.com or to the postal address given in section 1, enclosing a copy of a document proving your identity and stating the right you wish to exercise.

If you believe your rights have not been properly addressed, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), C/ Jorge Juan, 6, 28001 Madrid.

7. Security and confidentiality

We apply appropriate technical and organisational measures to ensure a level of security appropriate to the risk, taking into account that special category data is processed. All staff and professionals who access clinical information are bound by a duty of secrecy, which remains in force even after their relationship with the Controller has ended.

8. Accuracy of the data

You warrant that the data provided is true and relates to you, and undertake to notify us of any changes. If you provide third-party data, you must have informed that person of this policy beforehand and obtained their consent.

9. Minors

The website forms are intended for persons over 14 years of age. Where the request concerns a patient who is a minor, it must be submitted by their parent or legal guardian.

10. Changes to this policy

This Privacy Policy may be updated to reflect regulatory changes or new processing activities. The version in force will always be the one published on this page, showing its update date.