PRIVACY POLICY
Who we are
The Privacy Policy forms part of the Legal Notice that governs the Web Page: www.oncovision.com together with the Cookies Use Policy.
The website www.oncovision.com is owned by General de Equipment for Medical Imaging, S.A. and complies with the requirements of Law 34/2002, of July 11, 2002, on Information Society Services and Electronic Commerce, and current legislation on the protection of personal data and, in particular, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.
General de Equipment for Medical Imaging, S.A. reserves the right to modify or adapt this Privacy Policy at any time. Therefore, we recommend that you review it each time you access the Web Page. In the event that you have registered on the website and access your account or profile, upon accessing it, you will be informed in the event that there have been substantial changes in relation to the processing of your personal data.
Who is the PERSON RESPONSIBLE FOR THE PROCESSING?
The data collected or provided voluntarily through the Web Page, either by browsing it, as well as all those that you can provide in the contact forms, via email or telephone, will be collected and processed by the File Manager, whose data are indicated below:
| Owner | General de Equipment for Medical Imaging, S.A. |
| CIF: | A97273536 |
| Address | C/ Jeronimo de Monsoriu, 92. Bajo Izquierda – 46022 – Valencia (VALENCIA) |
| Phone | 963722472 |
| quality@oncovision.com | |
| URL: | www.oncovision.com |
If, for any reason, you would like to contact us on any matter related to the processing of your personal data or privacy (with our Data Protection Officer), you can do so through any of the means indicated above.
When, why, by whom, how, for what purpose and for how long do we process your personal data?
When and why?
You can browse most of our web pages without providing any personal information, but in some cases this information is necessary to provide you with the electronic services you request from us.
If we need to collect personal data to provide the service to you, we will process the information in accordance with the policy set out in this document and in the specific terms and conditions of the particular service in question (if any), which contain specific privacy statements about the use of the data and inform you why, what for, how, for how long we process your personal data and what security measures we implement.
Who collects your data?
The collection and processing of personal data that you may provide to us is carried out by our company or, where appropriate, its data processors. In relation to the latter case, these processors are third parties who are contractually required to ensure that their activity respects the law and implement appropriate security measures to protect such data.
What for?
The personal data that we request from you, or that you provide to us as a result of your browsing, is used by us to manage, provide and improve the services you have requested from us.
For example, we will process your personal data in order to manage the queries you send us, to manage your participation in personnel selection processes, to send you electronic communications if you so request, and/or for the preparation of statistics.
In this sense, we ask you for an e-mail address when you use our contact forms on the web. We only collect the sender’s personal data necessary to respond to you.
When you subscribe to our newsletters we also ask you for an email to provide the service, in any case you can manage your unsubscribe from the service whenever you want and we put means at your disposal to do so.
How do we process your data?
We collect personal information only to the extent necessary to achieve a specific purpose. The information will not be used for a purpose incompatible with the one described.
We only disclose the information to third parties if it is necessary for the fulfillment of the purpose of the service and only to persons who need to know them. All this in order to be able to provide the service by treating your personal data with confidentiality and reserve, in accordance with current legislation.
In any case, our company adopts security measures to protect the data against possible abuse or unauthorized access, alteration or loss.
How long do we keep your data?
We keep the data only for the time necessary to fulfill the purpose of its collection or further processing. The period of data retention will depend on the service and each service will indicate the duration of the processing of personal data.
A table with specific retention periods is provided at the end of this document.
For what purposes will we process your personal data?
– Web or e-mail contacts:
We process your personal data in order to (i) answer your queries and requests; (ii) manage the requested service or process your order; (iii) send you commercial information by electronic means that may be of interest to you, provided there is express authorization; (iv) we may develop a commercial profile based on the information you provide in order to be able to offer you products and services according to your interests. No automated decisions will be made on the basis of such a profile.
– Social media contacts:
We process your personal data in order to (i) answer your queries and requests, (ii) manage the requested service, answer your request or process your order and (iii) interact with you and create a community of followers.
– Job seekers:
We process your personal data in order to (i) count on you in recruitment selection processes, (ii) summon you for job interviews and evaluate your candidacy, (iii) communicate your resume to group companies, collaborators or related companies with the sole purpose of involving you in their selection processes, provided that you have given us your consent.
– Web users:
By browsing our website we collect information about your browser, your device and data on your use of our website as well as any information you provide to us when using our website. In an anonymized or aggregated form, we may record the IP address (Internet access identification number of the device, which allows devices, systems and servers to recognize and communicate with each other).
The purpose of the processing is (i) to obtain practical knowledge about how users use our website to enable us to improve it; (ii) to perform statistical analysis to help us improve our business strategy; (iii) to perform web performance analysis and (iv) for technical security and system diagnostics.
The data we collect is not related to a specific user and will be stored in our databases.
The aforementioned data, as well as any personal data you may provide to us, are stored by means of cookies that are collected in a pseudonymized format and are subject to the submission of objections to the processing of this personal data, as detailed in the Cookie Policy.
You can consult the Cookie Policy in the corresponding section.
The information of your navigation can be stored by Google Analytics, so we refer to the Privacy Policy of Google, as it collects and treats such information. http://www.google.com/intl/en/policies/privacy/
Similarly, from our website you can provide the utility of Google Maps, which may have access to your location, in the event that it is allowed, in order to provide you with greater specificity about the distance and / or roads to our headquarters. In this regard, we refer to the privacy policy used by Google Maps, in order to know the use and processing of such data http://www.google.com/intl/en/policies/privacy/
In order to offer information or services of interest based on the User’s location, we may access data relating to the geolocation of the User’s device in those cases where the user’s configuration to that effect so permits.
The Portal may offer functionalities to share content through third party applications, such as Facebook or Twitter. These applications may collect and process information related to the user’s browsing on the different websites. Any personal information collected through these applications may be used by third party users of these applications. Your interactions are subject to the privacy policies of the companies providing the applications.
What is the legal basis for the processing of your data?
– Web or e-mail contacts:
The legal basis for the processing of your data is (i) the consent of the data subject.
In those cases where to make a request it is necessary to fill out a form and click on the submit button, the completion of the same will necessarily imply that you have been informed and have expressly given your consent to the content of the clause attached to the form or acceptance of the privacy policy.
All our forms have a check box that must be checked to access the services offered.
The purposes of the treatment will be the following:
a) Manage queries or requests for information that you send us through the Web Page, email or telephone.
b) Sending communications, special promotions, news or actions that are of interest to you or that you request from us, including by electronic means. As this is an accessory purpose to the main one, you must check the box provided for this purpose.
The personal data that you provide us by this means will not be communicated to third parties, being General de Equipment for Medical Imaging, S.A. who gives, directly answer to this type of consultations.
– Social media contacts:
The legal basis for the processing of your data is the acceptance of the contractual relationship with the provider of the corresponding social network manifested when registering in its application and in accordance with its privacy policies, which is external to us.
– You work with us:
In the event that you provide us with your curriculum vitae, either through the Web Page, email or physically at the address or any headquarters of General de Equipment for Medical Imaging, S.A. will incorporate them into its database. The curriculum will be stored for a period of 1 year, after which, if we have not contacted you, it will be deleted.
The legal basis for the processing will be based on the express consent given by the interested party for the processing of the data contained in the curriculum by sending it and ticking the box provided for this purpose.
The purpose of the treatment is to incorporate you to present and future selection processes of General de Equipment for Medical Imaging, S.A. or any entity belonging to the business group.
In the event that the interested party finally joins General de Equipment for Medical Imaging, S.A. or any of the entities belonging to the business group as an employee, your data will be incorporated into a database owned by the same, in order to internally manage the employee-employer employment relationship.
– Sending of Newsletter:
The Web Page allows the option of subscribing to the Newsletter of General de Equipment for Medical Imaging, S.A. To do so, it is necessary that you provide us with an e-mail address to which the Newsletter will be sent.
Such information will be stored in a database of General de Equipment for Medical Imaging, S.A. in which it will remain registered until the interested party requests to unsubscribe or, if necessary, General de Equipment for Medical Imaging, S.A. ceases to send it.
The legal basis for the processing of this personal data is the express consent given by all those interested parties who subscribe to this service by checking the box provided for this purpose.
The e-mail data will only be processed and stored for the purpose of managing the sending of the Newsletter by the users who request it.
– Web users:
The legal basis for the processing of data is our (i) legitimate interest in knowing the navigation modes of our users to adapt to their interests and improve our relationship with them; as well as (ii) their consent to browse our website and accept the terms of use of cookies.
To which recipients will your data be communicated?
Your data will not be disclosed to third parties outside the service we provide, unless legally required. Specifically, they will be communicated to the State Agency of Tax Administration and to banks and financial institutions for the collection of the service provided or product purchased.
Your data may also be communicated to our service providers when necessary for the execution of the contract. In these cases, the data processor has committed itself by contract to use the data only for the purpose that justifies the processing and to maintain appropriate security measures.
What security measures do we apply?
Rest assured, we have adopted appropriate technical and organizational measures to ensure confidentiality, integrity and availability in the processing of your personal data that we perform, in particular those that prevent the loss, misuse, alteration, unauthorized access and theft of personal data.
What are your rights when you provide us with your data?
You can exercise your rights of access, rectification, deletion, portability, limitation or opposition to the processing of your data, including the right to withdraw your consent, as detailed below:
Right of access: you can ask us if we are processing your data and in what way.
Right of rectification: You can ask us to update your personal data if they are incorrect, and delete them if you wish.
Right to limitation of processing: In this case they will only be kept by us for the exercise or defense of claims.
Right of opposition: After your request to oppose the processing, we will stop processing the data in the manner you indicate, unless for compelling legitimate reasons or the exercise or defense of possible claims must continue to be treated.
Right to data portability: In case you want your data to be processed by another company, we will facilitate the portability of your data to the new data controller.
Right to erasure: You can request that we delete your data when it is no longer necessary for processing, you withdraw your consent, it is unlawful processing or there is a legal obligation to do so. We will analyze the situation and apply the law.
If you need more information about your rights under the law and how to exercise them, we recommend that you contact the Spanish Data Protection Agency, which is the supervisory authority for data protection.
You can contact the Data Protection Delegate prior to filing a complaint against the data controller before the AEPD.
In the event that we have not attended to the exercise of your rights, you can file a complaint with the Spanish Data Protection Agency.
We have forms for the exercise of rights that can be requested to the email address mentioned above; you can also use those prepared by the Spanish Data Protection Agency or third parties. These forms must be signed electronically or be accompanied by a photocopy of the ID card. If you are acting through a representative in the same way, a copy of your ID card or an electronic signature must accompany the form.
The forms must be submitted in person or sent by mail or e-mail to the addresses that appear in the “Responsible” section.
The maximum term to resolve is one month from the receipt of your request.
How long will we keep your data?
Personal data will be kept for as long as you maintain your relationship with us.
At the end of the same, the personal data processed for each of the purposes indicated will be kept for the legally stipulated periods of time. If there is no such legal period until the interested party requests its deletion or revokes the consent given, or during the period that a judge or court may require them according to the statute of limitations for legal actions.
For each treatment or type of data, we provide you with a specific period, which you can consult below:
CV: Until the end of the selection process, and 1 more year with your consent.
Databases or web visitors. As long as the treatment lasts.
LOPD:
Personal data processing: 3 years
Personal data of employees stored in the networks, computers and communications equipment used by them, access controls and internal management/administration systems: 5 years