Privacy Policy

At Affidea, we respect your right to privacy. This Privacy Policy explains who we are, how we collect, share and use your personal information, and how you can exercise your privacy rights. This Privacy Policy applies to personal information we collect through our website at www.affidea.es (the "Website").

If you have any questions or concerns about our use of your personal information, please contact us using the contact details at the end of this Privacy Policy.

Quick Links

We recommend that you read this Privacy Policy in its entirety to ensure that you are fully informed.

What do we do at Affidea?

Affidea Spain is part of Affidea BV, which specializes in diagnostic research, clinical laboratories and services for cancer treatment. For more information about Affidea, please see the "About Affidea" section of our Website.

Affidea Spain is the controller of your personal data.

PERSON IN CHARGE OF THE TREATMENT

What personal information does Affidea collect through the Website and why?

Broadly speaking, the personal information we may collect about you falls into the following categories:

• Information you voluntarily provide to us.

Certain parts of our Website may ask you to voluntarily provide personal information. For example, we may ask you:

• about the type of medical service you will need from our clinic and your contact details (online booking);

• your opinion about our services (satisfaction form);

• if you wish to subscribe to our newsletter and receive communications from us;

• as well as ask you to contact us, in case of doubt, through a contact form;

• registration of the doctor in the doctor's portal.

• to use the "Work with us" section in case you are interested in working at Affidea.

The reasons for which we collect and process your data will be stated at the time of collection. 

• Information we automatically collect

When you visit our Website, we may collect certain information automatically from your device.

The information we automatically collect may include, in particular, information such as your IP address, device type, unique device identification numbers, browser type, broad geographic area (e.g., country or city) and other technical information. We may also collect information about how your device has interacted with our Website, such as which pages you have accessed and which links you have clicked on.

Collecting this data allows us to gain insight and understanding of our Website traffic, where our visitors come from and what content is of most interest to them. We use this information for internal analysis purposes, as well as to improve the quality and relevance of our Web Site to our visitors.

Some of this information may be collected through cookies and similar tracking technology, as explained below in our Cookie Usage Statement [link].

In general, we will use the personal information we collect about you only for the purposes described in this Privacy Policy, or for the purposes we disclose to you at the time we collect your personal information. However, we may also use your personal information for other purposes that are not incompatible with the purposes we have informed you about (such as public interest archiving purposes, scientific or historical research purposes, or statistical purposes), provided that we are permitted to do so under applicable data protection laws.

Please note that this Privacy Policy does not apply to personal data that we collect outside of this Website, such as when we provide medical services. For more information about the above scenario, please see our Patient Data Privacy Policy [link]. For all other instances in which we may collect your personal data, we will provide you with a specific Data Privacy Policy to explain why and how we process your personal data.

With whom does Affidea share my personal information?

We may share your personal information with the following categories of recipients:

• companies within our group or third party service providers and partners who provide data processing services to us (for example, to provide or assist us in providing security functionalities, or to assist us in improving the security of our Website), or who carry out processing of personal information for the purposes described in this Privacy Policy or of which you will be informed when we collect your personal information;  

• any law enforcement, regulatory, governmental, governmental, court of competent jurisdiction or other third parties, where we believe disclosure is necessary (i) under applicable law or regulation, (ii) for the purpose of exercising, establishing or defending our legal rights, or (iii) to protect your or any other person's important interests;

• a prospective purchaser (and its agents and advisors) in connection with any proposed purchase, merger or acquisition of any part of our business, in which case, we will inform the purchaser that it must use your personal information only for the purposes described in this Privacy Policy;

• any other person, provided that we have their consent to the disclosure.

Legal Basis for Processing Your Personal Information (EEA Visitors Only)

If you are visiting our Website from a country that is a member of the European Economic Area, our legal basis for collecting and using the personal information described above will depend on the personal information in question and the specific context in which we collect it.

However, as a general rule, we will collect your personal information only where we have your consent to do so, where we need the personal information for the purposes of entering into a contract with you, or for the benefit of our legitimate interests, provided that it does not interfere with your data protection interests or your fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect personal information about you, and may need that personal information in order to protect your or another person's important interests.

If we ask you to provide us with personal information in order to comply with a legal obligation or to enter into a contract with you, we will specifically let you know at the relevant time and inform you whether the nature of the provision of your personal information is mandatory or not (as well as possible consequences of not providing us with your personal information).

Similarly, if we collect and use your personal information for the purposes of our (or any third party's) legitimate interests, we will inform you of what those legitimate interests are at the relevant time.

How does Affidea ensure the security of my personal information?

We use appropriate technical and organizational measures to protect the personal information we collect and process about you. The measures we use are designed to provide a level of security appropriate to the risk involved in processing your personal information.

International Data Transfers

Your personal information may be transferred to and processed in countries other than the country in which you reside. Those countries may have different data protection laws from the laws of your country (and, in some cases, may offer lower levels of protection).

Our Website servers are hosted in Spain in particular, and our group companies and third party service providers and partners operate worldwide. This means that when we collect your personal information, we may process it in any of these countries.

However, we have taken appropriate security measures to require that your personal information remains protected at all times under this Privacy Policy. We have also implemented similar appropriate security measures with our third party service providers and partners. Further information is available upon request.

Retention of Data

We retain the personal information we collect from you when we have a continuing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements).

Where we do not have a legitimate business need to carry out the processing of your personal information, we will delete or anonymize it or, where this is not possible (for example, because your personal information has been stored in backup files), we will store it securely, isolating it from any possible further processing, until we can delete it.

Your data protection rights

You have the following rights relating to data protection:

• If you wish to access, correct, update or request deletion of your personal information, you may do so at any time.

• Also, if you reside in a member country of the European Union, you may object to the processing of your personal information, request that we restrict the processing of your personal information or request the portability of your personal information.

• You have the right to opt-out of receiving marketing communications from us at any time. You can exercise this right by clicking on the "unsubscribe" link in the marketing emails we send you. To unsubscribe from other forms of marketing (such as postal marketing or telemarketing), please contact us using the contact details provided in the "Contact Us" section below.

• Similarly, where we have collected and processed your personal information with your consent, you may withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we have carried out prior to such withdrawal of consent, nor will it affect the processing of your personal information carried out on the basis of lawful grounds of processing other than consent.

You can exercise these rights by contacting us using the contact details provided in the "Contact Us" section below [link]. We respond to all requests we receive from individuals who wish to exercise their data protection rights in accordance with the provisions of applicable data protection laws.

You also have the right to lodge a complaint with a data protection authority regarding our collection and use of your personal information. However, we would like you to be able to report any problems with our collection and use of your data to us in the first instance. For more information, please contact the Supervisory Authority (Spanish Data Protection Agency: www.aepd.es).

Updates to this Privacy Policy.

We may update this Privacy Policy from time to time in response to legal, technical or business changes. When we update our Privacy Policy, we will take appropriate steps to let you know in accordance with the significance of the changes we make. We will also seek your consent regarding any material changes to the Privacy Policy if required to do so by applicable data protection laws.

You can see the date this Privacy Policy was last updated at the top of this Privacy Policy, under the heading "Last Updated".

Contact

If you have any questions or concerns about our use of your personal information, please contact us at dpo.es@affidea.com.