Through this document, the processing of personal data collected by AERETIC, SL is regulated.
This personal data protection policy ("Privacy Policy") aims to inform about the manner in which we obtain, process, and protect the personal data handled as a result of our activity.
Who is the data controller for the processing of your personal data?
The data controller for the processing of your personal data is AERETIC, SL (hereinafter AERETIC) with NIF B05419197. The contact details are as follows:
- Postal address: Av. Josep Tarradellas, 123-127, 08029 - Barcelona
- Telephone: 93 495 44 44
- Email: aeretic@aeretic.cat
How can you contact the Data Protection Officer of AERETIC?
AERETIC informs you that it has appointed a Data Protection Officer ('DPO') to whom you may raise any query regarding the processing of your personal data. You can contact the Data Protection Officer through the following email address: dpd@aeretic.cat
For what purpose and lawful basis will we process your personal data?
Processing based on the performance of a contract:
The purpose of processing your data will be to guarantee the registration and monitoring of the medical-sanitary treatment provided at the center, ensure the continuity of care among different healthcare facilities, facilitate the necessary information for the correct billing of the cost of services rendered, fill out your medical history at the center, and implement the medical history coordination mechanisms that are developed.
We may process your personal data in pre-contractual relations at the request of the data subject, for example, to manage their registration on the website, respond to requests made through it, or manage requests for information regarding the services we offer.
Processing based on your consent:
We may collect and process your personal data when you have specifically given your consent, for example, for the management of curriculum vitae, for sending commercial communications, and for creating profiles when you have given us your express consent in events and/or other activities that may be carried out, as well as to manage the registration as a medical professional or healthcare collaborator of our entity.
Data processing based on a legal obligation:
We may process your data when AERETIC must comply with its legal obligations.
Data processing based on public interest:
We may process image data (persons accessing the physical facilities) through video surveillance systems for the purpose of preserving security and controlling access to the physical facilities of AERETIC. In any case, they will be kept for a maximum of one month before being deleted.
We may also process your personal data under the lawful basis of public interest, for example, in certain cases for collaboration with State Security Forces and Bodies and judicial authorities.
To which recipients will your data be communicated?
Your data may be sent fully or partially to the entities of the Asistencia Group and linked companies (such as SCIAS or Asistencia Sanitaria Colegial, SA) or to third parties with whom we maintain a contractual relationship, so that they can process them for identical purposes to those mentioned above, as well as to manage the payment of healthcare services. Likewise, they could also be used by official public and private bodies that, for legal reasons or material necessity, must access the data for the correct provision of the medical-sanitary assistance that constitutes the purpose of processing this data, or for compliance with any other legal requirement.
Additionally, to fulfill the stated processing purposes, it may be necessary to communicate your data to third-party service providers of AERETIC, in their capacity as data processors. AERETIC guarantees that these processors, to the extent that they access your personal data, strictly comply with high standards in terms of security and confidentiality.
International transfers are not foreseen. In any case, if personal information were transferred to third countries, we will ensure that the information is transferred in accordance with the terms of this Privacy Policy and compliant with applicable data protection regulations. We rely on the European Commission's adequacy decisions (for more information, you can consult the Commission's Decision).
How have we obtained your data?
The personal data we process at AERETIC come from the data subject, from the entities of the Asistencia Group and linked companies (such as SCIAS or Asistencia Sanitaria Colegial, SA), or from third parties with whom we maintain a contractual relationship. In necessary cases, we will proceed to consult the medical history of SCIAS.
How long will we keep your data?
The data provided will be kept in accordance with the healthcare legislation in force at any given time, currently Law 21/2000 on the rights to information concerning health and patient autonomy, and clinical documentation, which provides for a period of fifteen years from the discharge date of each care process in relation to relevant documentation, and a period of five years for the rest.
What are your rights in relation to the data you provide us and how can you exercise them?
In accordance with European data protection regulations, you have the following rights:
Right of access
You have the right, on the one hand, to access the personal data relating to yourself processed by AERETIC and, on the other hand, to certain information on how your personal data is processed.
Right to withdraw consent
You have the right to withdraw your consent at any time when you have given authorization to process your personal data. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Right to rectification
You have the right to rectify your personal data if it is inaccurate and to have incomplete personal data completed.
Right to object
You have the right to object to the processing of your personal data when this processing is for direct marketing purposes or is based on a task carried out in the public interest.
Right to erasure (Right to be forgotten)
You have the right to the deletion of your personal data when certain circumstances occur (among others, the data is no longer necessary for the purpose for which it was collected, the consent on which the processing was based is withdrawn, or the data subject objects to the processing).
Right to restriction of processing
You have the right to have the processing of your data stopped in certain cases. For example, you can exercise this right when you have objected to the sending of commercial communications while we address your request.
Right to data portability
You have the right to receive the personal data you have provided to AERETIC in a structured, commonly used, and machine-readable format, and to transmit it to another data controller, if the following requirements are met:
- The processing is based on consent or a contract.
- The processing is carried out by automated means.
Right not to be subject to automated decision-making
You have the right not to be subject to a decision based solely on the automated processing of your data, including profiling, which produces legal effects concerning you or similarly significantly affects you.
The exercise of rights may be carried out by verifying the identification of the data subject, indicating the right intended to be exercised, and regarding which processing, through the following channels:
- By email to aeretic@aeretic.cat
- To the Data Protection Officer by email to dpd@aeretic.cat
- By postal mail to: Av. Josep Tarradellas, 123-127, 08029 Barcelona.
Your request to exercise your rights will be handled by AERETIC within a maximum period of one month. In cases involving particularly complex requests, the response period may be extended for up to two additional months.
Finally, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) through its electronic office.
How do we protect your personal data?
AERETIC treats your personal data with absolute confidentiality, committing to maintain secrecy regarding them and to adopt all necessary measures to prevent their alteration, loss, unauthorized processing, or access, all in accordance with the legal obligations that apply to us as data controller.
At AERETIC, we are committed to maintaining and implementing the necessary security levels, taking into account the state of technology, the nature of the stored data, and the associated risks.
Use of email
AERETIC and its employees will use corporate email with the utmost diligence and confidentiality. In this sense, if you need to provide us with any documentation, we recommend that you do so through the private area of our website and, if that is not possible, send it to us encrypted by email, attaching the password separately.
Cookies Policy
A cookie is a file or device that is downloaded to a user's terminal for the purpose of storing data that could be updated and retrieved by the entity responsible for its installation.
You can consult our Cookies Policy at the following link Cookie Policy as well as configure your consent for their use.
AERETIC reserves the right to modify its Privacy Policy without prior notice, according to its own criteria, motivated by a legislative, jurisprudencial, or doctrinal change by the Spanish Data Protection Agency. In accordance with the above, we suggest that you review our Privacy Policy periodically.
May 2026