Data Protection Policy
Data Controller Details
The Data Controller responsible for processing user, client, and supplier personal data is ALLIANCE MEDICAL LA RIOJA SL, registered at Calle Maestro Angel Llorca, no. 6, floor 5, door B, 28003 Madrid, with CIF B26368415.
Telephone: +34 911 661 880
Data Protection Officer (DPO): dpd.amlr@alliancemedical.es
Please note that no Joint Controllers exist regarding user, client, and supplier management operations.
Personal Data Processed & Source
The categories of personal data processed by ALLIANCE MEDICAL LA RIOJA SL include:
Identification data and contact details (postal or email addresses).
Commercial information, economic, and transaction details.
Image data (captured via CCTV/alarm systems).
Medical records and health data (special category of data).
Data Sources: Collected directly from the data subject (via commercial proposals, contracts, web forms, CVs) or provided by their employer. For employment candidates, data may also originate from authorized recruitment job boards.
Purposes & Legal Bases for Processing
| Purpose of Processing | Lawful Basis |
|---|---|
| Handling data subject rights requests |
Regulatory requirement |
| Accounting, tax, administrative management, and billing |
Contract performance / Legal obligation |
| Handling inquiries via website forms and social media |
Consent of the data subject |
| Patient data, medical records management, and clinical assessment |
Contract performance / Vital interests |
| Administrative management with contractors and suppliers |
Contract performance / Legal obligation |
| Recruitment management and candidate assessment (CVs) |
Contract performance / Consent |
| Performing diagnostic tests and web portal results delivery |
Contract performance / Vital interests |
| CCTV surveillance and premises security |
Public interest / Exercise of official authority |
| Customer satisfaction evaluation |
Legitimate interest of the controller |