In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter “GDPR”) and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (hereinafter “LOPDGDD”), ARTE CM, S.L.U. (hereinafter, “Hospital de St Saver”), in this Privacy Policy, informs Users about the data processing carried out through the website https://hospitalstsaver.com (hereinafter, the “Website”).

It is the user’s responsibility to read the aforementioned information notices established by Hospital de St Saver before providing their personal data. If the user does not agree with this policy, they should not use any service on this website that requires the communication of their personal data to Hospital de St Saver.

1. IDENTITY OF THE DATA CONTROLLER

The personal data provided through this website will be processed by Hospital de St Saver, as the data controller. Its identification and contact details are as follows:

C/ Escuelas Pías, 14, 1º de 08017 Barcelona
CIF B64279755
info@coleccion-cm.com

2. PURPOSES FOR WHICH THE PERSONAL DATA IS PROCESSED AND LEGAL BASIS FOR ITS PROCESSING.

Hospital de St Saver, based on the form completed by the User and their interactions on the Website, will use the personal data provided for the following purposes:

a) To manage requests related to holding private events at Hospital de St Saver, as well as to manage the corresponding reservations.

To manage User registration and reservations for scheduled visits.

b) The above purposes are based on the existence of a pre-contractual or contractual relationship that requires the processing of personal data. Therefore, it will not be possible to achieve these purposes if the personal data is not provided.

c) To manage requests, inquiries, complaints, claims, and/or suggestions received through the forms and email addresses indicated on the Website.

d) To send commercial and/or promotional communications about exhibitions, services, and events, as well as news related to the activities of Hospital de St Saver, including newsletters.

The above purposes are based on the user’s consent when proactively contacting Hospital de St Saver for the corresponding services, by checking the consent box. The user may revoke their consent at any time, without prejudice to the validity of the processing of their data carried out up to the moment of revocation.

In accordance with current regulations, commercial communications may also be sent to users based on the legitimate interest of Hospital de St Saver in promoting its commercial activities to those users with whom there is a prior contractual relationship with Hospital de St Saver. This sending will not require your consent, provided that the requirements of the regulation are met and, specifically, the user is provided with an easy and free means to object to or stop receiving these communications at any time.

3. DATA TYPES

In accordance with the aforementioned purposes, Hospital de St Saver processes the following categories of data:

• Identification data: name and surname
• Contact data: email address and telephone number
• Commercial information data
• Browsing data on the St. Saver’s Hospital website

4. DISCLOSURE OF DATA TO THIRD PARTIES AND INTERNATIONAL TRANSFERS

In order to manage payment and appointment booking processes, personal data is disclosed to service providers, such as payment gateways, or to financial institutions.

The processing of data for purpose d) indicated in section 2 of this Privacy Policy may involve international transfers to the United States. This international transfer is covered by the Adequacy Decision of 10 July 2023 (Data Privacy Framework), which guarantees an adequate level of protection, as provided for in the GDPR.

5. DATA RETENTION

The data provided will be retained for the time necessary to fulfill the purposes for which it is being processed, until the contractual relationship with the user ends, consent is withdrawn, or the user objects to the processing, as applicable. In any case, the data will be kept until the statute of limitations for legal actions expires. Once the data is no longer needed, it will be destroyed.

6. EXERCISE OF RIGHTS

Hospital de St Saver informs users of their right to access, rectify, erase, object to, and request the portability of their data, as well as to restrict its processing and withdraw their consent, in accordance with current legislation. To exercise these rights, users may contact us at the following email address: info@hospitalstsaver.com.

Users are also informed that they have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es) if their rights are violated.

7. USER OBLIGATIONS

Users are obligated to:

• Guarantee that they are of legal age.
• Guarantee that the personal data provided is adequate, relevant, and not excessive. Furthermore, the information must always be up-to-date and truthful. Users must provide their own personal data. If you provide personal data of a third party, you guarantee that the provision of such data is lawful and that you have informed the third party of the contents of this Privacy Policy. To this end, you will be solely liable for any direct and/or indirect damage caused to third parties or to Hospital de St Saver by the use of another person’s personal data, or your own personal data when it is false, inaccurate, outdated, inadequate, or irrelevant.
• You must inform Hospital de St Saver of any changes to the information you have previously provided.

8. SECURITY MEASURES

Hospital de St Saver declares that it has adopted all necessary technical and organizational measures to guarantee data security and prevent its alteration, loss, unauthorized processing, or access, taking into account the state of technology, the nature of the stored data, and the risks to which it is exposed, whether arising from human action or the physical or natural environment.