Privacy policy
Privacy Policy
This Privacy Policy (“Privacy Policy”) describes how ATRYS HEALTH, S.A. (hereinafter, equally, “ATRYS“) collects, processes and uses its customers’ and users’ personal information, whilst always protecting our commitment to privacy and data information security, with it being collected exclusively for specific, explicit and legitimate purposes. Said data may not be processed in a manner which is incompatible with those purposes, and it must be done in strict compliance with the applicable regulations on personal data protection, particularly General Data Protection Regulation (EU) 679/2016 (hereinafter, GDPR) and Organic Law 3/2018 on Personal Data Protection and the Guarantee of Digital Rights (hereinafter, LOPDGDD).
The Privacy Policy will be updated periodically in order to clarify or reflect new practices in the management of our users’ privacy or legislative, jurisprudential or interpretation amendments by the Spanish Data Protection Agency or other supervisory authorities that may take place and that may be applicable. The Privacy Policy may be accessed at any time for consultation at the website: www.histopatologiacitologia.com.
The data controller’s details
The company responsible for processing your data is:
ATRYS HEALTH S.A.
A84942150
Calle Príncipe de Vergara 132 1ª planta 28002 Madrid
protecciondatos@atryshealth.com
The means through which we process your data
We process your personal data in the following instances:
(i) Visits to our website;
(ii) Interaction, connection or links to our website through social networking tools, blogs or other websites;
(iii) Use of any of our electronic communication services, when you send us an e-mail, a query or suggestion through our contact forms.
The purposes of the data processing
ATRYS processes your personal data in accordance with the principles set forth in the applicable regulations and, more specifically, the GDPR and the LOPDGDD. The personal data will not be used for purposes other than the ones set out below:
Website users’ data
Website users’ browsing data will be processed solely for statistical and analytical purposes, in accordance with the provisions of our cookies policy, as well as to provide information about our business activity and, where appropriate, to respond to your queries and suggestions.
Data gathered via contact forms
We may also process personal data if interested parties send us queries, complaints or suggestions via the contact forms provided for this on our website, for the sole purpose of responding to their request. Under no circumstances will we add this data to other databases or send commercial communications by electronic means without prior authorisation from the owner of the data.
The mandatory data on each form will be identified as such. If it is missing or incorrect, ATRYS will be unable to identify you correctly and, as a result, the record of the query will be deleted.
Data from any emails received
We will also process personal data if data subjects send queries, complaints or suggestions via e-mail to the addresses provided on the website for this purpose. In this case, the data will be processed solely to respond to the request. Under no circumstances will we add this data to other databases or send commercial communications by electronic means without prior authorisation from the owner of the data.
Who we pass on your data to
ATRYS ensures the confidentiality of personal data and will not pass it on to third parties without prior authorisation from its owner. However, in accordance with ATRYS’ varied needs, we may disclose your data to the following recipients:
Service providers
ATRYS may outsource various services to external providers who will have access to the personal data, including but not limited to: distributors, lawyers and solicitors, auditors, consultants, financial institutions, cloud service providers and their IT servers, and other providers and professionals, who will process the personal data as data processors on ATRYS’ behalf. In this case, providers will have signed agreements regarding the personal data processing, limiting it to the purposes of the service provided and whilst adhering to the security measures established by the regulations in force.
The public administration and authorities
We may disclose your data and any other information in our possession or which is accessible through our systems and required in accordance with the applicable laws and regulations to the public administration with competence in the matter, as well as to the competent public authorities. This is for legal purposes and for the sole purpose of complying with our obligations and preventing any abuse of the services or fraudulent activities in the services provided through our website.
Other group companies
Your data may be passed on to Atrys Group companies formed by: ATRYS HEALTH, S.A.; ATRYS HEALTH INTERNACIONAL, S.A.U.; EDIAGNOSTIC, CLÍNICA VIRTUAL DE ESPECIALIDADES MÉDICAS, S.L.; INSTITUT MEDIC D’ONCORADIOTERAPIA, S.L.U.; ATLHIA R&D, S.L.U.; EDIAGNOSTIC ANATOMÍA PATOLÓGICA, S.L; LLEBALUST PATOLOGÍA, S.L.U; SIMM MOLECULAR, S.L.U.; ASPY GLOBAL SERVICES, S.A.U.; ASPY PREVENCIÓN S.L.U.; PROFESSIONAL GROUP CONVERSIA, S.L.U.; ASPY SALUD GLOBAL, S.L.U.; ASPY FORMACIÓN, S.L.U.; ATRYS SCHWEIZ AG.; AXISMED GESTÃO DOS PROGRAMAS DE SAÚDE S.A.; ITMS MED SALVA TELECONSULTA LTD.; GLOBAL TELEMED SYSTEMS AG.; INTERNATIONAL TELEMEDICAL SYSTEMS BRASIL S.A.; INTERNATIONAL TELEMEDICAL SYSTEMS PERU S.A.; ATRYS COLOMBIA, S.A.S.; INTERNATIONAL TELEMEDICAL SYSTEMS HOLDING SPA.; ITMS CHILE – INTERNATIONAL TELEMEDICAL SYSTEMS CHILE SPA.; MEDICAL SOLUTIONS SPA; GENETYCA ICM S.A.; ATRYS PORTUGAL S.G.P.S.; HCS – HOSPITAL CIRÚRGICO DE SETÚBAL S.A.; ATRYS PORTUGAL EQUIPAMENTOS, LDA.; ATRYS PORTUGAL DIAGNÓSTICO, LDA.; ATRYS PORTUGAL MEDICINA MOLECULAR PORTO, S.A.; ATRYS PORTUGAL MEDICINA MOLECULAR BRAGA, L.D.A.; ATRYS PORTUGAL CENTRO MÉDICO AVANZADO, S.A.; LENICARE L.D.A; SIGNIFICANT IMPACT SYSTEMS, S.L.; BIENZOBAS SALUD, S.L.U.; GEFARMA, S.A.P.; for the provision of services and on the basis of our legitimate corporate group interest in carrying out strategic evaluations and studies, from the point of view of budgetary, financial and human resources planning.
Exercising your rights
If you wish to exercise your rights of access, rectification, deletion and opposition, as well as the right to portability and the limitation of the processing, and, where appropriate, revoke your consent where this is the cause of action for legal standing, you can contact us by post with a photocopy of your identity document or its equivalent, and the description of the right you wish to exercise to: Cl Provença, 392 Planta Baja 08025 – Barcelona; or via email under the same terms to: protecciondatos@atryshealth.com
Safeguarding your rights before the supervisory authority
You may contact the Spanish Data Protection Agency (www.aepd.es) in the event there is any breach of your data protection rights.
Data retention
The data will be kept for the time necessary to fulfil the purpose it was collected for and the legal obligations deriving from said purpose. The data referring to queries made by users through the contact forms on the website, data received by e-mail, data collected through cookies and browsing data will be kept for a maximum period of one year from the date it was collected.
Contacting our DPO
You can contact our Data Protection Officer by sending an email to: protecciondatos@atryshealth.com.
User responsibilities
The user guarantees to be of legal age, and with the sufficient capacity and the necessary knowledge to use the website www.atryshealth.com and its content, ensuring that the data provided in each of the forms where ATRYS requests their personal data is true, and they acknowledge their responsibility to inform ATRYS of any change and/or modification to said data in order for it to be correctly processed.
Security measures
ATRYS has implemented the necessary security measures to guarantee the effective use and processing of the personal data provided by the user, safeguarding their privacy, confidentiality and integrity, complying with the regulatory requirements set forth in the applicable regulations and making use of the technical means necessary to prevent the alteration, loss, unauthorised access or processing of your data, according to the state of art at any given time, as well as ATRYS’ scope of control.
Related legislation
If you would like more information about the laws that support, protect and establish your rights, we have provided you with the laws that have inspired this policy, and which are relevant to you: