DETAILED DATA PROTECTION INFORMATION

PROCESSING ACTIVITY- DONATIONS

Who is the controller in charge of processing your personal data?

Company name: Equipo Médico Crespo S L U

Tax identification number: B98691074

Headquarters: Avda. General Avilés, N.º 90 bajo 46015 Valencia

Delegation: Calle Llandells, 2-4 Bajo 12598 Peñíscola Castellón

Telephone: 961042557 Headquarters / 964489132 Peñíscola Office

Email: lopd@juanacrespo.es

Contact our Data Protection Officer (DPO): dpo@juanacrespo.es

For what purpose will we process your personal data?

Your personal data will be used to manage the donation of gametes and embryos.

How long will we keep your personal data for?

Your personal data will be stored for the duration of the established relationship. Once this is finished, it will be duly blocked based on the legal retention periods established by national and/or autonomous healthcare regulations for a maximum of 5 years (this time period may be affected by changes to regulations)

What is the legitimation for the processing of my personal data?

The legal base for the processing of your personal data is

Execution of a contract with the data subject in compliance with Article 5.1 of Law 14/2006, of the 26th of May on human assisted reproduction techniques “The donation of gametes and pre-embryos for purposes authorised this Law is a free, formal and confidential contract between the donor and the authorised centre”.

As a consequence of this contractual/healthcare relationship the controller is obliged to comply with the specific sectoral regulations and pay particular attention to the processing of clinical courses, their creation, elaboration and storage that will later have impact on the retention periods established by law:

LAW 41/2002, of the 14th November, basic regulation on the autonomy of the patient and the rights and obligations regarding information and clinical documentation.

LAW 14/2006 on Assisted Reproduction Techniques.

And other national and autonomous healthcare regulations in force.

Law 1/2003, of the 28th of January of the Town Hall of Rights and Information of the Patient in the Valencian Community Royal Decree-Law 9/2014, of the 4th of July, which establishes the regulations of quality and security for donation, extraction, evaluation, processing, preservation, storage and distribution of human cells and tissue, and approves the regulations of coordination and functioning for their use in humans.

Am I obliged to provide this personal data?

Contractual/legal requirement

What will happen if I do not provide it?

Contractual/legal non-compliance

Will we disclose your personal data?

Your personal data will not be disclosed to third parties.

Remember that donor anonymity is a legal requirement.

What rights do I have when I provide my personal data?

Right of Access: You have the right to know whether we are processing your data and to receive this information in writing via the requested means.

Right to Rectification: You have the right to request the rectification of your data if it is inaccurate or incomplete.

You have the right to request the erasure of your data. However, remember that the right to deletion remains limited when there is a legal obligation to retain or block your data.

In certain circumstances, the data subjects may request the restriction of processing of their data. In this case we will only keep it for the exercise or defence of legal claims, protect third parties or for significant public interest reasons.

In certain circumstances and for reasons related to a particular situation, you may object to the processing of your data. The controller will stop processing your data, unless there are superior legitimate grounds for the processing, or for the exercise or defence of legal claims

When the processing of data is based on consent or on a contract or pre-contract, and it is carried out by automated means, you have the right to data portability. This means that it will be provided in a structured, commonly used and machine-readable format, including providing it to a new responsible figure..

Any interested party may lodge a complaint with the competent data protection supervisory authority, especially when they are not satisfied with the exercise of their rights. They can be contacted in writing at Spanish Personal Data Protection Agency (Agencia Española de Protección de DatosPersonales) at C/Jorge Juan n.º 6, 28001 Madrid or online at www.agpd.es

The models to request the exercise of your rights can be found in the Privacy Policies/rights of our website. You may also request them in writing from our management team, or online on the supervisory authority’s website www.agpd.es . These must be sent to the manager’s postal or email address.