Jump to content

What can I do with Mi Quirónsalud?
What can I do with Mi Quirónsalud?

Your online home for health

With 24-hour access to the My Quirónsalud portal, you can manage your health and the health of your loved ones

 

My Quirónsalud is your private, secure online space where you can schedule or manage your appointments or view your clinical reports, wait-free and with no unnecessary trips to the hospital. Find out what My Quirónsalud can do for you!



appapp

If you prefer, also on your mobile.

Application of the Portal to the Patient of Quirónsalud.


app-ios. This link opens in a popup windowapp-ios app-ios. This link opens in a popup windowapp-ios

What do I need to access my Patient Portal?

It is only necessary to click on the Patient Portal button, access and complete the registration form. You will receive in your mobile phone the password with which you can access.

To guarantee your security, passwords have a limited validity. Therefore, the periodic change of the same will be necessary. When you try to access, if you have exceeded this period of validity, the system will ask you to change or update your password.

Frequently asked questions about the portal
  • What medical information can I access?

    You have access to the documents related to Diagnostic Tests and other Clinical Reports of the assistance you have received in the centers covered by the Patient Portal plan, managed by Quirónsalud.

  • What steps can I take in relation to appointments?

    You can consult, modify, cancel and reschedule your appointments. You can even print the proofs of your appointments, as well as the overall planning of them. Please indicate clearly, and through the drop-down of the appointment form, the reason for cancellation or change.

  • What do I need to access my Patient Portal?

    It is only necessary to click on the Patient Portal button, access and complete the registration form. You will receive on your mobile phone the password with which you can access.

    To ensure your security passwords are of limited duration. It will therefore be necessary to periodically change it. When you try to access, if you have exceeded this period of validity, the system will ask you to change or update your password.

  • What do I have to do in case I have forgotten my login password?

    Access the Patient Portal home page and click on the "forgot my password" button. You will access a page that will ask for the email address you provided at the time of registration. After validation you will receive an SMS in the same mobile number that you provided at the time of registration.

  • I want to change my password, but I do not have the phone with which I registered

    If you have forgotten the access codes and do not have the telephone number that you registered with at the moment in the Patient Portal, you will need to go to the Patient Care staff at your hospital.

  • What do I have to do if I can not access my Patient Portal?
    • Check your system and connectivity first.
      • Check that you have connectivity, accessing from a new browser tab to any page, (information journals, for example).
      • If you use multiple browsers, try to access the same web page from a second browser.
    • Complete the Contact Form, which can be accessed from the login screen by pressing Information and Contact. If possible, take a picture of the screen where the detected problem appears and attach it to your email.
  • I have problems accessing with my electronic ID

    If you have problems accessing your Patient Portal by means of an electronic DNI, first check that you have a card reader compatible with the electronic DNI, which reminds you of your pin and that your electronic DNI is working correctly.

    You can check the correct operation of your electronic ID from the Official Portal on the electronic DNIThis link opens in a popup window.

    If you have verified the correct functioning of your electronic ID and cannot access your Patient Portal, fill out the Contact Form describing the problem and we will try to respond as quickly as possible. We want to take care of your health, not only helping you when you are sick.

  • Terms of access and use (Patient Folder)

    LEGAL INFORMATION

    By virtue of the provisions of article 10 of law 34/2002, of July 11, on information society services and electronic commerce, you are informed that the entity providing the services herein is IDCSALUD, S.L.U (herein, IDCSALUD), a Spanish company whose business address is C/ Fernández de la Hoz, 24, 28010, Madrid, and whose tax identification number B-83921534. The aforementioned entity is entered in the Companies Register of Madrid, Volume 29,294, sheet 162, Section 8, Page M-350156, entry 61, and is authorized to provide health services through the URL http://www.idcsalud.esThis link opens in a popup window.

    PURPOSE

    In order to better serve its patients, IDCSALUD offers patients the service known as the "Patient Portal." By using this Portal, patients may access their clinical records and manage communication with IDCSALUD health centers and medical staff.

    INTENT

    These Terms of Access and Use (herein, the "Terms") are intended to regulate access to and use of the Patient Portal, an online consultation service accessible through the website www.idcsalud.es. Via the aforementioned Patient Portal, patients may access their clinical records generated in health centers managed by the companies belonging to the IDCSALUD Group.
    In addition, the General Conditions governing the use of the web portal used to access the Patient Portal will also apply.

    FUNCTIONING

    The Patient Portal online consultation service provided by IDCSALUD allows users to do the following:

    • view, print, or save clinical reports
    • modify the User's login information
    • make online appointment requests
    • fill out forms

    USER STATUS

    In order to consult the information available in the Patient Portal (herein, the "Service"), you must be a registered User of the Service.
    "User" is anyone who, after registering, uses the "Patient Portal" service.
    The username and password (herein, the "Login Information") required for registration must be requested in person in any of the associated hospitals or health centers. Once you have presented the proper identification, the system will generate the appropriate login information, which will be sent to your mobile telephone. This login information will grant you access to your clinical records and all other services offered through the Patient Portal.

    REQUIREMENTS FOR ACCESSING THE SERVICE

    Upon signing these Terms, any patient of IDCSALUD over the age of 16 having full capacity to enter into contracts will be allowed be register. By becoming a User, you declare that you have read and expressly accept without reservations all of the Terms herein pertaining to the Privacy Policy and Legal Notice of the website and also declare that you have been made aware of the policy concerning cookies.
    Parents or legal guardians of individuals under the age of 16 who have provided proof of their status as such may request the login information for the Patient Portal of the minor in question. Similarly, for minors over the age of 16, parents or legal guardians may be granted access to the minor's login information provided the minor has authorized said access.

    ACCESSING THE SERVICE

    The User may access his or her Patient Portal through the following URL: https://www.idcsalud.es/portalpaciente. Each User's username and password will allow for the User to be personally identified, after which he or she will be granted access to the system of IDCSALUD.
    Said usernames and passwords are strictly personal, confidential, and non-transferrable. It is the responsibility of the User to safeguard the confidentiality of his or her password, and the User must not reveal or transfer these to third parties. The User therefore expressly accepts that IDCSALUD will presume that all use of the services accessed through the login information is the doing of the individual registered as a User except in cases in which prior notification has been given that the login information has been lost or stolen. Any User who believes that his or her login information may have been accessed by another—either accidentally or fraudulently—must report this to portaldelpaciente@idcsalud.esThis link opens in a popup window. In such circumstances, we will cancel your existing Login Information and provide you with new information.
    You must periodically change your password when requested to do so.
    IDCSALUD may block access to and use of the website or Service when doing so is deemed necessary for reasons of security. The Service will be automatically blocked if successive login attempts are unsuccessful, that is, when an incorrect username or password is entered erroneously a number of times.

    REQUIREMENTS OF USE

    In order to gain access to the Service, you will need a device that meets the software and hardware requirements to use the web (these requirements may change over time) as well as Internet access. Users must be aware that these factors may influence the performance of the web and the possibility of accessing the Service.
    IDCSALUD is not responsible for cases in which the web may be unavailable or functioning deficiently due to the use of inappropriate devices or due to Internet service interruptions caused by excess web traffic or by any other factor.

    USE OF THE SERVICE

    The User hereby commits to use the Service in a manner that is diligent, appropriate, legal, and in adherence of the law, the Legal Notice, these Terms, rules of use, and instructions made known to him or her, in addition to all generally accepted moral values and proper customs and behavior upholding public order.
    For these purposes, you shall refrain from any activity that is illicit, prohibited, or that impinges on the rights and interest of others, and will refrain from activities that may in any way damage, disable, overload, impair, or impede normal use of the Services, computer devices, or documents, files, and any and all contents of IDCSALUD computer equipment as well as the computer equipment of other Users or any User of the Internet (hardware and software).

    INCIDENT MANAGEMENT

    The User shall report any and all incidents he or she may detect as soon as possible and in such a way that the report is properly logged. Incident reports should be sent to the following e-mail address: portaldelpaciente@idcsalud.esThis link opens in a popup window. Incidents are defined as any and all anomalies that affect or may affect data security as well as any detected breach of security regulations.

    ACCESS CONTROL

    Each User may only access the information resources for which he or she has been granted access. Should it be discovered that it is possible to access others' personal information that should remain inaccessible, this anomaly must be reported according to the procedure appearing in the paragraph "Incident Management."

    TEMPORARY FILES

    Information accessed by the User through the Patient Portal must be consulted using the IDCSALUD information systems. IDCSALUD is not liable for information exported to systems other than those pertaining to IDCSALUD.

    TERMS OF USE

    When using the Service, the User will be responsible for ensuring that no unauthorized persons can see the information being processed.
    If the application remains inactive for thirty minutes, it will be automatically deactivated. The User expressly agrees not to store, use, transmit, or disseminate:

    • programs intended to unlock restricted content, serial numbers for programs, or any other content that is in violation of other parties' intellectual-property rights
    • Internet-disseminated viruses, worms, Trojan horses, or destructive activities of any sort, including mail bombing or denial-of-service attacks
    • activities that interrupt or interfere with proper use of the resource network by other Users
    • gathering and/or using the personal information of other Users without their express consent or otherwise in a way that violates data-protection regulations
    • sharing of login information with other individuals or entities
    • destroying, altering, or rendering useless via other means the information, programs, or electronic documents pertaining to IDCSALUD or third parties
    • impeding other Users' access through mass and unjustified consumption of the digital resources through which IDCSALUD renders any of its services and performing actions that may damage, interrupt, or cause errors in these systems
    • using the system in an attempt to access restricted areas of the server without the express consent of IDCSALUD

    COMMUNICATION AND EXCHANGE OF INFORMATION

    The User expressly accepts that all communication, notices, and information that IDCSALUD is to send or provide to the User shall, whenever the law so permits, be sent via e-mail to the address provided by the User at the time of sign-up or, alternatively, the e-mail address provided subsequently by the User.
    All communication sent by the User to IDCSALUD shall be considered valid provided it is sent to the following e-mail address: portaldelpaciente@idcsalud.esThis link opens in a popup window.
    Notices will be considered as being sent and received on the third business day following the day in which the notices are correctly sent to the addresses provided.

    INTELLECTUAL AND INDUSTRIAL PROPERTY

    The design, images, banners, distinctive features, trade name, brands, logos, products, services, and the like that appear in the Patient Portal are protected under the Law on Industrial Property. In no way does the use of or access to the Service grant the User rights of any nature to the aforementioned design, images, banners, distinctive features, trade name, brands, logos, products, or services.
    The website, its source code, and any and all contents accessible through this website are the intellectual property of IDCSALUD and/or third parties. Under no circumstances shall it be understood that rights to the aforementioned are granted to the User.
    IDCSALUD is the owner or licensee of all the rights to the contents of the Web Portal and the Patient Portal and to any and all services offered through the website. Accessing the website or the services provided therein does not grant Users rights or ownership whatsoever to the intellectual- or industrial-property rights or the Content housed within. The User acknowledges and agrees that it is prohibited to use, reproduce, communicate, and/or distribute, modify, alter, or disaggregate said elements, whether for personal, private, and non-profit use or for commercial and for-profit motives.
    IDCSALUD reserves the right to take legal actions against any User who violates or infringes upon its intellectual or industrial-property rights.

    USER LIABILITY

    The User shall be responsible for the following:

    • Safeguarding the confidentiality of the login information provided to the User.
    • Providing accurate information to IDCSALUD; the User will be solely liable for any inaccurate information provided. Similarly, the User will be responsible for updating information provided to IDCSALUD in such a way that said information accurately reflects the situation of the User at all times.
    • Any damages inflicted on IDCSALUD or third parties as a result of information that is not updated, false, or inaccurate and that may result from others' using the Login Information of the User.
    • Should a User obtain a copy of his or her clinical information, said User will be solely liable for the use and custody of such information.

    AVAILABILITY OF THE SERVICES

    The information, content, and services offered through the website shall be those determined by IDCSALUD at all times and may vary from time to time. Therefore, IDCSALUD is under no obligation to continue offering these Services. Nonetheless, IDCSALUD will inform Users if and when it decides to discontinue a given Service and shall explain the conditions of the discontinuation of the Service.
    In addition, IDCSALUD may partially or totally discontinue access to the Services for Users who fail to comply with these Terms.

    GUARANTEE AND RESPONSIBILITIES

    Although IDCSALUD utilizes systems that are compatible with most of the technology available on the market, it cannot guarantee the compatibility of the devices employed by Users.
    IDCSALUD does not guarantee the availability or the continued functioning of the website or the Service. IDCSALUD shall be exempt from all liability arising from access to and use of the website and/or the Service (e.g., performance failure, interruption or delay in the functioning of the services, system or line failure), even in cases in which failure or incorrect functioning causes damage to the computer systems of third parties. Users shall access the website and the Service at their own risk.
    The Service offered through the website is in compliance with the provisions of Spanish law.
    IDCSALUD shall be held exempt from all liability arising from incorrect use of the website and/or Service by Users.
    IDCSALUD shall not be liable for circumstances in which the Service is unavailable due to force majeure or temporary unavailability of the Service owing to technical reasons. Therefore, IDCSALUD will not be liable for any damages or losses that may result from events that are unforeseeable or inevitable either due to fortuitous occurrences or force majeure.
    IDCSALUD is not responsible for failures, technical errors, accidents, malfunctions, manipulation, interruptions of service, or other incidents of any kind that may occur in products, equipment, or technical services belonging to others and that are necessary to access the services.
    Although IDCSALUD has acted with diligence and has taken the necessary measures made available by technological advancements so as to avoid any possible security breaches in the Portal, IDCSALUD does not guarantee that the security means taken are beyond vulnerability.
    IDCSALUD is not responsible for the legal compliance of other websites belonging to third parties which may be accessed through the Portal. IDCSALUD is not responsible for the legality of other websites that may link to this Portal.

    MODIFICATIONS IN THE TERMS

    IDCSALUD may include new functionalities in the website or the Service and/or change the Terms currently in force. In such cases, IDCSALUD will publish the updated version on the website so that the User may be aware of any and all changes. If the User does not agree with the new Terms, he or she will have fifteen days as of the time of the notification of the change to terminate the contract by providing valid notice of cancellation to IDCSALUD. Failure to provide notice of cancellation within the aforementioned period implies the User's full acceptance of the new Terms.

    PRIVACY

    In accordance with EU Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data; Organic Law 3/2018, of December 5, on data protection and digital-rights guarantees; and Law 41/2002, of November 14, regulating patient autonomy and patient rights and obligations regarding clinical information and documentation, all patients, users of the services rendered on these premises, and the general public are hereby informed of the following:

    Introduction

    This document contains the privacy policy of the health centersThis link opens in a popup window of Grupo Hospitalario Quirónsalud regarding the personal data processing of patients receiving treatment from the aforementioned business entity and/or the individuals acting on behalf of these patients.

    Patients may address any issues or questions regarding this matter to the Quirónsalud Hospital Group Data Protection Officer, who may be reached via post at Calle Zurbarán, 28, 28010 Madrid. The Data Protection Officer may also be reached via email at DPO@quironsalud.esThis link opens in a popup window.

    Who is the data controller?

    Data Controller is the company that holds ownership over the facility where the care is rendered:

    Data Controller (proprietary company of the facility where you receive care) and registered office

    Health center

    IDCQ HOSPITALES Y SANIDAD S.L.U.

    Calle Zurbarán 28, Madrid (28010)


    Hospital Universitario Quirónsalud Madrid

    Hospital Universitari General de Catalunya

    Hospital Quirónsalud Sur

    Hospital Quirónsalud Barcelona

    Hospital El Pilar - Centre Cardiovascular Sant Jordi

    Hospital Quirónsalud Zaragoza

    Hospital Quirónsalud Córdoba

    Hospital Quirónsalud Málaga

    Hospital Quirónsalud Marbella

    Hospital Quirónsalud Sagrado Corazón

    Hospital Quirónsalud Torrevieja

    Hospital Quirónsalud Murcia

    Hospital Quirónsalud Valencia

    Hospital Quirónsalud Vitoria

    Hospital Quirónsalud Bizkaia

    Hospital Quirónsalud Albacete

    Hospital Quirónsalud Santa Cristina

    Hospital Quirónsalud Ciudad Real

    Hospital Quirónsalud Toledo

    Hospital Quirónsalud Clideba

    Hospital Quirónsalud Cáceres

    Hospital Quirónsalud Tenerife

    Hospital Quirónsalud Costa Adeje

    Hospital Quirónsalud Miguel Domínguez

    Hospital Quirónsalud Campo de Gibraltar

    Hospital Ruber Juan Bravo 49

    Hospital Ruber Internacional

    Hospital de Día Quirónsalud Alcalá de Henares

    Hospital de Día Quirónsalud Zaragoza

    Hospital de Día Quirónsalud Ave María

    Hospital de Día Quirónsalud Donostia

    Hospital de Día Quirónsalud Talavera

    Clínica Quirónsalud Alcázar

    Instituto de Reproducción Asistida Quirónsalud Dexeus Murcia

    Instituto de Reproducción Asistida Quirónsalud Pamplona

    Instituto de Reproducción Asistida Quirónsalud Bilbao

    Instituto de Neuro-rehabilitación Quirónsalud Pontevedra

    Centro Médico Quirónsalud Rubí

    Centro Médico Quirónsalud Tres Cantos

    Centro Médico Teknon

    Centro Médico Quirónsalud Aribau

    Centro Médico Quirónsalud Málaga

    Centro Médico Quirónsalud Parque Litoral

    Centro Médico Quirónsalud Marbella

    Centro Médico Quirónsalud Guadalete

    Centro de Diálisis Quirónsalud Marbella

    Centro Médico Quirónsalud Fuengirola

    Unidad de Tráficos Quirónsalud Marbella

    Centro Médico Quirónsalud Costa del Sol

    Centro Médico Quirónsalud Aljarafe

    Centro Médico Quirónsalud Sevilla Este

    Centro Médico Quirónsalud Manuel Siurot

    Centro Médico Quirónsalud Mairena

    Centro Médico Quirónsalud Los Remedios

    Centro Médico Quirónsalud Nervión

    Centro Médico Quirónsalud Alameda

    Centro Médico Quirónsalud Orihuela

    Centro Médico Quirónsalud Santa Pola

    Centro Médico Quirónsalud Alicante

    Centro Médico Quirónsalud Valencia

    Centro Médico Quirónsalud Blasco Ibañez

    Centro Médico Quirónsalud Legión Española

    Centro Médico Quirónsalud Severo Ochoa

    Centro Médico Quirónsalud Artes Gráficas

    Centro Médico Quirónsalud Plaza Euskadi

    Centro de Rehabilitación Quirónsalud Bilbao

    Centro Médico Quirónsalud Albacete

    Centro Médico Quirónsalud Plaza Madroño

    Centro Médico Quirónsalud Puertollano

    Centro Médico Quirónsalud Toledo

    Centro Médico Quirónsalud Mérida

    Centro Médico Quirónsalud Badajoz

    Centro Médico Quirónsalud Pontevedra

    Centro de Rehabilitación Quirónsalud Pontevedra

    Centro Médico Quirónsalud Almendralejo

    Centro Médico Quirónsalud Don Benito

    Centro de Rehabilitación Quirónsalud Talavera

    Centro Médico Quirónsalud Algeciras

    Residencia Alcabala

    Residencia Dulcinea

    Residencia La Manchuela

    HEALTH DIAGNOSTIC S.L.

    Calle Zurbarán 28, Madrid (28010)

    Diagnóstico por imagen (ubicado en Hospital Plató, C/Tavern núm.82 CP 08006-Barcelona)

    CLÍNICA SABADELL, S.L.U.

    Calle Viladomat, 288, Barcelona (08029)

    Hospital Quirónsalud del Vallès

    Hospital Universitari Sagrat Cor
    DIRECCIO I GESTIO DE CENTRES MEDICS, S.L.U.
    Avenida Marti Pujol 30 de Badalona (08911)
    Centro Médico Quirónsalud Dígest Martí Pujol

    DIAGNOSTIC PER LA IMATGE DIGEST, S.L.U.

    Calle Laietània nº 1-11, Planta baja de Badalona (08911)
    Centro Médico Quirónsalud Dígest Laietania

    RADIOLOGIA, DIRECCIO I GESTIO DE CENTRES MEDICS, S.A.U.

    Calle Arbrés, 53 de Badalona (08911)
    Centro Médico Quirónsalud Dígest

    FUNDACIÓN JIMÉNEZ DÍAZ UTE

    Avenida de los Reyes Católicos, 2, Madrid (28040)

    Hospital Universitario Fundación Jiménez Díaz

    FUNDACIÓN INSTITUTO DE INVESTIGACIÓN SANITARIA FUNDACIÓN JIMÉNEZ DÍAZ

    Calle Isaac Peral, 42 oficinas. 2ª planta, oficina 1, Madrid (28015)
    Instituto de Investigación Sanitaria Fundación Jiménez Diaz (IIS-FJD)

    CLÍNICA LA LUZ, S.L.

    Calle del Maestro Ángel Llorca, 8, Madrid (28003)
    Hospital La Luz

    POLICLÍNICA GIPUZKOA, S.A.

    Paseo Miramón, 174, Donostia, Guipúzcoa (20014)

    Policlínica Gipuzkoa

    Centro de Resonancia Policlínica Gipuzkoa Irún

    CLÍNICA DEPORTIVA DE ALTO RENDIMIENTO, S.L.U.

    Calle Zurbarán, 28, Madrid (28010)
    Centro Médico Ruber Internacional

    CLÍNICA ESPERANZA DE TRIANA, S.A.

    Calle San Jacinto, 87, Sevilla (41010)

    Hospital Quirónsalud Infanta Luisa

    Centro Médico Quirónsalud Espartinas

    Centro Médico Quirónsalud Condes de Bustillo

    Centro Médico Quirónsalud Condes de Bustillo 36

    POLICLÍNICA SAN PEDRO, S.A.

    Calle Punta Umbría s/n, Huelva (21002)
    Hospital Quirónsalud Huelva

    INSTITUTO POLICLÍNICO SANTA TERESA S.A.

    Calle Londres, 2 La Coruña (15008)

    Hospital Quirónsalud A Coruña

    Centro Médico Quirónsalud A Coruña

    Centro Médico Quirónsalud Ferrol

    Instituto Oftalmológico Quirónsalud A Coruña

    USP INSTITUTO DEXEUS, S.A.

    Calle Zurbarán, 28, Madrid (28010)
    Hospital Universitari Dexeus

    UNITED SURGICAL PARTNERS MADRID, S.L.

    Calle Juan Bravo, 39, Madrid (28006)

    Hospital Quirónsalud San José

    Hospital Ruber Juan Bravo 39

    Quirónsalud San Jose Consultas

    Centro Médico Ruber Juan Bravo Maldonado

    INTEGRACIÓN SANITARIA BALEAR, S.L.

    Carrer Santiago Russiñol, 9 Palma de Mallorca (07012)

    Hospital Quirónsalud Palmaplanas

    Clínica Rotger

    Centro Médico Quirónsalud Playa de Muro

    Centro Médico Quirónsalud Sa Pobla

    Hospital Quirónsalud Son Verí

    Centro Médico Quirónsalud Nuredduna

    Centro Médico Quirónsalud Inca

    Centro Médico Quirónsalud Manacor

    Centro Médico Quirónsalud Palmanova

    Centro Médico Campos

    Centro Médico Sóller

    Centro Médico Arenal

    Centro Médico Ibiza

    Centro Médico Ciutadella

    Quirónsalud Dental Palmaplanas

    Quirónsalud Dental Manacor

    Quirónsalud Dental Palma Centro

    Quirónsalud Dental Kids

    INSTITUTO EXTREMEÑO DE REPRODUCCIÓN ASISTIDA, S.L.

    Julio Cienfuego Linares, 19-21 Badajoz

    IERA - Instituto Extremeño de Reproducción Asistida

    IERA- IERA Lisboa

    RADIOTERAPIA DE PROTONES, S.L.

    Calle Zurbarán 28, Madrid (28010)
    Centro de Protonterapia (ubicado en C/ Virgilio núm. 3 CP 28223-Madrid)

    IDCSALUD MÓSTOLES, S.A.

    Calle Zurbarán 28, Madrid (28010)
    Hospital Universitario Rey Juan Carlos

    IDCSALUD VALDEMORO, S.A.

    Calle Zurbarán 28, Madrid (28010)
    Hospital Universitario Infanta Elena

    IDCSALUD VILLALBA, S.A.

    Calle Zurbarán 28, Madrid (28010)
    Hospital General de Villalba

    What personal information do we process and what is the source of this information?

    Based on the relationship you enter into with us, we may process the following personal data:

    • Identification data and Contact details of patients or their representatives (including signature, image, health-service card, and social security number or mutual benefit association number);
    • Health-related information appearing in patient medical records;
    • Personal characteristics and demographic attributes; and
    • Transactional data (payments of any nature, including transfers and debits).

    The data may come from the Data Subject (the patient) or from your legal or volunteer representative and/or care professionals.

    Why do we process your personal information?

    Data Controller may process personal data for the following purposes:

    1. Delivery of health care: your personal information is processed for the purposes of providing you the health care you need as well as to appropriately manage the health services and carry out administrative tasks required for the provision of care, as in the following examples:

    - To send appointment reminders;

    - To issue proof-of-hospital-visit documents for family members or others with ties to you and who may request such a document in adherence of applicable regulations;

    - To communicate with another health center when instructed to do so by the patient;

    - To process any and all incidents or claims filed by the individual using the service and/or you, the patient;

    - To administer surveys intended to gather your opinion of the care delivered to you; such surveys shall be used exclusively to improve and develop our care services and management activities; and

    - To provide the services offered via the Quirónsalud Patient Portal: personal information pertaining to patients who register as users of the PortalThis link opens in a popup window may be processed for the purposes of accessing and using the tool.


    2. Scientific research: your data may be processed for scientific purposes in compliance with specific regulations governing such processing.

    3. Procedures: for anonymization and pseudonym use: For scientific or statistical research purposes, your data may be subjected to certain procedures to make them unidentifiable or so that they can no longer be linked to any party in the absence of additional information appearing separately.

    4. Processing of information requests, complaints, suggestions, grievances, and the exercise of data-protection rights, etc.: your data will be processed to fulfill the request by any means necessary, including telephone calls and/or electronic means.

    5. Compliance with legal obligations: in order to comply with applicable legal obligations, it may be necessary to process personal information. Specifically, these obligations may be related to compliance with legislation on data protection, taxation, health, etc.

    6. Drawing up executing the contract: personal information is processed to manage the contractual relationship with the patient.

    7. Video surveillance: certain health facilities have a video surveillance system that takes real-time footage of individuals who use the facility’s services. These data are processed for the sole purpose of safety and to monitor individuals appearing on the premises.

    8. Distribution of advertising materials using any means in case of additional consent: If you so consent, we may transfer your data to business entities that form part of the Hospitalario Quirónsalud GroupThis link opens in a popup window in order to inform you—via any means and for promotional and advertising purposes—as to the health- and health-care-related facilities, services, products, or events of the companies belonging to the Quirónsalud Hospital Group (under no circumstances will your data be used to send you advertising content from third parties).

    The information collected will be processed for the established purposes, and under no circumstances shall data be processed toward ends that conflict with those established here. Please note that the processing of data for purposes related to scientific research or statistical measurements is not considered to be incompatible with the initial purpose.

    We process your data with the same degree of care and quality at all times, regardless of the channel you may choose to communicate with us (e.g. the web page of a facility, mobile apps, face-to-face, telephone, computer).

    What are the legal basis for your personal data processing?

    Purpose

    Legal Basis

    Provision of health-care services

    Processing is necessary for the performance of a contract to which the data subject is party, Processing based on the consent of the Data Subject to protect the vital interests and/or the legitimate interests pursued by the Data Controller

    Scientific research

    Processing for scientific research analysis

    Procedures for anonymization and pseudonym use

    Processing for scientific research or statistical analysis

    Processing of requests

    Processing based on the consent of the Data Subject and/or the legitimate interests pursued by the Data Controller

    Compliance with legal obligations

    Processing is necessary for compliance with a legal obligation to which the controller is subject

    Signing and performance of the contract

    Processing is necessary for the performance of a contract to which the data subject is party

    Video surveillance

    Processing is necessary for the performance of a task carried out in the legitimate interests pursued by the Data Controller

    Advertisements

    Treatment based on the consent of the Data Subject


    How long will we storage your personal information?

    In general, your data will be kept only for the length of time strictly necessary for the purpose for which said data were collected.

    The personal data provided, as well as data derived from the health care delivered, are kept only for the storage period appropriate to each case (in accordance with medical and legal criteria); these data will be maintained for a minimum of 10 years as of the date of each care episode, with the exception of cases in which regional and/or specific regulations stipulate that this period must be longer than that mentioned above.

    After the aforementioned minimum period has elapsed, and once the care and contractual relationship has concluded, the person in charge of data processing will safeguard the data, duly blocked and pseudo-anonymised, for the legally stipulated period.

    The personal data processed for purposes of scientific research shall be maintained, in adherence of retention criteria, for a period not to exceed five years as of the termination of the research. With regard to data processed for purposes of scientific research, the competent regional authorities may, upon request of the data controller and in accordance with established regulatory procedures, order prolonged retention of the entire set of certain data for purposes of historical, statistical, or scientific research in adherence of applicable legislation in each case.

    Personal data provided for the purposes of processing information requests, complaints, suggestions, grievances, or the exercising of data-protection rights of any sort, etc., shall be retained for the period necessary to process the request. In all cases the minimum period shall be that which is legally mandated as well as that required to file grievances, exercise rights, or for the defense against such grievances or the exercise of individual rights.

    Data processed to comply with legal obligations will be kept for the storage period set forth in applicable legislation.

    Data gathered to sign and perform a contract shall be retained for the duration of the contractual relationship as well as the period necessary to file grievances, exercise rights, or for the defense against against such grievances or the exercise of individual rights. This period shall not be less than five years.

    Images recorded using video surveillance systems will be retained for a maximum of 30 days, unless the data controller becomes aware of any facts that may be relevant to subsequent legal proceedings.

    Personal data processed for the distribution of advertising materials will be retained until the concerned party withdraws his or her consent and/or exercises their right to oppose the retention of such data and/or requests that they be deleted.

    Who will receive my personal information?

    To properly provide services, certain service providers and/or entities belonging to the Quirónsalud Hospital Group must process data on behalf of the data controller and act as designees for the processing of personal data. By way of example, such designees may be providers of medical services, diagnostic services, clinical testing, audits, entities charged with oversight of physical safety, archiving, information storage or digitization, destruction of documents, legal advisory services, or IT services.

    Your personal data will not be disclosed to third parties except where there is a legal obligation, vital interest, or prior consent of the party concerned; such disclosure will only take place in the following circumstances, the recipients being those listed below:

    a) As a patient may have contracted an insurance policy in which a third party (e.g., insurance providers, mutual benefit associations, public-health authorities, or third parties in cases of civil liability insurance) may be liable for payment of the health services rendered by the facility, provided the patient makes this information known, we may disclose the patient’s personal data to the aforementioned parties so they may manage, authorize, verify, and monitor payment for the care services rendered. The foregoing is legitimized by the requisite management of health-care systems and services as well as the provisions set forth in Law 50/1980 on insurance contracts.

    Where a patient has insurance coverage contracted with an entity located outside the European Economic Area[1], (hereinafter, E.E.A.) where legislation concerning data protection is less stringent than that of the European Union, it may be necessary to disclose personal data internationally, provided the patient grants their express prior consent after being informed of the risks involved. We hereby inform you that these disclosures are only made to meet the needs of the patient and facilitate payment for the care services rendered; in short, information is only disclosed to manage payment and verify information with the insurer in the shortest time possible regarding services rendered for patients who have insurance coverage provided by entities based outside of the E.E.A.

    Patients who decline to consent to such disclosure of their information may lead to insurer refusal of payment for the services rendered, causing them to be liable for payment given that the entities normally responsible for payment would, under these circumstances, be unable to verify, validate, or monitor billing on the part of the health facility for all care delivered.

    b) We also inform you that, due to legal obligations and/or in the vital interest of patients, your personal data may be disclosed to suppliers of medical equipment, prostheses, implants, and providers of ambulance services.

    All information that you provide to us will be processed as confidential and in strict compliance with mandatory security measures necessary to prevent access by unauthorized third parties.


    [1] Member States of the European Union in addition to Iceland, Norway, and Liechtenstein

    What are your right of your personal data?

    You may exercise your rights to require access to information, rectification information that is inaccurate, or request the erasure of your data when, among other reasons, the data are no longer necessary for the purposes for which they were collected. In certain circumstances, you may also request the restriction of personal data proccesing, in which case we will only keep these data to file or defend against claims and grievances. Finally, and for reasons related to your particular situation, you can also exercise your right to object and to data portability. Additionally, you may revoke the consent given for your data processing at any time.

    Exercise of your rights and withdrawal of consent to process your data are free of charge, except in the cases set forth in art. 12.5 of the Regulation (EU) 679/2016, which may be exercised by completing the questionnaire (download here), in person at the patient answer center of the health facility where their care is rendered, or by mailing a letter to the patient answer center of the individual’s care facility (see mailing addressThis link opens in a popup window) stating that the letter is in reference to "data-protection rights" and attaching a photocopy of the individual’s identity card or equivalent document and indicating the right they wish to exercise.

    We also inform you that you may file a grievance before the competent authority overseeing these matters, following the procedure set forth for each individual case.

    TERMINATION

    The User may voluntarily disable the Service at any time; doing so will prevent him or her from accessing the Service in the future.
    The following conduct may cause an individual to lose his or her rights as a User:

    • non-payment or outstanding balances owed to IDCSALUD
    • impeding the performance of the Services
    • transferral of the rights and obligations set forth in this contract
    • involvement in legal or administrative proceedings that may jeopardize the image or commercial reputation of IDCSALUD
    • non-compliance of any nature with the conditions related to the Services

    Disabling an account will not affect any of the obligations of the User that apply at the time the account is disabled.

    JURISDICTION AND APPLICABLE LAW

    These terms and conditions of use will be governed by Spanish law. Except as required by law, the courts of law of Madrid, Spain will rule on any dispute between the Parties as to the interpretation of the contract and its performance.