FREMAP, MUTUAL SOCIETY No. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE, with registered office in Carretera de Pozuelo No. 61, 28222 Majadahonda (Madrid). Contact us by postal mail at the aforementioned address or by email at the address derechos_arco@fremap.es.

The Data Protection Officer is the person in charge of safeguarding your privacy at our company. If you need to contact the Data Protection Officer, you can do so at dpd@fremap.es or by sending a letter to the aforementioned address, with the reference "Data Protection Officer".

If you receive Social Security benefits and go to our administrative or healthcare centres:

• Identity and contact data (name and surnames, ID/Non-national ID/passport, postal and electronic address, social security number, telephone number of the data subject or their relatives or representatives, signature and photo);
• Personal characteristics (date of birth, age, family, sex and nationality);
• Professional and employment data (profession, work place, position and professional category);
• Economic and insurance data (bank, wage, allowance, social security registration and insurance company data);
• Special category data (health data);
• Other data needed to check your entitlement to social security benefits, verify mutual insurance company competence and perform accident prevention actions.
  • Information on the accident that explains how it occurred and how it is related to work (accident report, work schedule, journey, if the accident happened on the way to or from work, duties performed, employment contract, List of Employees (RNT), Social Security Contribution Payment Receipt (RLC) and time of health care assistance).
  • Information on the work-related illness that may affect you so it can be correctly classified (information about whether the job entails the presence of specific substances or agents, which is a risk factor).

If you are not a social security beneficiary and we attend to you at one of our healthcare facilities:

• Identity and contact data (full name, ID/Non-national ID/Passport, postal and electronic address, telephone number, signature and photo);
• Personal characteristics (age, sex and family);
• Insurance details and registration in Social Security.
• Special category data (health data)

If you receive social security benefits and attend one of our administrative or healthcare facilities, your data will be processed:

a) To manage your social security benefits.

• We will process your data to ensure you receive social security protection and to help you manage your healthcare and benefit payments for work-related accidents and illnesses. We will also use it to cooperate with accident prevention actions and help you return to work (if necessary), access benefit payments for temporary disability due to common accidents and illnesses and non-work-related accidents, monitor risks during pregnancy and breastfeeding, help self-employed individuals terminate their business activities and provide assistance for people caring for minors with cancer or other serious illnesses.

  In order to do this, we need to process your data to determine whether you are entitled to social security benefits and manage them (if you are), tell you about your appointments or reviews with the mutual insurance company's medical unit and notify you and your employer (while your employment relationship is still in effect) about any orders that recognise, discontinue, cancel or extinguish rights.

b) To make sure your rights to any benefits are recognised quickly and correctly classify the accident or illness.

• When you consent, your company, or the individual or legal entity who/that performs administrative tasks on behalf of the company, will be sent information from your medical certificate or a certificate to confirm that you have received medical assistance without leave due to a work-related accident or illness
• Equally, and only when you consent, your company, or the individual or legal entity who/that performs administrative tasks on behalf of the company, will be sent information from your certificate of fitness to return to work following a work-related illness or accident so your company can immediately register your fitness to return to work on the RED system and correctly apply the necessary subsidised payment deductions.
• Similarly, in those cases where you expressly give your consent, the financial data needed to recognise your entitlement to temporary disability benefit will be collected from your company, as well as the payslips required to check that the change to your benefits has been calculated correctly.

c) To analyse and investigate work-related accidents and illnesses and develop a comprehensive preventive action.

This purpose includes the processing of your data for:

• We will obtain information from your company or the medical facility that attended to you to help us ascertain how the accident happened and, where necessary, what assistance you received and the exact time of such assistance. This will help us provide you with the correct healthcare and determine the type of work-related incident that took place.
• If you have suffered a work-related illness, we will obitain from your company information about whether your job entails the presence of specific substances or agents and communicate to your employer the risk factors detected by the mutual insurance company's accident and illness prevention experts.

d) To transfer information on your healthcare to the insurance company responsible for dealing with the effects of the accident or to the medical facility that you have expressly authorised.

• When you give your consent, your data may be sent to the insurance company responsible for the costs arising from the accident, whether by regulations or contractually. Specifically, this will involve any medical information or documents about the injuries caused by the accident to cover the costs incurred during the healthcare you received as an inpatient or outpatient.
• Similarly, when you give your consent, your medical leave situation may be communicated to the medical department of your company so they can verify your health status, in accordance with article 20.4 of Royal Legislative Decree 2/2015 of 23 October, which approves the consolidated text of the Workers' Statute Act. Similarly, if you give your express consent, information on your latest medical procedure may be communicated to your company's medical department, so it can contribute to improving your health situation by expediting tests or treatments, if possible, or paying planned wage supplements. Likewise, if you expressly consent, your company's medical department can be informed about the mutual insurance company's proposal to issue you with a certificate of fitness to return to work so it can plan your return to work and reorganise the service.

e) For research, teaching, statistical and analytical purposes.

• Your personal data may be made anonymous or irreversibly unidentifiable and used for medical research, teaching, statistical and analytical purposes.

f) To improve the management of the services provided.

• Your data may be processed to conduct satisfaction surveys, address any complaints or suggestions that you may submit to us and to manage your messages of acknowledgement and congratulations.

g) For security purposes.

• To preserve the safety of people, goods and facilities, your image may be recorded by the security cameras installed in our facilities and hospitals.

If you do not receive Social Security benefits and we see you in our healthcare facilities, we will process your data:

a) To provide you with emergency medical care.

b) For research, teaching, statistical and analytical purposes.

• Your personal data may be made anonymous or irreversibly unidentifiable and used for medical research, teaching, statistical and analytical purposes.

c) For security purposes.

• To preserve the safety of people, goods and facilities, your image may be recorded by the security cameras installed in our facilities and hospitals.

The legal basis that allows us to process your personal data depends on the reason why we need to process it.

If you receive Social Security benefits and go to our administrative or healthcare centres:

a) To manage your social security benefits.
We need to process your personal data to comply with legal obligations for managing social security benefits, and we are entitled to process your data under article 9.2 b), f) and h) of the General Data Protection Regulation (EU) 2016/679, in relation to Article 6,1 c) on the basis of the social security regulations that apply to Partner Mutual Insurance Companies (art. 80 et seq. of Royal Decree 8/2015 of 30 October, which approves the consolidated text of the General Social Security Act, Royal Decree 625/2014 of 18 July which governs certain aspects of the management and control of processes for temporary disability in the first three hundred and sixty-five days, Royal Decree 860/2018 of 13 July, which governs the preventive activities of the Protective action of the Social Security Institute to be carried out by Mutual Insurance Companies that Partner with the Social Security Institute, Royal Decree 1993/1995 of 7 December on Mutual Insurance Company Partnerships with the Social Security Institute and the implementing regulations), and on the basis of the applicable health regulations (Act 41 / 2002 of 14 November, basic regulation of patient autonomy and rights and obligations with regard to information and clinical documentation).

b) To make sure your rights to any benefits are recognised quickly.
The legal basis to process your data for this purpose is your consent. Therefore, if you give your express authorisation, your company will be sent information from your medical certificate or a certificate to confirm that you have received medical assistance without leave so it can comply with its legal obligations to transfer the information to the Delta@ system. Equally, and only when you give your express authorisation, your company will be sent information from your certificate of fitness to return to work so it can comply with its legal obligation to register it on the RED system and correctly apply the necessary subsidised payment deductions. Similarly and only if you give your express authorisation, your company will be asked for the financial data needed to check the social security contributions made so that your benefits can be correctly calculated (article 6.1a) of the General Data Protection Regulation (EU) 2016/679).

c) To analyse and investigate work-related accidents and illnesses and develop a comprehensive preventive action.
We believe we have a legitimate interest to process the information required to analyse and investigate work-related accidents and illnesses and develop a comprehensive preventive action to efficiently and effectively manage any benefits you may be entitled to, on the basis that processing this data will be beneficial to you as, if a work-related accident or illness is found to have taken place, a nunber of rights to social security beneifts will be generated in your favour (art. 6.1 f) of Regulation (EU) 2016/679 on General Data Protection.

d) To transfer information on your healthcare process to the insurance company responsible for the medical services that you have expressly authorised.
The legal basis to process your data for this purpose is your voluntary consent under art. 6.1 a) of the General Data Protection Regulation (EU) 2016/679.

e) For research, teaching, statistical and analytical purposes.
We consider that we have a legitimate interest to process data and information on processes arising from your work-related injuries and illnesses that may be of interest for research, teaching, statistical and analytical purposes, after it has been made irreversibly unidentifiable (Article 6.1 f) of the General Data Protection Regulation (EU) 2016/679).

f) To improve the management of the services provided.
We consider that we have a legitimate interest in knowing your degree of satisfaction with the services provided to analyse their quality, as we understand that processing this data is beneficial to you, as it enables us to improve our services (art. 6.1 f) of the General Data Protection Regulation (EU) 2016/679).

g) To maintain security.
We consider that we have a legitimate interest to record your image when you visit our centres and facilities, as we understand that processing this data can be beneficial to you should any incident that affects your security occur (art. 6.1 f) of the General Data Protection Regulation (EU) 2016/679).

If you do not receive social security benefits and go to any of our administrative or healthcare facilities:

a) To provide you with emergency healthcare.
It is necessary to process your personal data to comply with legal obligations to provide emergency healthcare and related adminsitrative services (art. 9.2 c) of the General Data Protection Regulation (EU) 2016/679), in relation to article 6.1 d) of the same and article 196 of Organic Law 10/1995 of 23 November of the Criminal Code).

e) For research, teaching, statistical and analytical purposes.
We consider that we have a legitimate interest to process data that may be of interest for research, teaching, statistical and analytical purposes, after it has been made irreversibly unidentifiable (art. 6.1 f) of the General Data Protection Regulation (EU) 2016/679).

c) To protect your safety.
We consider that we have a legitimate interest to record your image when you visit our centres and facilities, as we understand that processing this data can be beneficial to you should any incident that affects your security occur (art. 6.1 f) of the General Data Protection Regulation (EU) 2016/679).

Data will be stored for the time required to meet the purpose for which it was collected and deal with any liabilities and claims that could be lodged against the company, in accordance with applicable regulations.

If you receive Social Security benefits and go to our administrative or healthcare centres:

You are obliged to provide your data so that we can provide you with healthcare and financial provisions. Refusal to provide such data prevents access to financial assistance and healthcare to which you have the right based on Social Security legislation.

If you are not a beneficiary of the Social Security Institute and we attend you in our healthcare centres.

You are required to provide us with your data to enable us to provide you with any healthcare you need, and because your refusal to provide us with the same prevents us from providing you with such healthcare.

If you receive social security benefits and attend one of our administrative or healthcare facilities, your data may be conveyed to third parties to comply with some of the above purposes, specifically the following:

• To comply with the purpose of managing social security benefits, your data may be communicated to the Ministry of Employment and Social Security, Social Security Agencies and Organisations, the Public Health Department, Medical and Labour Inspections, other Mutual Insurance Companies that Partner with the Social Security Institute, your company and companies that provide healthcare services with which there is a contractual relationship for the provision of healthcare or the performance of medical tests. The personal details that may be communicated will be: Identifying data and data that may affect the generation, modification, conservation or extinction of the right to benefits and the amounts thereof, which are recognised by the Mutual Insurance Company (art. 71.1 and 82.2 of Royal Legislative Decree 8/2015, which approves the consolidated text of the General Social Security Act and article 5 of Royal Decree 1630/2011 of 14 November).
• To comply with the purpose of expediting the recognition of your right to receive the benefits you may be entitled to, your data may be communicated to your company or the individual or legal entity who/that performs these administrative activities on behalf of your company. The details that can be communicated are: Identification data (full name and Tax ID/Non-national ID), health data necessary for the company to record the accident or illness in full on the RED system (date of the accident; Date of attendance; date of medical leave, official codes relating to the way the accident occurred, type of injury, degree and nature of the injury, as well as if it has occurred before, prognosis of severity, date of and reason for medical discharge, as well as the cancellation of the same, if applicable, payslips and social security contribution documents).
• To comply with the purpose of analysing and investigating work-related accidents and illnesses and developing a comprehensive preventive action, your data may be communicated to your company and to the medical services that have provided you with assistance, where applicable. The details that can be communicated are: Identification data (full name and Tax ID/Non-national ID) Information on the work-related accident that explains how it occurred and how it is related to work (accident report, work schedule, journey, if the accident happened on the way to or from work, duties performed, employment contract, List of Employees (RNT), Social Security Contribution Payment Receipt (RLC) and time of healthcare assistance) and information about the work-related illness that may affect you (risk factors detected in your job by the Mutual Insurance Company's risk prevention experts).
• To comply with the purpose of transferring information on your healthcare process to the insurance company responsible for the damages or the medical services of your company before you have given your authorisation, your data that may be communicated is as follows: Identification data (full name and ID/Non-national ID) and health data (Information on your last medical procedure).

In addition, your personal data will be transferred or communicated to parties that must receive it under a legal obligation and that request it from the Mutual Insurance Company (State Security Forces and Agencies, Law Courts and the Public Prosecutor's Office), or that have a contractual obligation to provide services that requires the involvement of the Mutual Insurance Company to perform its activities under normal circumstances.

We will not make any international transfers of data to third countries or international organisations.

If you do not receive Social Security benefits and we attend to you in one of our centres:

Your data may be communicated to the relevant Public Health Department or your relatives.

We shall not, by any means, internationally transfer your data to third-party countries or to international organisations.

Right of access: The right to obtain confirmation as to whether FREMAP, Mutual Society no. 61 Collaborating with the Social Security Institute is or is not processing personal data that concern you and, in this case, to access the same.

Right of rectification: The right to request the amendment or rectification of your data if they are inaccurate.

Right of erasure: The right to request the erasure of your data due to the illegal processing of the same, because the reason behind their processing or collection no long exists, when you revoke your consent or oppose their processing or when they must be erased in compliance with a legal obligation.

Right of opposition: The right to oppose, at any time, for reasons related to your specific situation, the personal data that concerns you from being subject to processing, on the grounds of public interest or the legitimate interest of the controller or a third party.

Right of limitation of the processing:The right to limit the processing of your data, if you contest their accuracy, if the processing is illegal, if your personal data are no longer necessary for the reasons for processing, or if you have exercised your right to oppose said data processing.

Right of portability of the data:The right to receive the personal data that concern you in a structured, commonly-used format that can be digitally read, and to transmit them to another controller, provided that it is technically possible.

The right not to be subject to individual automated decisions:The right to oppose being subject to decisions solely based on the automated processing of personal data, including creating profiles, when this decision may legally or significantly affect you.

To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

• identification data,
• a copy of your National Identity Card (DNI) or another official document that confirms your identity
• the claim specifying the request,
• address for notification purposes,
• date, and requester's signature.

If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

• Postal mail: Carretera de Pozuelo, 61, Majadahonda 28222 – Madrid.
• E-mail: derechos_arco@fremap.es

Similarly, you may also contact the Data Protection Officer, by:

• E-mail: dpd@fremap.es
• Postal mail: Carretera de Pozuelo, 61, Majadahonda 28222 – Madrid.

Furthermore, you have the right to:

revoke the consent given: If the processing is legitimised by such consent, you have the right to revoke the same.

file a claim: You can address any concerns to the Data Protection Officer and are entitled to file a complaint with the Spanish Data Protection Authority (AEPD).

If you receive Social Security benefits and go to our administrative or healthcare centres:

We acquire the data directly from you in our administrative and healthcare centres, and in admission locations and provision managers, or digitally when you provide your data in any of the forms.

From the General Social Security Treasury, the National Social Security Institute and Public Health Services.

From the companies or employment agencies responsible for managing human resources, when said parties fill in the healthcare application form, or report on how the accident happened, if it is a work-related accident, or on the fact that a work-related accident has not happened, as well as on the medical services that provide you with assistance, where applicable.

Equally, your data will be obtained from your employer or the individual appointed by your employer if information is received about the presence of specific substances or agents in your job if you might be affected by a potential work-related illness.

Similarly, data may be requested from your company, when it is necessary to know the work centre you are registered with to prepare the relevant statistical reports on accidents at specific work centres to organise our preventive activities.

If you are not a social security beneficiary and we attend to you at one of our healthcare facilities:

Data will also be requested from you, or your relatives or companions when you access our administrative and healthcare centres.

FREMAP, MUTUAL SOCIETY No. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE, with registered office in Carretera de Pozuelo No. 61, 28222 Majadahonda (Madrid). Contact us by postal mail at the aforementioned address or by email at the address derechos_arco@fremap.es.

The Data Protection Officer is the person responsible for safeguarding your privacy in our company. If you need to contact the Data Protection Officer, you can do so at dpd@fremap.es or by sending a letter to the aforementioned address, with the reference "Data Protection Officer".

The personal data that will be processed during our activity consists in your identification, full name, DNI/NIE and contact details, and professional address, telephone number and email address.

Please provide this information on data protection to the people in your company participating in the relationship with us (contact persons)

In the case of business or administrative relations with us, in your capacity as a representative of a company or individual businessperson, to maintain our administrative or contractual relationship.

In the case of contact persons for a supplier company, associated company or associated individual businessperson, or someone with RED authorisation, your data will be processed to maintain the relationship with the individual businessperson on behalf of the person acting, and to comply with legal and contractual obligations.

The data will be stored for the time required to meet the purpose for which it was collected, to determine the possible liabilities and to attend to the claim against the company, which could occur at a future date.

In any case, the data will need to be stored for the time needed for FREMAP to carry out any legal or administrative actions derived from the account audits and compliance stipulated in article 98.2 of Royal Legislative Decree 8/2015, of 30 October, which approves the Amended Text on the General Social Security Act.

The provisions of Royal Decree 1993/1995, of 7 December, which approves the Regulation on the Collaboration of Mutual Companies, will be applicable, along with those of Article 1964 of the Civil Coe.

If you have a business or administrative relationship with us, in your quality as a representative of a company or individual businessperson, we are legally authorised by virtue of article 6.1 b) and c) of Regulation (EU) 2016/679 on General Data Protection, whereby this is needed to comply with legal and contractual obligations, and article 6.1 f), whereby the processing is needed to satisfy the legitimate interests of FREMAP.

In the case of contact persons for a supplier company, an associated company or an individual associated businessperson, we are legally authorised by virtue of article 6.1 b), c) and f) of Regulation (EU) 2016/679 on General Data Protection, whereby this is necessary for the execution of a contract, application of pre-contractual measures at the request of the data subject, or to comply with legal obligations and legitimate interests.

You are obliged to provide your data or consent to the processing of your data as this is required to formalise and maintain the relationship with you or with the company you represent, or through which you are acting, as it would not be possible to attend to you correctly otherwise.

Your personal data are processed at our company. To the extent stipulated by Law, we can transfer your data to recipients external to the mutual company. These recipients may include service providers (who, pursuant to contracts awarded, provide services including the processing of personal data) and public authorities, inasmuch as we are required to disclose it by virtue of a legal obligation.

We shall not, by any means, internationally transfer your data to third-party countries or to international organisations.

Right of access: The right to obtain confirmation as to whether FREMAP, MUTUAL SOCIETY NO. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE is, or is not processing personal data that concerns you and, in this case, to access that data.

Right of rectification: The right to request the amendment or rectification of your data if they are inaccurate.

Right of erasure: The right to request that your data be deleted or removed if it has been processed unlawfully, if the reason for processing or collecting it no longer exists, when you revoke your consent or object to your data being processed or if it must be deleted to comply with a legal obligation.

Right of opposition: The right to object, at any time and for reasons related to your specific situation, to personal data that concerns you being processed on the grounds of public interest or the legitimate interest of the data controller or a third party.

Right of limitation of the processing: The right to restrict the processing of your data, if you contest its accuracy, if it is being processed unlawfully, if your personal data is no longer needed for the purpose it was originally being processed for, or if you have exercised your right to object to the processing of your data.

Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly-used format that can be digitally read, and to send it to another data controller, provided this is technically possible.

The right not to be subject to individual automated decisions: The right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.

To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

• identification data,
• a copy of your National Identity Card (DNI) or another official document that confirms your identity
• the claim specifying the request,
• address for notification purposes,
• date, and requester's signature.

If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

• Postal mail: Carretera de Pozuelo, 61, Majadahonda 28222 – Madrid.
• E-mail: derechos_arco@fremap.es

Similarly, you may also contact the Data Protection Officer, by:

• E-mail: dpd@fremap.es

Furthermore, you have the right to:

revoke the consent given: If the processing is legitimised by such consent, you have the right to revoke the same.

file a claim: You can address any concerns to the Data Protection Officer and are entitled to file a complaint with the Spanish Data Protection Authority (AEPD).

If you have a business relationship with us, directly from you when you provide your information before entering into a contract. If you have an administrative relationship with us, in your capacity as representative of a company, when you fill in the association application form.

If you have an administrative relationship with us, in your capacity as an individual businessperson, from Social Security when you register with the Special Scheme for Self-Employed Workers.

If you are the contact person for a provider company, mutual company or individual businessperson, the data is provided by the company you represent or are acting through. If you are an authorised RED agent for a mutual insurance partner company or are self-employed and affiliated to the mutual insurance company, your data will be supplied to us by the Social Security General Treasury.

FREMAP, MUTUAL SOCIETY No. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE, with registered office in Carretera de Pozuelo No. 61, 28222 Majadahonda (Madrid). Contact us by postal mail at the aforementioned address or by email at the address derechos_arco@fremap.es.

The Data Protection Officer is the person responsible for safeguarding your privacy in our company. If you need to contact the Data Protection Officer, you can do so at dpd@fremap.es or by sending a letter to the aforementioned address, with the reference "Data Protection Officer".

Identification and contact data, personal characteristics, academic and professional data, image, employment details and health data (psychological data obtained from psycho-technical test).

The main purposes is for the management of personnel selection processes, evaluation of personal aspects (profiling), and provision of jobs in which it participates. We inform you that FREMAP will carry out automated processing of the information obtained from the psycho-technical test (profiling), if you give your consent to this, given that FREMAP needs to obtain information that allows it to decide on the suitability and integration of the person with the job that he/she is going to perform. This psycho-technical test assesses professional skills and personality factors which are related to professional and/or vocational training aspects (aptitude test).

Under no circumstances will the result of the psycho-technical test taken be used on its own to rule you out of the selection process in which you have been included, as it is only one of the various factors to be considered. In order to select or reject you as a candidate, FREMAP will take into account other factors, such as personal interviews, previous experience, evaluation of the probationary period and the results of the exams you take. Factors on the basis of which FREMAP will decide whether to select or reject you for the vacancy offered (decision criteria or logic applied).

The decision on your selection or rejection as a candidate will be taken by the staff in charge of the selection process and will never be a decision based solely on the automated processing of your data.

Furthermore, for video surveillance and access control in facilities for security purposes.

The data will be kept during the time necessary to comply with the purpose for which it was collected and to determine the possible responsibilities that could result from this purpose and from the processing of the data and while the interested party does not exercise his/her right of erasure.

The processing of your personal data for the management of personnel selection processes, and the provision of jobs in which you participate, is necessary for the application of pre-contractual measures (article 6.1.b) Regulation (EU) 2016/679, General Data Protection Regulation).

With regard to special categories of data (health), such as data obtained from the psycho-technical test carried out on you for the assessment of personal aspects, the processing of your data is subject to your consent, whereby these data will only be processed if you expressly give your consent to this (Article 9(1)(a) General Data Protection Regulation (EU) 2016/679 in conjunction with Article 22(4) of the aforementioned Regulation).

The personal data collected for video surveillance and access control to the facilities are based on the legitimate interests of FREMAP, such as guaranteeing the security of persons, goods and facilities (article 6.1. f) General Data Protection Regulation (EU) 2016/679: Legislative Royal Decree 2/2015, of 23 October, which approves the rewritten text of the Workers' Statute Law.

You are obliged to provide us with your details if you wish to take part in the selection process for a vacant position in the organisation, as these are necessary for the management of your application and the development of the selection process in which you take part. If you do not provide your data, we will not be able to manage your participation in the selection processes.

Your data will not be transferred to third parties, other than transportation companies, travel agencies and hotel establishments, for trips made during the selection processes in which you participate and which are necessary.

We will not make any international transfers of data to third countries or international organisations.

Right of access: The right to obtain confirmation as to whether FREMAP, MUTUAL SOCIETY NO. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE is, or is not processing personal data that concerns you and, in this case, to access that data.

Right of rectification: The right to request the amendment or rectification of your data if they are inaccurate.

Right of erasure: The right to request that your data be deleted or removed if it has been processed unlawfully, if the reason for processing or collecting it no longer exists, when you revoke your consent or object to your data being processed or if it must be deleted to comply with a legal obligation.

Right of opposition: The right to object, at any time and for reasons related to your specific situation, to personal data that concerns you being processed on the grounds of public interest or the legitimate interest of the data controller or a third party.

Right of limitation of the processing: The right to restrict the processing of your data, if you contest its accuracy, if it is being processed unlawfully, if your personal data is no longer needed for the purpose it was originally being processed for, or if you have exercised your right to object to the processing of your data.

Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly-used format that can be digitally read, and to send it to another data controller, provided this is technically possible.

The right not to be subject to individual automated decisions: The right to object to being the subject of decisions based on the automated processing of personal data, including setting up profiles, when this decision can affect you legally or significantly. You have the possibility to express your opinion, to challenge the decision, and to request the intervention of a person in the process to review the decision taken.

To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

• identification data,
• a copy of your National Identity Card (DNI) or another official document that confirms your identity
• the claim specifying the request,
• address for notification purposes,
• date, and requester's signature.

If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

• Postal mail: Carretera de Pozuelo, 61, Majadahonda 28222 – Madrid.
• E-mail: derechos_arco@fremap.es

Similarly, you may also contact the Data Protection Officer, by:

• E-mail: dpd@fremap.es

Furthermore, you have the right to:

revoke the consent given: If the processing is legitimised by such consent, you have the right to revoke the same.

file a claim: You can address any concerns to the Data Protection Officer and are entitled to file a complaint with the Spanish Data Protection Authority (AEPD).

Directly from you when you send your CV to FREMAP, when you offer your candidacy through the website, or subsequently when you provide your data in the selection interview, psycho-technical tests, group dynamics or exams carried out, and from employment companies or job boards you may be subscribed to.

FREMAP, MUTUAL SOCIETY No. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE, with registered office in Carretera de Pozuelo No. 61, 28222 Majadahonda (Madrid). Contact us by postal mail at the aforementioned address or by email at the address derechos_arco@fremap.es.

The Data Protection Officer is the person in charge of safeguarding your privacy at our company. If you need to contact the Data Protection Officer, you can do so at dpd@fremap.es or by sending a letter to the aforementioned address, with the reference "Data Protection Officer".

Identification and contact details, personal characteristics, academic and professional data, employment details, image and economic, financial and insurance details.

Your personal data is processed to manage the internship or services provided in the company.

Your details will be stored for the time needed to comply with the purpose for which they were collected, and, where relevant, to attend to the liabilities that may be derived from this purpose and data processing.

We are legally authorised to manage your data as it is needed to execute a contract and comply with legal obligations (article 6.1 b) and c) of Regulation 2016/679 on General Data Protection).

You are obliged to provide your data in order to manage the internship or service provisions and to comply with the contractual or collaborative relationship.

Your personal data will be disclosed to the educational centre you belong to, or to the company with which you have a labour or trade relationship.

Furthermore, your data may be communicated to the occupational authority when this is requested in compliance with the obligations of the Mutual Company.

We shall not, by any means, internationally transfer your data to third-party countries or to international organisations.

Right of access: The right to obtain confirmation as to whether FREMAP, MUTUAL SOCIETY NO. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE is, or is not processing personal data that concerns you and, in this case, to access that data.

Right of rectification: The right to request the amendment or rectification of your data if they are inaccurate.

Right of erasure: The right to request that your data be deleted or removed if it has been processed unlawfully, if the reason for processing or collecting it no longer exists, when you revoke your consent or object to your data being processed or if it must be deleted to comply with a legal obligation.

Right of opposition: The right to object, at any time and for reasons related to your specific situation, to personal data that concerns you being processed on the grounds of public interest or the legitimate interest of the data controller or a third party.

Right of limitation of the processing: The right to restrict the processing of your data, if you contest its accuracy, if it is being processed unlawfully, if your personal data is no longer needed for the purpose it was originally being processed for, or if you have exercised your right to object to the processing of your data.

Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly-used format that can be digitally read, and to send it to another data controller, provided this is technically possible.

The right not to be subject to individual automated decisions: The right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.

To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

• identification data,
• a copy of your National Identity Card (DNI) or another official document that confirms your identity
• the claim specifying the request,
• address for notification purposes,
• date, and requester's signature.

If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

• Postal mail: Carretera de Pozuelo, 61, Majadahonda 28222 – Madrid.
• E-mail: derechos_arco@fremap.es

Similarly, you may also contact the Data Protection Officer, by:

• E-mail: dpd@fremap.es

Furthermore, you have the right to:

revoke the consent given: If the processing is legitimised by such consent, you have the right to revoke the same.

file a claim: You can address any concerns to the Data Protection Officer and are entitled to file a complaint with the Spanish Data Protection Authority (AEPD).

If you are a student taking an internship, your details are provided to us by the educational centre you are part of.

If you are an external worker providing services to FREMAP, your data is provided to us by the company with which you have a labour or trade relationship, a service provider to FREMAP.

FREMAP, MUTUAL SOCIETY No. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE, with registered office in Carretera de Pozuelo No. 61, 28222 Majadahonda (Madrid). Contact us by postal mail at the aforementioned address or by email at the address derechos_arco@fremap.es.

The Data Protection Officer is the person in charge of safeguarding your privacy at our company. If you need to contact the Data Protection Officer, you can do so at dpd@fremap.es or by sending a letter to the aforementioned address, with the reference "Data Protection Officer".

The personal details that will be processed to manage the governing and participation bodies are your identification details (full name, DNI/NIE), contact details (address, telephone number and email address) and professional details.

Your details will be processed for the administrative management of governing and administration bodies of the Mutual Company.

The data will be stored for the time required to meet the purpose for which it was collected, to determine the possible liabilities and to attend to the claim against the company, which could occur at a future date.

In any case, the data will need to be stored for the time needed for FREMAP to carry out any legal or administrative actions derived from the account audits and compliance stipulated in article 98.2 of Royal Legislative Decree 8/2015, of 30 October, which approves the Amended Text on the General Social Security Act.

The provisions of Royal Decree 1993/1995, of 7 December, which approves the Regulation on the Collaboration of Mutual Companies, will be applicable, along with those of Article 1964 of the Civil Coe.

Our legal ground for processing your data is based on compliance with legal obligations attributed to the Mutual Company, stipulated in article 6.1 c) of Regulation (EU) 2016/679 on General Data Protection.

You are obliged to provide your data as it is required for the administrative management of governing and administration bodies of the Mutual Company. Otherwise, your participation in governing and participation bodies of the Mutual Company would not be possible.

Personal data processing also takes place in our company. To the extent stipulated by Law, we can transfer your data to recipients external to the mutual company. These recipients may include service providers (who, pursuant to contracts awarded, provide services including the processing of personal data) and public authorities, inasmuch as we are required to disclose them by virtue of a legal obligation.

We shall not, by any means, internationally transfer your data to third-party countries or to international organisations.

Right of access: The right to obtain confirmation as to whether FREMAP, MUTUAL SOCIETY NO. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE is, or is not processing personal data that concerns you and, in this case, to access that data.

Right of rectification: The right to request the amendment or rectification of your data if they are inaccurate.

Right of erasure: The right to request that your data be deleted or removed if it has been processed unlawfully, if the reason for processing or collecting it no longer exists, when you revoke your consent or object to your data being processed or if it must be deleted to comply with a legal obligation.

Right of opposition: The right to object, at any time and for reasons related to your specific situation, to personal data that concerns you being processed on the grounds of public interest or the legitimate interest of the data controller or a third party.

Right of limitation of the processing: The right to restrict the processing of your data, if you contest its accuracy, if it is being processed unlawfully, if your personal data is no longer needed for the purpose it was originally being processed for, or if you have exercised your right to object to the processing of your data.

Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly-used format that can be digitally read, and to send it to another data controller, provided this is technically possible.

The right not to be subject to individual automated decisions: The right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.

To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

• identification data,
• a copy of your National Identity Card (DNI) or another official document that confirms your identity
• the claim specifying the request,
• address for notification purposes,
• date, and requester's signature.

If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

• Postal mail: Carretera de Pozuelo, 61, Majadahonda 28222 – Madrid.
• E-mail: derechos_arco@fremap.es

Similarly, you may also contact the Data Protection Officer, by:

• E-mail: dpd@fremap.es

Furthermore, you have the right to:

revoke the consent given: If the processing is legitimised by such consent, you have the right to revoke the same.

file a claim: You can address any concerns to the Data Protection Officer and are entitled to file a complaint with the Spanish Data Protection Authority (AEPD).

You provide your details yourself when you apply to form part of a governing and participation body of the Mutual Company.

FREMAP, MUTUA COLABORADORA CON LA SEGURIDAD SOCIAL No. 61, with registered office at Carretera de Pozuelo No. 61, 28220 Majadahonda (Madrid). Contact us by postal mail at the aforementioned address or by email at the address derechos_arco@fremap.es.

The Data Protection Officer is the person in charge of safeguarding your privacy at our company. If you need to contact the Data Protection Officer, you can do so at dpd@fremap.es or by sending a letter to the aforementioned address, with the reference "Data Protection Officer".

In the development of its activity, FREMAP organises events, conferences, courses, seminars, webinars and interviews in which identification data (name/ID), as well as biometric data (image and voice) of the participants, and the company to which they belong or which they represent, are taken and recorded.

It is also possible to capture and record images and the voice of the people participating in the events, conferences, courses, seminars, webinars and interviews.

The data collected from participants in events, conferences, courses, seminars, webinars and interviews organised by FREMAP will be used to control the participants in these events and to publicise the activities carried out by FREMAP, through institutional documentation, web applications and social media, as well as, where appropriate, to justify the development of these actions before official bodies or third parties that must receive them by virtue of legal obligation.

The personal data of participants in events, conferences, courses, seminars, webinars and interviews held by the Mutual Society in the course of its activities will be kept for the time required for their dissemination in institutional documentation, web applications and social media and for a period of five years from the end of the event or until the statute of limitations expires on any actions that may be brought to hold the Mutual Society liable.

The legal basis for the processing of your data is your consent, in accordance with the provisions in Article 6.1 a) of the General Data Protection Regulation (EU) 2016/679, which is why your data will be processed only if you have expressly stated that you consent to this taking place.

You do not have any obligation to provide your data. Participation in events, conferences, courses, seminars, webinars and interviews organised by FREMAP to publicise its activities is voluntary.

If you do not provide your data and expressly consent to data processing, you will not be able to participate in events, conferences, courses, seminars, webinars and interviews, in order to prevent your image or voice from being recorded.

The data will be disclosed via institutional documentation, web applications and social networks, which is why it will be passed on to third parties interested in FREMAP's activities, as well as those recipients legally required to receive them.

We shall not, by any means, internationally transfer your data to third-party countries or to international organisations.

Right of access:The right to obtain confirmation as to whether FREMAP, Mutual Society no. 61 Collaborating with the Social Security Institute is or is not processing personal data that concern you and, in this case, to access the same.

Right of rectification: The right to request the amendment or rectification of your data if they are inaccurate.

Right of erasure: The right to request that your data be deleted or removed if it has been processed unlawfully, if the reason for processing or collecting it no longer exists, when you revoke your consent or object to your data being processed or if it must be deleted to comply with a legal obligation.

Right of opposition: The right to object, at any time and for reasons related to your specific situation, to personal data that concerns you being processed on the grounds of public interest or the legitimate interest of the data controller or a third party.

Right of limitation of the processing: The right to restrict the processing of your data, if you contest its accuracy, if it is being processed unlawfully, if your personal data is no longer needed for the purpose it was originally being processed for, or if you have exercised your right to object to the processing of your data.

Right of portability of the data:The right to receive the personal data that concerns you in a structured, commonly-used format that can be digitally read, and to send it to another data controller, provided this is technically possible.

The right not to be subject to individual automated decisions: : The right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.

To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

• identification data,
• a copy of your National Identity Card (DNI) or another official document that confirms your identity
• the claim specifying the request,
• address for notification purposes,
• date, and requester's signature.

If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

• Postal mail: Carretera de Pozuelo, 61, Majadahonda 28222 – Madrid.
• E-mail: derechos_arco@fremap.es

Similarly, you may also contact the Data Protection Officer, by:

• E-mail: dpd@fremap.es

Furthermore, you have the right to:

Revoke the consent you have provided: : If you have given your consent for your data to be processed in this way, you have the right to revoke it.

Lodge a claim:You can address any concerns to the Data Protection Officer and are entitled to file a complaint with the Spanish Data Protection Authority (AEPD).

From you, when you register, or participate in our events, seminars, courses, seminars, Teams-webinars, interviews and videos.

FREMAP, MUTUAL SOCIETY No. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE, with registered office in Carretera de Pozuelo No. 61, 28222 Majadahonda (Madrid). Contact us by postal mail at the aforementioned address or by email at the address derechos_arco@fremap.es.

The Data Protection Officer is the person in charge of safeguarding your privacy at our company. If you need to contact the Data Protection Officer, you can do so at dpd@fremap.es or by sending a letter to the aforementioned address, with the reference "Data Protection Officer".

If you file a claim or a complaint, we will process your identification and contact details, full name, National ID No. or passport, address, email address, telephone number, signature and data pertaining to the complaint or claim in question.

Your personal data will be used to attend to and properly manage your complaint or claim.

If your claim or complaint is related with our collaboration with the protective action of Social Security, we will store the data for as long as we provide the healthcare and manage the provisions derived from your condition as a recipient of Social Security protective action, and, in any case, for the statutes of limitation of actions that may be incurred against the Mutual Company.

If you receive Social Security benefits and we attend to you in our healthcare or administrative centres, we are legally authorised by virtue of article 9.2.b) and f) of Regulation (EU) 2016/679 on General Data Protection, given that it is necessary for compliance with obligations and exercising specific rights in the area of social security and protection, and we are authorised to process the rest of your data by virtue of article 6.1.c) of said Regulation, as we are obliged to comply with Royal Decree 8/2015, of 30 October, which approves the amended text of the General Social Security Act and Royal Decree 1993/1995, of 7 December, on the Collaboration of Mutual Companies with Social Security.

You are obliged to provide your data when filing your claim or complaint, as failure to do so prevents us from being able to process it.

The Ministry of Employment and Social Security and Authorities and Entities that comprise Social Security to correctly control the performance of our collaboration with said Authorities, in compliance with Social Security regulations, Royal Decree 8/2015, of 30 October, which approves the amended text of the General Social Security Act, and Royal Decree 1993/1995, of 7 December, on the Collaboration of Mutual Companies with Social Security, and the data will be transferred or disclosed to any recipients that must receive them by virtue of a legal obligation.

We shall not, by any means, internationally transfer your data to third-party countries or to international organisations.

Right of access: The right to obtain confirmation as to whether FREMAP, MUTUAL SOCIETY NO. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE is, or is not processing personal data that concerns you and, in this case, to access that data.

Right of rectification: The right to request the amendment or rectification of your data if they are inaccurate.

Right of erasure: The right to request that your data be deleted or removed if it has been processed unlawfully, if the reason for processing or collecting it no longer exists, when you revoke your consent or object to your data being processed or if it must be deleted to comply with a legal obligation.

Right of opposition: The right to object, at any time and for reasons related to your specific situation, to personal data that concerns you being processed on the grounds of public interest or the legitimate interest of the data controller or a third party.

Right of limitation of the processing: The right to restrict the processing of your data, if you contest its accuracy, if it is being processed unlawfully, if your personal data is no longer needed for the purpose it was originally being processed for, or if you have exercised your right to object to the processing of your data.

Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly-used format that can be digitally read, and to send it to another data controller, provided this is technically possible.

The right not to be subject to individual automated decisions: The right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.

To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

• identification data,
• a copy of your National Identity Card (DNI) or another official document that confirms your identity
• the claim specifying the request,
• address for notification purposes,
• date, and requester's signature.

If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

• Postal mail: Carretera de Pozuelo, 61, Majadahonda 28222 – Madrid.
• E-mail: derechos_arco@fremap.es

Similarly, you may also contact the Data Protection Officer, by:

• E-mail: dpd@fremap.es

Furthermore, you have the right to:

Revoke the consent you have provided: If you have given your consent for your data to be processed in this way, you have the right to revoke it.

Lodge a claim: You can address any concerns to the Data Protection Officer and are entitled to file a complaint with the Spanish Data Protection Authority (AEPD).

Directly from you when you come to any of our administrative and healthcare centres and file your claim or complaint.

FREMAP, MUTUAL SOCIETY No. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE, with registered office on Carretera de Pozuelo No. 61, 28222 Majadahonda (Madrid).

The Data Protection Officer is the person in charge of safeguarding your privacy at our company. If you need to contact the Data Protection Officer, you can do so at dpd@fremap.es or by sending a letter to the aforementioned address, with the reference "Data Protection Officer".

Your identification details (name and surnames, ID/NIE/Passport, electronic signature, Social Security affiliation number), contact details (postal or electronic address and telephone number), personal characteristics (date and place of birth, age, sex, nationality), professional and employment details.

For the management and control of communications received, requests for access and use of web applications owned by FREMAP that are carried out and for the resolution of any technical incidents that may occur.

The data will be kept for the time necessary to deal with your communication or request, or resolve the reported incident and, in all cases, for the period necessary to deal with the claim processes that may be presented against the company.

We are entitled to process your personal data because we are permitted by Article 6.1 c) and f) and Article 9.2 a) of Regulation (EU) 2016/679, on the General Protection of Personal Data, as it is necessary to process this information in order to comply with data protection obligations, specifically relating to attention to the rights of the interested parties, in accordance with Articles 12 to 22 of the aforementioned Regulations and Articles 12 to 18 of Organic Law 3/2018, of 5 December, on Personal Data Protection and guaranteeing digital rights. Furthermore, its processing is necessary to serve the mutual legitimate interests of the parties, including FREMAP's interest in providing a fast and simple remote service for interested users and the User's interest in making fast and secure communications or accessing voluntary and free services provided by FREMAP.

You are obliged to provide your data, as otherwise the communication you send us or the request for access to the applications owned by FREMAP that you make may not be attended to, and any technical incidents that have occurred may not be resolved.

No data will be reported to third parties except in cases where it is necessary to comply with a legal obligation. International transfers of personal data will not be carried out, unless legally required.

• Right of access: The right to obtain confirmation as to whether FREMAP, MUTUAL SOCIETY NO. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE is, or is not processing personal data that concerns you and, in this case, to access that data.
• Right of rectification: The right to request that your data be amended or corrected if it is inaccurate.
• Right of erasure: The right to request that your data be deleted or removed if it has been processed unlawfully, if the reason for processing or collecting it no longer exists, when you revoke your consent or object to your data being processed or if it must be deleted to comply with a legal obligation.
• Right of opposition: The right to object, at any time and for reasons related to your specific situation, to personal data that concerns you being processed on the grounds of public interest or the legitimate interest of the data controller or a third party.
• Right of limitation of the processing: The right to restrict the processing of your data, if you contest its accuracy, if it is being processed unlawfully, if your personal data is no longer needed for the purpose it was originally being processed for, or if you have exercised your right to object to the processing of your data.
• Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly-used format that can be digitally read, and to send it to another data controller, provided this is technically possible.
• The right not to be subject to individual automated decisions: The right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.

You may exercise these rights, in writing, together with the copy of a document accrediting your identity, before the Data Protection Officer, whose contact details we have included in the question on this figure.

In addition, you have the right to:

• Revoke the consent you have provided: If you have given your consent for your data to be processed in this way, you have the right to revoke it.
• Lodge a claim: You can address any concerns to the Data Protection Officer and are entitled to file a complaint with the Spanish Data Protection Authority (AEPD).

The only data that will be processed is that which you provide us with in communications addressed to us or on completed forms.

FREMAP, MUTUAL SOCIETY No. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE, with registered office in Carretera de Pozuelo No. 61, 28222 Majadahonda (Madrid). Contact us by postal mail at the aforementioned address or by email at the address derechos_arco@fremap.es.

The Data Protection Officer is the person in charge of safeguarding security in our company. If you need to contact the Data Protection Officer, you can do so at dpd@fremap.es or by sending a letter to the aforementioned address, with the reference "Data Protection Officer".

If you visit our administrative or healthcare centres and we record your image or collect your data at reception or at an access control point, the data relating to your image, full name, National ID No. and organisation or company you belong to will be processed.

If you access the internet via the WiFi connection provided by FREMAP, the data relating to your phone number, email address and IP address will be processed.

To ensure the safety of people, goods and facilities through video surveillance and visit controls.

To identify access to the WiFi network, if it is known to have been fraudulently used.

If your image is recorded by video camera, the data will be removed one month after it is recorded by deleting the image, except for recordings related to criminal or administrative offences with regard to public safety, an ongoing criminal investigation or an open legal or administrative proceeding. If your data is collected at reception or at an access control point at our facilities, it will be erased one month after the date it was collected.

In the case of WiFi network access data, the data will be deleted 90 days after it is collected, which is the period deemed necessary to detect possible irregularities.

Our legal capacity to process identification data is based on the legitimate interest provided for in article 6.1.f) of General Data Protection Regulation (EU) 2016/679 to process images using photographic cameras or video cameras and to control physical access in order to safeguard the security of people, goods and facilities, as their interests or rights and fundamental liberties do not prevail over the aforementioned interest.

Our legal capacity to process identification data is based on the consent freely given by the data subject who wishes to use the wifi network provided to him/her (article 6.1.a) of General Data Protection Regulation (EU) 2016/679).

You are obliged to provide your data because we must protect people, goods and facilities. If you do not provide this data, you may not be able to access our facilities for security reasons.

Similarly, if you wish to use the WiFi network provided, you must identify yourself in order to register your access for security reasons.

To Security Forces and Agencies and the Law Courts if criminal or administrative offences have been committed.

We will not make any international transfers of data to third countries or international organisations.

Right of access: The right to obtain confirmation as to whether FREMAP, MUTUAL SOCIETY NO. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE is, or is not processing personal data that concerns you and, in this case, to access that data.

Right of rectification: The right to request that your data be amended or corrected if it is inaccurate.

Right of erasure: The right to request that your data be deleted or removed if it has been processed unlawfully, if the reason for processing or collecting it no longer exists, when you revoke your consent or object to your data being processed or if it must be deleted to comply with a legal obligation.

Right of opposition: The right to object, at any time and for reasons related to your specific situation, to personal data that concerns you being processed on the grounds of public interest or the legitimate interest of the data controller or a third party.

Right of limitation of the processing:The right to restrict the processing of your data, if you contest its accuracy, if it is being processed unlawfully, if your personal data is no longer needed for the purpose it was originally being processed for, or if you have exercised your right to object to the processing of your data.

Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly-used format that can be digitally read, and to transmit this data to another controller, provided that it is technically possible.

The right not to be subject to individual automated decisions: The right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.

To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

• identification data,
• a copy of your National Identity Card (DNI) or another official document that confirms your identity
• the claim specifying the request,
• address for notification purposes,
• date, and requester's signature.

If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

• Postal mail: Carretera de Pozuelo, 61, Majadahonda 28222 – Madrid.
• E-mail: derechos_arco@fremap.es

Similarly, you may also contact the Data Protection Officer, by:

• E-mail: dpd@fremap.es

Furthermore, you have the right to:

Revoke the consent you have provided: If you have given your consent for your data to be processed in this way, you have the right to revoke it.

Lodge a claim: You can address any concerns to the Data Protection Officer and are entitled to file a complaint with the Spanish Data Protection Authority (AEPD).

Directly from you when you come to our administrative or healthcare centres and your image is recorded or your data is collected at reception or at an access control point.

From you when you access FREMAP's WiFi network via your device.

FREMAP, Collaborative Mutual Society with Social Security Institute No. 61, with registered office at Carretera de Pozuelo No. 61, 28222, Majadahonda (MADRID).
The Data Protection Officer is the person in charge of safeguarding your privacy at our company.

If you need to contact the Data Protection Officer, you can do so at dpd@fremap.es or by sending a written letter to the aforementioned address, including the reference "Data Protection Area".

Your identification details (name and surname) and contact details (postal or electronic address and telephone number), as well as the name and contact details of the persons included in the application for the exercise of your rights.

To comply with your right to the protection of personal data. In accordance with this, your application will be recorded and processed, making any communications that may be required according to the form of contact provided.

Additionally, if necessary, your data will be processed in order to be able to accredit the exercised right to the Control Authority.

The data will be kept for the time necessary to deal with your request and in any case for the time necessary to deal with any claims that may be filed against the entity.

We are entitled to process your personal data because we are permitted by Article 6.1 c) of Regulation (EU) 2016/679, General Protection of Personal Data, as it is necessary to process this information in order to comply with data protection obligations, specifically in relation to the attention to the rights of the interested parties, in accordance with Articles 12 to 22 of the aforementioned Regulations and Articles 12 to 18 of Organic Law 3/2018, of 5 December, on Personal Data Protection and guaranteeing digital rights.

You are obliged to provide your details, otherwise the exercised right may not be respected.

No data will be reported to third parties except in cases where it is necessary to comply with a legal obligation. In this regard, your data may be transferred to the Control Authority (Spanish Data Protection Agency), the Management and Guardianship Body of the Mutual Society, the Ministry of Employment and Social Security, its subsidiary bodies, courts and tribunals upon request or in defence of legal or administrative proceedings, and security forces and bodies in the event of civil, criminal or administrative offences (Article 6.1.c) and f) of Regulation (EU) 2016/679 on General Data Protection).

International transfers of personal data will not be carried out, unless legally required.

Right of access: The right to obtain confirmation as to whether FREMAP, MUTUAL SOCIETY NO. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE is, or is not processing personal data that concerns you and, in this case, to access that data.

Right of rectification: The right to request the amendment or rectification of your data if they are inaccurate.

Right of erasure: The right to request that your data be deleted or removed if it has been processed unlawfully, if the reason for processing or collecting it no longer exists, when you revoke your consent or object to your data being processed or if it must be deleted to comply with a legal obligation.

Right of opposition: The right to object, at any time and for reasons related to your specific situation, to personal data that concerns you being processed on the grounds of public interest or the legitimate interest of the data controller or a third party.

Right of limitation of the processing: The right to restrict the processing of your data, if you contest its accuracy, if it is being processed unlawfully, if your personal data is no longer needed for the purpose it was originally being processed for, or if you have exercised your right to object to the processing of your data.

Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly-used format that can be digitally read, and to send it to another data controller, provided this is technically possible.

The right not to be subject to individual automated decisions: The right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.

You may exercise these rights, in writing, together with the copy of a document accrediting your identity, before the Data Protection Officer, whose contact details we have included in the question on this figure.

Furthermore, you have the right to:

Revoke the consent you have provided: If the processing is legitimised by such consent, you have the right to revoke the same.

Lodge a claim: You can address any concerns to the Data Protection Officer and are entitled to file a complaint with the Spanish Data Protection Authority (AEPD).

Of you, yourself, when you ask us in writing to exercise a right to the protection of personal data (access, rectification, erasure, objection, restriction of processing, portability and the right not to be subject to automated individual decisions).

FREMAP, MUTUAL SOCIETY No. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE, with registered office in Carretera de Pozuelo No. 61, 28222 Majadahonda (Madrid). Contact us by postal mail at the aforementioned address or by email at the address derechos_arco@fremap.es.

The Data Protection Officer is the person in charge of safeguarding your privacy at our company. If you need to contact the Data Protection Officer, you can do so at dpd@fremap.es or by sending a letter to the aforementioned address, with the reference "Data Protection Officer".

The personal data that will be processed for managing a detected security incident will be your identification, full name, DNI/NIE, contact details, address, telephone number and professional email address and professional or employment data, such as your position or role within the company.

To manage security breaches that may occur in the company.

Your details will be stored for as long as needed to manage the detected incident and, in any case, for the statutes of limitation of actions that may be incurred against the Mutual Company.

Because the data processing is needed to meet the Mutual Company's legal obligations (article 6.1.c) of Regulation (EU) 2016/679 on General Data Protection).

You are obliged to provide the information required for the resolution of the incident, as otherwise it would not be possible to resolve it properly or comply with legal obligations attributed to the Mutual Company.

Your data may be communicated to the Spanish Data Protection Agency in compliance with obligations legally attributed by Data Protection regulations, and, if the security incident could represent a high risk to the rights and freedoms of third parties, the implications and the information related thereto will be notified to the data subjects.

To security forces and bodies. Courts and Tribunals in the case of criminal or administrative infractions.

We shall not, by any means, internationally transfer your data to third-party countries or to international organisations.

Right of access: The right to obtain confirmation as to whether FREMAP, MUTUAL SOCIETY NO. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE is, or is not processing personal data that concerns you and, in this case, to access that data.

Right of rectification: The right to request the amendment or rectification of your data if they are inaccurate.

Right of erasure: The right to request that your data be deleted or removed if it has been processed unlawfully, if the reason for processing or collecting it no longer exists, when you revoke your consent or object to your data being processed or if it must be deleted to comply with a legal obligation.

Right of opposition: The right to object, at any time and for reasons related to your specific situation, to personal data that concerns you being processed on the grounds of public interest or the legitimate interest of the data controller or a third party.

Right of limitation of the processing: The right to restrict the processing of your data, if you contest its accuracy, if it is being processed unlawfully, if your personal data is no longer needed for the purpose it was originally being processed for, or if you have exercised your right to object to the processing of your data.

Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly-used format that can be digitally read, and to send it to another data controller, provided this is technically possible.

The right not to be subject to individual automated decisions: The right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.

To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

• identification data,
• a copy of your National Identity Card (DNI) or another official document that confirms your identity
• the claim specifying the request,
• address for notification purposes,
• date, and requester's signature.

If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

• Postal mail: Carretera de Pozuelo, 61, Majadahonda 28222 – Madrid.
• E-mail: derechos_arco@fremap.es

Similarly, you may also contact the Data Protection Officer, by:

• E-mail: dpd@fremap.es

Furthermore, you have the right to:

Revoke the consent you have provided: If you have given your consent for your data to be processed in this way, you have the right to revoke it.

Lodge a claim: You can address any concerns to the Data Protection Officer and are entitled to file a complaint with the Spanish Data Protection Authority (AEPD).

Directly by you, your company or the entity you work for or collaborate with, and from the Social Security Fund.

FREMAP, Collaborative Mutual Society with Social Security Institute No. 61, with registered office at Carretera de Pozuelo No. 61, 28222, Majadahonda (MADRID).

The Data Protection Officer is the person in charge of safeguarding your privacy at our company. If you need to contact the Data Protection Officer, you can do so at dpd@fremap.es or by sending a written letter to the aforementioned address, including the reference "Data Protection Area".

Your identification details (name and surname) and contact details (postal or electronic address and telephone number), as well as the name and contact details of the persons listed in the complaint and the employment details mentioned.

To manage reports received of possible risks or breaches of FREMAP's Catalogue of Prohibited Conduct, within the framework of the Crime Prevention Plan implemented by FREMAP. In accordance with this, your data will be processed in relation to the communications and complaints received through the Communication and Complaints Channel and to open the corresponding investigation file, if necessary.

The data will only be kept in the Communication and Complaints Channel system for as long as it is necessary to decide whether to open an investigation into the facts reported. In any case, three months after the data have been entered, they shall be deleted from the Communication and Complaints Channel system. If their preservation is necessary to continue with the investigation or to determine possible responsibilities and to deal with any claims that may be filed against the entity, they will be dealt with in a different environment by the Regulatory Compliance Committee, the body responsible for the investigation.

We are entitled to process your personal data because we are permitted to do so by Article 6.1 c) of Regulation (EU) 2016/679, General Personal Data Protection Regulation, as it is necessary to process your personal data in order to comply with obligations in the field of criminal prevention, in accordance with the provisions of Article 31 bis of Organic Law 10/1995, of 23 November, of the Criminal Code, after reform by LO 1/2015.

Knowledge of your personal data facilitates the investigation of the reported events, however you are not obliged to provide your data.

No data will be reported to third parties except in cases where it is necessary to comply with a legal obligation. In this regard, your data may be transferred to the Management and Supervisory Body of the Mutual Society, the Ministry of Employment and Social Security, to its dependent bodies, to Courts and Tribunals at the request or in defence of judicial or administrative proceedings, and to Security Forces and Bodies in the event of civil, criminal or administrative offences (article 6.1.c) and f) of the General Data Protection Regulation (EU) 2016/679.

International transfers of personal data will not be carried out, unless legally required.

• Right of access: The right to obtain confirmation as to whether FREMAP, MUTUAL SOCIETY NO. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE is, or is not processing personal data that concerns you and, in this case, to access that data.
• Right of rectification: The right to request that your data be amended or corrected if it is inaccurate.
• Right of erasure: The right to request that your data be deleted or removed if it has been processed unlawfully, if the reason for processing or collecting it no longer exists, when you revoke your consent or object to your data being processed or if it must be deleted to comply with a legal obligation.
• Right of opposition: The right to object, at any time and for reasons related to your specific situation, to personal data that concerns you being processed on the grounds of public interest or the legitimate interest of the data controller or a third party.
• Right of limitation of the processing: The right to restrict the processing of your data, if you contest its accuracy, if it is being processed unlawfully, if your personal data is no longer needed for the purpose it was originally being processed for, or if you have exercised your right to object to the processing of your data.
• Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly-used format that can be digitally read, and to send it to another data controller, provided this is technically possible.
• The right not to be subject to individual automated decisions: The right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.

You may exercise these rights, in writing, together with the copy of a document accrediting your identity, before the Data Protection Officer, whose contact details we have included in the question on this figure.

In addition, you have the right to:

• Revoke the consent you have provided: If you have given your consent for your data to be processed in this way, you have the right to revoke it.
• Lodge a claim: In any case, you may contact the Data Protection Officer, and you also have the right to lodge a claim with the Spanish Data Protection Authority (AEPD).

Of yourself when you inform us of them when you send the complaint. They may also arise from a complaint made by a third party when expressly mentioned.

FREMAP, Collaborative Mutual Society with Social Security Institute No. 61, with registered office at Carretera de Pozuelo No. 61, 28222, Majadahonda (MADRID).

The Data Protection Officer is the person in charge of safeguarding your privacy at our company. If you need to contact the Data Protection Officer, you can do so at dpd@fremap.es or by sending a written letter to the aforementioned address, including the reference "Data Protection Area".

Your identification data (name and surname) and health data (body temperature, illnesses or disorders that may be symptoms of SARS-CoV-2 infection and serological or test results that are prescribed or provided and that allow us to determine whether the disease has been contracted and is in a contagious period).

For the prevention and control of SARS-CoV-2 infection, in accordance with the recommendations of the Health Authorities; Protection of the health of people who carry out their functions or provide services in the centre; And compliance with Occupational Risk Prevention obligations.

The data collected will be recorded in your medical history where it will be stored indefinitely, taking into account the healthcare purpose of the History.

We are entitled to process your personal data because we are permitted by Article 6.1 e) of Regulation (EU) 2016/679, General Data Protection Regulation, as it is necessary to process this information in order to comply with the general interests of public health, in relation to Article 9.2 h) of the aforementioned Regulation.

In the event that you provide services to the Mutual Society, this processing is necessary in order to comply with obligations related to the health and safety of workers, being entitled to process your data as stated in articles 6.1 c) and 9.2 b) of Regulation (EU) 2016/679 on Personal Data Protection.

Knowledge of your state of health is necessary in order to adopt the appropriate measures for the prevention and control of the SARS-CoV-2 infection, so you must provide the information that permits us to know your medical situation, collaborating in the prevention and control of the pandemic.

No data will be reported to third parties except in cases where it is necessary to comply with a legal obligation. In this regard, your data may be transferred to the Public Health Services and Health Authorities and Services with responsibilities in the area of Occupational Risk Prevention.

International transfers of personal data will not be carried out, unless legally required.

• Right of access: The right to obtain confirmation as to whether FREMAP, MUTUAL SOCIETY NO. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE is, or is not processing personal data that concerns you and, in this case, to access that data.
• Right of rectification: The right to request that your data be amended or corrected if it is inaccurate.
• Right of erasure: The right to request that your data be deleted or removed if it has been processed unlawfully, if the reason for processing or collecting it no longer exists, when you revoke your consent or object to your data being processed or if it must be deleted to comply with a legal obligation.
• Right of opposition: The right to object, at any time and for reasons related to your specific situation, to personal data that concerns you being processed on the grounds of public interest or the legitimate interest of the data controller or a third party.
• Right of limitation of the processing: The right to restrict the processing of your data, if you contest its accuracy, if it is being processed unlawfully, if your personal data is no longer needed for the purpose it was originally being processed for, or if you have exercised your right to object to the processing of your data.
• Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly-used format that can be digitally read, and to send it to another data controller, provided this is technically possible.
• The right not to be subject to individual automated decisions: The right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.

You may exercise these rights, in writing, together with the copy of a document accrediting your identity, before the Data Protection Officer, whose contact details we have included in the question on this figure.

In addition, you have the right to:

• Revoke the consent you have provided: If you have given your consent for your data to be processed in this way, you have the right to revoke it.
• Lodge a claim: You can address any concerns to the Data Protection Officer and are entitled to file a complaint with the Spanish Data Protection Authority (AEPD).

By you when you communicate them to us by phone or in person at a FREMAP centre.

The Data Controller of your data is the Ministry of Health (www.mscbs.go.es). FREMAP Social Security Collaborating Mutual Insurance Company no. 61, with registered office at Carretera de Pozuelo no. 61, 28222, Majadahonda (MADRID), will process your data as Data Processor.

If you wish to contact the FREMAP Data Protection Officer, you may do so through the mailbox dpd@fremap.es, or by sending a letter to the above address, including the reference "Data Protection Area".

Your identification details (name and surname) and contact details (postal or electronic address and telephone number), as well as your health details (date of vaccination and possible adverse effects after vaccination).

Your data will be processed by the Controller (Ministry of Health) in order to be able to inject you with the COVID-19 vaccination, collaborating with the Public Health Services in the Coronavirus vaccination campaign in Spain. Accordingly, your data will be processed to verify that you are a company worker or a self-employed worker associated with the Mutual Society and that you can receive the vaccine, as well as be monitored for any possible side effects or adverse reactions, recording these circumstances for subsequent communication to the competent Health Authorities.

Your personal data will be retained as long as necessary to provide the healthcare treatment recommended to the Mutual Society by the Health Authorities, and to determine any liabilities that may arise from this purpose and data processing.

We are entitled to process your personal data as it is necessary to fulfil a mission carried out in the essential public interest, in the field of Public health (Article 6.1 c) and Article 9.2 g) of the General Data Protection Regulation (EU) 2016/679, taking into account the situation of pandemic that has been experienced, and the general objective of the COVID-19 Vaccination in Spain to reduce morbidity and mortality caused by this disease, protecting the most vulnerable groups through COVID-19 Vaccination.

Vaccination is voluntary, you are not obliged to provide your data. If you do not provide your data, we cannot verify whether you belong to the group protected by FREMAP and proceed to carry out the COVID-19 vaccination.

Your data will be communicated to the Autonomous Health Departments, which are dependent on the Ministry of Health, registering in the computer system enabled by the Departments the information relating to the act of vaccination and, where applicable, to serious adverse reactions that you communicate. No other communication of personal data or international transfers of personal data will be carried out, unless legally required.

Data Protection rights must be exercised before the Data Controller, who is the Ministry of Health, the competent body to collect data until the end of the health crisis. You can contact the Ministry of Health to exercise the following rights:

• Right of access: The right to obtain confirmation as to whether or not personal data concerning you is being processed and, in such case, to access it.
• Right of rectification: The right to request that your data be amended or corrected if it is inaccurate.
• Right of erasure: The right to request that your data be deleted or removed if it has been processed unlawfully, if the reason for processing or collecting it no longer exists, when you revoke your consent or object to your data being processed or if it must be deleted to comply with a legal obligation.
• Right of opposition: The right to object, at any time, on grounds relating to your specific situation, to the processing of personal data that concerns you.
• Right of limitation of the processing:The right to restrict the processing of your data, if you contest its accuracy, if it is being processed unlawfully, if your personal data is no longer needed for the purpose it was originally being processed for, or if you have exercised your right to object to the processing of your data.
• Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly-used format that can be digitally read, and to send it to another data controller, provided this is technically possible.
• The right not to be subject to individual automated decisions: The right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.

You can exercise these rights, filling in the form that the Ministry of Health has published on its website.

Or, you can request it in person, through the Ministry of Health's physical customer service offices

In addition, you have the right to:

• Lodge a claim: You can address any concerns to the Data Protection Officer and are entitled to file a complaint with the Spanish Data Protection Authority (AEPD).

From you, by making it available to us at our centres, information is also gathered from the employer company associated with FREMAP or consultancy that provides services to the associated employee's company or self-employed person, and from the TGSS and other Social Security Bodies, when they provide the Mutual Society with the personal data necessary to comply with the legal obligations assigned.