FREMAP, MUTUA COLABORADORA CON LA SEGURIDAD SOCIAL Nº 61, with registered office at Carretera de Pozuelo nº 61, 28222 Majadahonda (Madrid). Contact us by post at the indicated address or by email at the address derechos_arco@fremap.es.

The Data Protection Officer is the person responsible for safeguarding your privacy at our company. If you wish to contact them, you can do so at dpd@fremap.es Or by letter sent to the previous address, including the reference "Data Protection Officer."

If you receive Social Security benefits and go to our administrative or healthcare centres:

• Identity and contact data (name and surnames, ID/Non-national ID/passport, postal and electronic address, social security number, telephone number of the data subject or their relatives or representatives, signature and photo);
• Personal characteristics (date of birth, age, family, sex and nationality);
• Professional and employment data (profession, work place, position and professional category);
• Economic and insurance data (bank, wage, allowance, social security registration and insurance company data);
• Special category data (health data);
• Other data needed to check your entitlement to social security benefits, verify mutual insurance company competence and perform accident prevention actions.
  • Information on the accident that explains how it occurred and how it is related to work (accident report, work schedule, journey, if the accident happened on the way to or from work, duties performed, employment contract, List of Employees (RNT), Social Security Contribution Payment Receipt (RLC) and time of health care assistance).
  • Information on the work-related illness that may affect you so it can be correctly classified (information about whether the job entails the presence of specific substances or agents, which is a risk factor).

If you are not a social security beneficiary and we attend to you at one of our healthcare facilities:

• Identity and contact data (full name, ID/Non-national ID/Passport, postal and electronic address, telephone number, signature and photo);
• Personal characteristics (age, sex and family);
• Insurance details and Social Security registration.
• Special category data (health data)

If you receive social security benefits and attend one of our administrative or healthcare facilities, your data will be processed:

a) To manage your social security benefits.

• We will process your data to ensure you receive social security protection and to help you manage your healthcare and benefit payments for work-related accidents and illnesses. We will also use it to cooperate with accident prevention actions and help you return to work (if necessary), access benefit payments for temporary disability due to common accidents and illnesses and non-work-related accidents, monitor risks during pregnancy and breastfeeding, help self-employed individuals terminate their business activities and provide assistance for people caring for minors with cancer or other serious illnesses.

  In order to do this, we need to process your data to determine whether you are entitled to social security benefits and manage them (if you are), tell you about your appointments or reviews with the mutual insurance company's medical unit and notify you and your employer (while your employment relationship is still in effect) about any orders that recognise, discontinue, cancel or extinguish rights.

b) To make sure your rights to any benefits are recognised quickly and correctly classify the accident or illness.

• When you consent, your company, or the individual or legal entity who/that performs administrative tasks on behalf of the company, will be sent information from your medical certificate or a certificate to confirm that you have received medical assistance without leave due to a work-related accident or illness
• Equally, and only when you consent, your company, or the individual or legal entity who/that performs administrative tasks on behalf of the company, will be sent information from your certificate of fitness to return to work following a work-related illness or accident so your company can immediately register your fitness to return to work on the RED system and correctly apply the necessary subsidised payment deductions.
• Similarly, in those cases where you expressly give your consent, the financial data needed to recognise your entitlement to temporary disability benefit will be collected from your company, as well as the payslips required to check that the change to your benefits has been calculated correctly.

c) To analyse and investigate work-related accidents and illnesses and develop a comprehensive preventive action.

This purpose includes processing your data for:

• We will obtain information from your company or the medical facility that attended to you to help us ascertain how the accident happened and, where necessary, what assistance you received and the exact time of such assistance. This will help us provide you with the correct healthcare and determine the type of work-related incident that took place.
• If you have suffered a work-related illness, we will obitain from your company information about whether your job entails the presence of specific substances or agents and communicate to your employer the risk factors detected by the mutual insurance company's accident and illness prevention experts.

d) To transfer information on your healthcare to the insurance company responsible for dealing with the effects of the accident or to the medical facility that you have expressly authorised.

• When you give your consent, your data may be sent to the insurance company responsible for the costs arising from the accident, whether by regulations or contractually. Specifically, this will involve any medical information or documents about the injuries caused by the accident to cover the costs incurred during the healthcare you received as an inpatient or outpatient.
• Similarly, when you give your consent, your medical leave situation may be communicated to the medical department of your company so they can verify your health status, in accordance with article 20.4 of Royal Legislative Decree 2/2015 of 23 October, which approves the consolidated text of the Workers' Statute Act. Similarly, if you give your express consent, information on your latest medical procedure may be communicated to your company's medical department, so it can contribute to improving your health situation by expediting tests or treatments, if possible, or paying planned wage supplements. Likewise, if you expressly consent, your company's medical department can be informed about the mutual insurance company's proposal to issue you with a certificate of fitness to return to work so it can plan your return to work and reorganise the service.

e) For research, teaching, statistical and analytical purposes.

• Your personal data may be made anonymous or irreversibly unidentifiable and used for medical research, teaching, statistical and analytical purposes.

f) To improve the management of the services provided.

• Your data may be processed to conduct satisfaction surveys, address any complaints or suggestions that you may submit to us and to manage your messages of acknowledgement and congratulations.

g) For security purposes.

• To preserve the safety of people, goods and facilities, your image may be recorded by the security cameras installed in our facilities and hospitals.

If you do not receive Social Security benefits and we see you in our healthcare facilities, we will process your data:

a) To provide you with emergency medical care.

b) For research, teaching, statistical and analytical purposes.

• Your personal data may be made anonymous or irreversibly unidentifiable and used for medical research, teaching, statistical and analytical purposes.

c) For security purposes.

• To preserve the safety of people, goods and facilities, your image may be recorded by the security cameras installed in our facilities and hospitals.

The legal basis that allows us to process your personal data depends on the reason why we need to process it.

If you receive Social Security benefits and go to our administrative or healthcare centres:

a) To manage your social security benefits.
We need to process your personal data to comply with legal obligations for managing social security benefits, and we are entitled to process your data under article 9.2 b), f) and h) of the General Data Protection Regulation (EU) 2016/679, in relation to Article 6,1 c) on the basis of the social security regulations that apply to Partner Mutual Insurance Companies (art. 80 et seq. of Royal Decree 8/2015 of 30 October, which approves the consolidated text of the General Social Security Act, Royal Decree 625/2014 of 18 July which governs certain aspects of the management and control of processes for temporary disability in the first three hundred and sixty-five days, Royal Decree 860/2018 of 13 July, which governs the preventive activities of the Protective action of the Social Security Institute to be carried out by Mutual Insurance Companies that Partner with the Social Security Institute, Royal Decree 1993/1995 of 7 December on Mutual Insurance Company Partnerships with the Social Security Institute and the implementing regulations), and on the basis of the applicable health regulations (Act 41 / 2002 of 14 November, basic regulation of patient autonomy and rights and obligations with regard to information and clinical documentation).

b) To make sure your rights to any benefits are recognised quickly.
The legal basis to process your data for this purpose is your consent. Therefore, if you give your express authorisation, your company will be sent information from your medical certificate or a certificate to confirm that you have received medical assistance without leave so it can comply with its legal obligations to transfer the information to the Delta@ system. Equally, and only when you give your express authorisation, your company will be sent information from your certificate of fitness to return to work so it can comply with its legal obligation to register it on the RED system and correctly apply the necessary subsidised payment deductions. Similarly and only if you give your express authorisation, your company will be asked for the financial data needed to check the social security contributions made so that your benefits can be correctly calculated (article 6.1a) of the General Data Protection Regulation (EU) 2016/679).

c) To analyse and investigate work-related accidents and illnesses and develop a comprehensive preventive action.
We believe we have a legitimate interest to process the information required to analyse and investigate work-related accidents and illnesses and develop a comprehensive preventive action to efficiently and effectively manage any benefits you may be entitled to, on the basis that processing this data will be beneficial to you as, if a work-related accident or illness is found to have taken place, a nunber of rights to social security beneifts will be generated in your favour (art. 6.1 f) of Regulation (EU) 2016/679 on General Data Protection.

d) To transfer information on your healthcare process to the insurance company responsible for the medical services that you have expressly authorised.
The legal basis to process your data for this purpose is your voluntary consent under art. 6.1 a) of the General Data Protection Regulation (EU) 2016/679.

e) For research, teaching, statistical and analytical purposes.
We consider that we have a legitimate interest to process data and information on processes arising from your work-related injuries and illnesses that may be of interest for research, teaching, statistical and analytical purposes, after it has been made irreversibly unidentifiable (Article 6.1 f) of the General Data Protection Regulation (EU) 2016/679).

f) To improve the management of the services provided.
We consider that we have a legitimate interest in knowing your degree of satisfaction with the services provided to analyse their quality, as we understand that processing this data is beneficial to you, as it enables us to improve our services (art. 6.1 f) of the General Data Protection Regulation (EU) 2016/679).

g) To maintain security.
We consider that we have a legitimate interest to record your image when you visit our centres and facilities, as we understand that processing this data can be beneficial to you should any incident that affects your security occur (art. 6.1 f) of the General Data Protection Regulation (EU) 2016/679).

If you do not receive social security benefits and go to any of our administrative or healthcare facilities:

a) To provide you with emergency healthcare.
It is necessary to process your personal data to comply with legal obligations to provide emergency healthcare and related adminsitrative services (art. 9.2 c) of the General Data Protection Regulation (EU) 2016/679), in relation to article 6.1 d) of the same and article 196 of Organic Law 10/1995 of 23 November of the Criminal Code).

e) For research, teaching, statistical and analytical purposes.
We consider that we have a legitimate interest to process data that may be of interest for research, teaching, statistical and analytical purposes, after it has been made irreversibly unidentifiable (art. 6.1 f) of the General Data Protection Regulation (EU) 2016/679).

c) To protect your safety.
We consider that we have a legitimate interest to record your image when you visit our centres and facilities, as we understand that processing this data can be beneficial to you should any incident that affects your security occur (art. 6.1 f) of the General Data Protection Regulation (EU) 2016/679).

Data will be stored for the time required to meet the purpose for which it was collected and deal with any liabilities and claims that could be lodged against the company, in accordance with applicable regulations.

If you receive Social Security benefits and go to our administrative or healthcare centres:

You are required to provide your data to enable us to provide you with healthcare and financial assistance. If you refuse to provide this data, you may not be able to access to the financial and healthcare assistance and healthcare you are entitled to under social security legislation.

If you do not receive Social Security benefits and we see you in our healthcare centres:

You are required to provide us with your data to enable us to provide you with any healthcare you need, and because your refusal to provide us with this information prevents us from providing you with such healthcare.

If you receive social security benefits and attend one of our administrative or healthcare facilities, your data may be conveyed to third parties to comply with some of the above purposes, specifically the following:

• To comply with the purpose of managing social security benefits, your data may be communicated to the Ministry of Employment and Social Security, Social Security Agencies and Organisations, the Public Health Department, Medical and Labour Inspections, other Mutual Insurance Companies that Partner with the Social Security Institute, your company and companies that provide healthcare services with which there is a contractual relationship for the provision of healthcare or the performance of medical tests. The personal data that may be communicated will be: Identifying data and data that may affect the generation, modification, conservation or extinction of the right to benefits and the amounts thereof, which are recognised by the Mutual Insurance Company (art. 71.1 and 82.2 of Royal Legislative Decree 8/2015, which approves the consolidated text of the General Social Security Act and article 5 of Royal Decree 1630/2011 of 14 November).
• To comply with the purpose of expediting the recognition of your right to receive the benefits you may be entitled to, your data may be communicated to your company or the individual or legal entity who/that performs these administrative activities on behalf of your company. The details that can be communicated are: Identification data (full name and Tax ID/Non-national ID), health data necessary for the company to record the accident or illness in full on the RED system (date of the accident; Date of attendance; date of medical leave, official codes relating to the way the accident occurred, type of injury, degree and nature of the injury, as well as if it has occurred before, prognosis of severity, date of and reason for medical discharge, as well as the cancellation of the same, if applicable, payslips and social security contribution documents).
• To comply with the purpose of analysing and investigating work-related accidents and illnesses and developing a comprehensive preventive action, your data may be communicated to your company and to the medical services that have provided you with assistance, where applicable. The details that can be communicated are: Identification data (full name and Tax ID/Non-national ID) Information on the work-related accident that explains how it occurred and how it is related to work (accident report, work schedule, journey, if the accident happened on the way to or from work, duties performed, employment contract, List of Employees (RNT), Social Security Contribution Payment Receipt (RLC) and time of healthcare assistance) and information about the work-related illness that may affect you (risk factors detected in your job by the Mutual Insurance Company's risk prevention experts).
• To comply with the purpose of transferring information on your healthcare process to the insurance company responsible for the damages or the medical services of your company before you have given your authorisation, your data that may be communicated is as follows: Identification data (full name and ID/Non-national ID) and health data (Information on your last medical procedure).

In addition, your personal data will be transferred or communicated to parties that must receive it under a legal obligation and that request it from the Mutual Insurance Company (State Security Forces and Agencies, Law Courts and the Public Prosecutor's Office), or that have a contractual obligation to provide services that requires the involvement of the Mutual Insurance Company to perform its activities under normal circumstances.

We will not make any international transfers of data to third countries or international organisations.

If you do not receive Social Security benefits and we attend to you in one of our centres:

Your data may be communicated to the relevant Public Health Department or your relatives.

We will not make any international transfers of data to third countries or international organisations.

Right of access: The right to obtain confirmation as to whether FREMAP, MUTUAL INSURANCE COMPANY NO. 61 PARTNERING WITH THE SOCIAL SECURITY INSTITUTE is processing personal data that concerns you and, if it is, the right to access it.

Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.

Right of erasure: The right to request that your data be erased or deleted due to having been unlawfully processed, because the reason for collecting or processing it no longer exists, if you revoke your consent or object to it being processed or when it must be deleted to comply with a legal obligation.

Right of opposition: The right to object, at any time, for reasons related to your specific situation, to the processing of personal data that concerns you on the grounds of public interest or the legitimate interest of the data controller or a third party.

The right to restrict the processing of your data: You are entitled to restrict the processing of your data if you contest its accuracy, if the processing is illegal, if your personal data is no longer necessary for the original processing purposes, or if you have exercised your right to object to the processing of your data.

Right to data portability: The right to receive personal data that concerns you in a structured, commonly-used format that can be digitally read, and to transmit it to another data controller, provided that it is technically possible.

Right not to be the subject to individual automated decisions: The right to object to being the subject of decisions based solely on the automated processing of personal data, including setting up profiles, when this decision can affect you legally or significantly.

To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

• identification data,
• a copy of your National Identity Card (DNI) or another official document that confirms your identity
• the claim specifying the request,
• address for notification purposes,
• date, and requester's signature.

If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

• Postal mail: Carretera de Pozuelo, 61, Majadahonda 28222 – Madrid.
• E-mail: derechos_arco@fremap.es

Similarly, you may also contact the Data Protection Officer, by:

• E-mail: dpd@fremap.es
• Postal mail: Carretera de Pozuelo, 61, Majadahonda 28222 – Madrid.

Furthermore, you have the right to:

revoke the consent given: If the legal grounds of the processing is your consent, you have the right to revoke this.

file a claim: You can always contact the Data Protection Officer, and you also have the right to file a claim with the Spanish Data Protection Agency.

If you receive Social Security benefits and go to our administrative or healthcare centres:

We acquire the data directly from you in our administrative and healthcare centres, and in admission locations and provision managers, or digitally when you provide your data in any of the forms.

From the General Social Security Treasury, the National Social Security Institute and Public Health Services.

From the companies or employment agencies responsible for managing human resources, when said parties fill in the healthcare application form, or report on how the accident happened, if it is a work-related accident, or on the fact that a work-related accident has not happened, as well as on the medical services that provide you with assistance, where applicable.

Equally, your data will be obtained from your employer or the individual appointed by your employer if information is received about the presence of specific substances or agents in your job if you might be affected by a potential work-related illness.

Similarly, data may be requested from your company, when it is necessary to know the work centre you are registered with to prepare the relevant statistical reports on accidents at specific work centres to organise our preventive activities.

If you are not a social security beneficiary and we attend to you at one of our healthcare facilities:

Data will also be requested from you, or your relatives or companions when you access our administrative and healthcare centres.

FREMAP, MUTUAL SOCIETY No. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE, with registered office in Carretera de Pozuelo No. 61, 28222 Majadahonda (Madrid). Contact us by post at the address indicated, or sending an email to the address derechos_arco@fremap.es.

The Data Protection Officer is the person responsible for safeguarding your privacy in our company. If you want to contact him or her, you can do so at dpd@fremap.es or by writing to the aforementioned address, including the reference 'Data Protection Officer'.

The personal data that will be processed during our activity consists in your identification, full name, DNI/NIE and contact details, and professional address, telephone number and email address.

Please provide this information on data protection to the people in your company participating in the relationship with us (contact persons)

In the case of business or administrative relations with us, in your capacity as a representative of a company or individual businessperson, to maintain our administrative or contractual relationship.

In the case of supplier contacts, partner companies, affiliated individual business operators or authorised RED agents, data will be processed in order to maintain the relationship with the company or individual business operator the RED agent acts on behalf of and to comply with legal and contractual obligations.

The data will be stored for the time required to meet the purpose for which it was collected, to determine the possible liabilities and to attend to the claim against the company, which could occur at a future date.

In any case, the data will need to be stored for the time needed for FREMAP to carry out any legal or administrative actions derived from the account audits and compliance stipulated in article 98.2 of Royal Legislative Decree 8/2015, of 30 October, which approves the Amended Text on the General Social Security Act.

The provisions of Royal Decree 1993/1995, of 7 December, which approves the Regulation on the Collaboration of Mutual Companies, will be applicable, along with those of Article 1964 of the Civil Coe.

If you have a business or administrative relationship with us, in your quality as a representative of a company or individual businessperson, we are legally authorised by virtue of article 6.1 b) and c) of Regulation (EU) 2016/679 on General Data Protection, whereby this is needed to comply with legal and contractual obligations, and article 6.1 f), whereby the processing is needed to satisfy the legitimate interests of FREMAP.

In the case of contact persons for a supplier company, an associated company or an individual associated businessperson, we are legally authorised by virtue of article 6.1 b), c) and f) of Regulation (EU) 2016/679 on General Data Protection, whereby this is necessary for the execution of a contract, application of pre-contractual measures at the request of the data subject, or to comply with legal obligations and legitimate interests.

You are obliged to provide your data or consent to the processing of your data as this is required to formalise and maintain the relationship with you or with the company you represent, or through which you are acting, as it would not be possible to attend to you correctly otherwise.

Your personal data are processed at our company. To the extent stipulated by Law, we can transfer your data to recipients external to the mutual company. These recipients can include service providers (which, in accordance with contracts in place, provide services including the processing of personal data) and public bodies, insofar that we are obliged to communicate such data by virtue of a legal obligation.

We will not make any international transfers of data to third countries or international organisations.

Right of access: The right to obtain confirmation on whether FREMAP, MUTUA COLABORADORA DE LA SEGURIDAD SOCIAL NO. 61 is processing personal details that concern you, and, if so, the right to access such data.

Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.

Right of erasure: The right to request that your details be erased or deleted due to the unlawful processing of data, the disappearance of the purpose that gave rise to its processing or collection, when you revoke your consent or oppose to the data processing, or when they must be deleted in compliance with a legal obligation.

Right of opposition: The right to oppose, at any time, for reasons related to your particular situation, to personal data concerning you to be processed based on a public interest or a legitimate interest of the data processing controller or a third party.

Right of limitation of the processing: The right to obtain the limitation of the data processing, if you contest its accuracy, if the processing is unlawful, if your personal data is no longer required for processing purposes, or if you have exercised your right to oppose to the data processing.

Right of portability of the data: The right to receive the personal data held on you in a structured format, in common use and machine readable, and to transfer them to another controller, provided this is technically possible.

The right not to be subject to individual automated decisions: The right to oppose to being the subject of decisions based on the automated processing of personal data, including the elaboration of profiles, when this decision can affect you legally or significantly.

To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

• identification data,
• a copy of your National Identity Card (DNI) or another official document that confirms your identity
• the claim specifying the request,
• address for notification purposes,
• date, and requester's signature.

If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

• Postal mail: Carretera de Pozuelo, 61, Majadahonda 28222 – Madrid.
• E-mail: derechos_arco@fremap.es

Similarly, you may also contact the Data Protection Officer, by:

• E-mail: dpd@fremap.es

Furthermore, you have the right to:

revoke the consent given: If the legal grounds of the processing is your consent, you have the right to revoke this.

file a claim: You can always contact the Data Protection Officer, and you also have the right to file a claim with the Spanish Data Protection Agency.

If you have a business relationship with us, directly from you when you provide your information before entering into a contract. If you have an administrative relationship with us, in your capacity as representative of a company, when you fill in the association application form.

If you have an administrative relationship with us, in your capacity as an individual businessperson, from Social Security when you register with the Special Scheme for Self-Employed Workers.

If you are the contact person for a provider company, mutual company or individual businessperson, the data is provided by the company you represent or are acting through. If you are an authorised RED agent for a mutual insurance partner company or are self-employed and affiliated to the mutual insurance company, your data will be supplied to us by the Social Security General Treasury.

FREMAP, MUTUAL SOCIETY No. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE, with registered office in Carretera de Pozuelo No. 61, 28222 Majadahonda (Madrid). Contact us by post at the address indicated, or sending an email to the address derechos_arco@fremap.es.

The Data Protection Officer is the person responsible for safeguarding your privacy in our company. If you want to contact him or her, you can do so at dpd@fremap.es or by writing to the aforementioned address, including the reference 'Data Protection Officer'.

Identification and contact data, personal characteristics, academic and professional data, image, employment details and health data (psychological data obtained from psycho-technical test).

As a main purpose, for the management of staff selection processes, evaluation of personal aspects (profile elaboration) and provision of jobs in which it participates. We inform you that FREMAP will perform an automated processing with the information it obtains from the psycho-technical test carried out (profiled), if you Gives your consent to this, given that FREMAP needs to obtain information that allows it to decide on the best adaptation and integration of the person with the job to be performed. In this psycho-technical test, professional skills and personality factors are evaluated that have to do with professional aspects and/or professional training (aptitude measurement test).

Under no circumstances will the result of the psycho-technical test carried out be used alone to exclude you from the selection process in which you have been included, being only one of the different factors to consider. When selecting or discarding candidates, FREMAP will take into account other factors, such as personal interviews, prior experience, evaluation of the trial period and the result of the examinations it takes. Factors from which FREMAP will reach the decision to select or discard the vacancy offered (decision criteria or logic applied).

The decision on your selection or rejection as a candidate will be taken by the staff responsible for the selection process and will never be a decision based solely on the automated processing of your data.

Furthermore, for video surveillance and access control in facilities for security purposes.

The data will be stored for the time needed to comply with the purpose for which it was collected and to determine the potential liabilities that may be derived from said purpose and from the processing of data, for as long as the tax subject does not exercise his/her right of removal

The processing of your personal data for the management of personnel selection processes, and the provision of jobs in which you participate, is necessary for the application of pre-contractual measures (Article 6.1.b) of Regulation (EU) 2016/679, General Data Protection).

In relation to the special categories of data (health), such as those obtained with the psycho-technical test carried out to evaluate Personal data, the processing of your data is subject to your consent, so this data will only be processed if you expressly consent To this end (Article 9,1 a) of the General Data Protection Regulation (EU) 2016/679, in relation to Article 22,4 of the aforementioned Regulation).

The personal data collected for video surveillance and access control to the facilities are legitimised in FREMAP's legitimate interests, such as guaranteeing the security of people, goods and facilities (article 6,1. F) General Data Protection Regulation (EU) 2016/679): Royal Legislative Decree 2/2015, of 23 October, approving the revised text of the Workers'Statute Act.

You are obliged to provide us with your details if you wish to participate in the selection process to fill a vacant position in the company, as these are necessary for the management of your candidacy and the development of the selection process in which you participate. If you do not provide your details, we will not be able to manage your participation in selection processes.

Your data will not be transferred to third parties, other than transportation companies, travel agencies and hotel establishments, for trips made during the selection processes in which you participate and which are necessary.

We will not make any international data transfers to third countries or international organisations

Right of access: The right to obtain confirmation on whether FREMAP, MUTUA COLABORADORA DE LA SEGURIDAD SOCIAL NO. 61 is processing personal details that concern you, and, if so, the right to access such data.

Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.

Right of erasure: The right to request that your details be erased or deleted due to the unlawful processing of data, the disappearance of the purpose that gave rise to its processing or collection, when you revoke your consent or oppose to the data processing, or when they must be deleted in compliance with a legal obligation.

Right of opposition: The right to oppose, at any time, for reasons related to your particular situation, to personal data concerning you to be processed based on a public interest or a legitimate interest of the data processing controller or a third party.

Right of limitation of the processing: The right to obtain the limitation of the data processing, if you contest its accuracy, if the processing is unlawful, if your personal data is no longer required for processing purposes, or if you have exercised your right to oppose to the data processing.

Right of portability of the data: The right to receive the personal data held on you in a structured format, in common use and machine readable, and to transfer them to another controller, provided this is technically possible.

The right not to be subject to individual automated decisions: The right to object to being subject to decisions based solely on the automated processing of personal data, including profiling, when this decision may affect you legally or significantly. You have the possibility to express your opinion, contest the decision and request the intervention of a person in the process to review the decision taken.

To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

• identification data,
• a copy of your National Identity Card (DNI) or another official document that confirms your identity
• the claim specifying the request,
• address for notification purposes,
• date, and requester's signature.

If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

• Postal mail: Carretera de Pozuelo, 61, Majadahonda 28222 – Madrid.
• E-mail: derechos_arco@fremap.es

Similarly, you may also contact the Data Protection Officer, by:

• E-mail: dpd@fremap.es

Furthermore, you have the right to:

revoke the consent given: If the legal grounds of the processing is your consent, you have the right to revoke this.

file a claim: You can always contact the Data Protection Officer, and you also have the right to file a claim with the Spanish Data Protection Agency.

Directly from you when you send your CV to FREMAP, when you offer your candidacy through the website, or subsequently when you provide your data in the selection interview, psycho-technical tests, group dynamics or exams carried out, and from employment companies or job boards you may be subscribed to.

FREMAP, MUTUAL SOCIETY No. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE, with registered office in Carretera de Pozuelo No. 61, 28222 Majadahonda (Madrid). Write to us at the indicated address, or email us on derechos_arco@fremap.es.

The Data Protection Officer is the person in charge of safeguarding security in our company. If you want to contact him or her, you can do so at dpd@fremap.es or by sending a letter to the above address and including the reference "Data Protection Officer".

Identification and contact details, personal characteristics, academic and professional data, employment details, image and economic, financial and insurance details.

Your personal data is processed to manage the internship or services provided in the company.

Your details will be stored for the time needed to comply with the purpose for which they were collected, and, where relevant, to attend to the liabilities that may be derived from this purpose and data processing.

We are legally authorised to manage your data as it is needed to execute a contract and comply with legal obligations (article 6.1 b) and c) of Regulation 2016/679 on General Data Protection).

You are obliged to provide your data in order to manage the internship or service provisions and to comply with the contractual or collaborative relationship.

Your personal data will be disclosed to the educational centre you belong to, or to the company with which you have a labour or trade relationship.

Furthermore, your data may be communicated to the occupational authority when this is requested in compliance with the obligations of the Mutual Company.

We will not make any international transfers of data to third countries or international organisations.

Right of access: The right to obtain confirmation on whether FREMAP, MUTUA COLABORADORA DE LA SEGURIDAD SOCIAL NO. 61 is processing personal details that concern you, and, if so, the right to access such data.

Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.

Right of erasure: The right to request that your details be erased or deleted due to the unlawful processing of data, the disappearance of the purpose that gave rise to its processing or collection, when you revoke your consent or oppose to the data processing, or when they must be deleted in compliance with a legal obligation.

Right of opposition: The right to oppose, at any time, for reasons related to your particular situation, to personal data concerning you to be processed based on a public interest or a legitimate interest of the data processing controller or a third party.

Right of limitation of the processing: The right to obtain the limitation of the data processing, if you contest its accuracy, if the processing is unlawful, if your personal data is no longer required for processing purposes, or if you have exercised your right to oppose to the data processing.

Right of portability of the data: The right to receive the personal data held on you in a structured format, in common use and machine readable, and to transfer them to another controller, provided this is technically possible.

The right not to be subject to individual automated decisions: The right to oppose to being the subject of decisions based on the automated processing of personal data, including the elaboration of profiles, when this decision can affect you legally or significantly.

To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

• identification data,
• a copy of your National Identity Card (DNI) or another official document that confirms your identity
• the claim specifying the request,
• address for notification purposes,
• date, and requester's signature.

If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

• Postal mail: Carretera de Pozuelo, 61, Majadahonda 28222 – Madrid.
• E-mail: derechos_arco@fremap.es

Similarly, you may also contact the Data Protection Officer, by:

• E-mail: dpd@fremap.es

Furthermore, you have the right to:

revoke the consent given: If the legal grounds of the processing is your consent, you have the right to revoke this.

file a claim: You can always contact the Data Protection Officer, and you also have the right to file a claim with the Spanish Data Protection Agency.

If you are a student taking an internship, your details are provided to us by the educational centre you are part of.

If you are an external worker providing services to FREMAP, your data is provided to us by the company with which you have a labour or trade relationship, a service provider to FREMAP.

FREMAP, MUTUAL SOCIETY No. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE, with registered office in Carretera de Pozuelo No. 61, 28222 Majadahonda (Madrid). Write to us at the indicated address, or email us on derechos_arco@fremap.es.

The Data Protection Officer is the person in charge of safeguarding security in our company. If you want to contact him or her, you can do so at dpd@fremap.es or by sending a letter to the above address and including the reference "Data Protection Officer".

The personal details that will be processed to manage the governing and participation bodies are your identification details (full name, DNI/NIE), contact details (address, telephone number and email address) and professional details.

Your details will be processed for the administrative management of governing and administration bodies of the Mutual Company.

The data will be stored for the time required to meet the purpose for which it was collected, to determine the possible liabilities and to attend to the claim against the company, which could occur at a future date.

In any case, the data will need to be stored for the time needed for FREMAP to carry out any legal or administrative actions derived from the account audits and compliance stipulated in article 98.2 of Royal Legislative Decree 8/2015, of 30 October, which approves the Amended Text on the General Social Security Act.

The provisions of Royal Decree 1993/1995, of 7 December, which approves the Regulation on the Collaboration of Mutual Companies, will be applicable, along with those of Article 1964 of the Civil Coe.

Our legal ground for processing your data is based on compliance with legal obligations attributed to the Mutual Company, stipulated in article 6.1 c) of Regulation (EU) 2016/679 on General Data Protection.

You are obliged to provide your data as it is required for the administrative management of governing and administration bodies of the Mutual Company. Otherwise, your participation in governing and participation bodies of the Mutual Company would not be possible.

Personal data processing also takes place in our company. To the extent provided by law, we can transfer your data to recipients external to the Mutual Company. These recipients can include service providers (which, in accordance with contracts in place, provide services including the processing of personal data) and public bodies, insofar that we are obliged to communicate such data by virtue of a legal obligation.

We will not make any international transfers of data to third countries or international organisations.

Right of access: The right to obtain confirmation on whether FREMAP, MUTUA COLABORADORA DE LA SEGURIDAD SOCIAL NO. 61 is processing personal details that concern you, and, if so, the right to access such data.

Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.

Right of erasure: The right to request that your details be erased or deleted due to the unlawful processing of data, the disappearance of the purpose that gave rise to its processing or collection, when you revoke your consent or oppose to the data processing, or when they must be deleted in compliance with a legal obligation.

Right of opposition: The right to oppose, at any time, for reasons related to your particular situation, to personal data concerning you to be processed based on a public interest or a legitimate interest of the data processing controller or a third party.

Right of limitation of the processing: The right to obtain the limitation of the data processing, if you contest its accuracy, if the processing is unlawful, if your personal data is no longer required for processing purposes, or if you have exercised your right to oppose to the data processing.

Right of portability of the data: The right to receive the personal data held on you in a structured format, in common use and machine readable, and to transfer them to another controller, provided this is technically possible.

The right not to be subject to individual automated decisions: The right to oppose to being the subject of decisions based on the automated processing of personal data, including the elaboration of profiles, when this decision can affect you legally or significantly.

To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

• identification data,
• a copy of your National Identity Card (DNI) or another official document that confirms your identity
• the claim specifying the request,
• address for notification purposes,
• date, and requester's signature.

If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

• Postal mail: Carretera de Pozuelo, 61, Majadahonda 28222 – Madrid.
• E-mail: derechos_arco@fremap.es

Similarly, you may also contact the Data Protection Officer, by:

• E-mail: dpd@fremap.es

Furthermore, you have the right to:

revoke the consent given: If the legal grounds of the processing is your consent, you have the right to revoke this.

file a claim: You can always contact the Data Protection Officer, and you also have the right to file a claim with the Spanish Data Protection Agency.

You provide your details yourself when you apply to form part of a governing and participation body of the Mutual Company.

FREMAP, MUTUA COLABORADORA CON LA SEGURIDAD SOCIAL No. 61, with registered office at Carretera de Pozuelo No. 61, 28220 Majadahonda (Madrid). Write to us at the indicated address, or email us on derechos_arco@fremap.es.

The Data Protection Officer is the person in charge of safeguarding security in our company. If you want to contact him or her, you can do so at dpd@fremap.esOr by letter sent to the previous address, including the reference "Data Protection Officer."

In the course of its activity, FREMAP organises events, conferences, courses, seminars, webinar and interviews in which the Identification details (name/DNI/NIE), as well as biometric data (image and voice) of the participants, and the company to which they belong or to which they represent.

Similarly, it is possible to capture and record images and voice of the people participating in the aforementioned events, conferences, courses, seminars, webinar and interviews.

The data collected from participants in events, conferences, courses, seminars, webinar and interviews organised by FREMAP will be used to control Participants in these seminars and to publicise FREMAP's activities, through institutional documentation, web applications and social networks, as well as , where applicable, justify the carrying out of these actions before official bodies or third parties that must receive them by virtue of a legal obligation.

The personal details of the participants in events, conferences, courses, seminars, webinar and interviews held by the Mutual Society in the course of its activity They will be stored for the time necessary for their dissemination in institutional documentation, web applications and social networks and for the period of five years from their termination Or until such time as the actions that may be exercised to demand responsibility from the Mutual Society are prescribed.

The legal basis for the processing of your data is your consent, in accordance with the provisions of Article 6,1 a) of the Regulation (EU) 2016/679, General Data Protection Act, therefore, your data will only be processed if you have expressly stated that you consent to it.

You do not have any obligation to provide your data. Participation in events, conferences, courses, seminars, webinar and interviews organised by FREMAP to publicise its activity is voluntary.

If you do not provide your data and expressly consent to the processing, you may not participate in events, conferences, courses, seminars, webinar and interviews to prevent your image or voice from being recorded.

The data will be disseminated, where applicable, through institutional documentation, web applications and social networks, and will therefore be communicated to third parties interested in FREMAP's activities, as well as to those recipients who must receive them by virtue of legal obligation.

We will not make any international transfers of data to third countries or international organisations.

Right of access: Right to obtain confirmation as to whether FREMAP, Social Security Collaborative Mutual Society No. 61 is processing personal data that concern you or not and, in this case, to access them.

Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.

Right of erasure: The right to request that your details be erased or deleted due to the unlawful processing of data, the disappearance of the purpose that gave rise to its processing or collection, when you revoke your consent or oppose to the data processing, or when they must be deleted in compliance with a legal obligation.

Right of opposition: The right to oppose, at any time, for reasons related to your particular situation, to personal data concerning you to be processed based on a public interest or a legitimate interest of the data processing controller or a third party.

Right of limitation of the processing: The right to obtain the limitation of the data processing, if you contest its accuracy, if the processing is unlawful, if your personal data is no longer required for processing purposes, or if you have exercised your right to oppose to the data processing.

Right to data portability: Right to receive the personal data that concern you in a structured format, for common use and mechanical reading, and to transfer it to another controller, provided that it is technically possible.

The right not to be subject to individual automated decisions: : The right to oppose being subject to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.

To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

• identification data,
• a copy of your National Identity Card (DNI) or another official document that confirms your identity
• the claim specifying the request,
• address for notification purposes,
• date, and requester's signature.

If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

• Postal mail: Carretera de Pozuelo, 61, Majadahonda 28222 – Madrid.
• E-mail: derechos_arco@fremap.es

Similarly, you may also contact the Data Protection Officer, by:

• E-mail: dpd@fremap.es

Furthermore, you have the right to:

Revoke the consent you have provided: : If the legal grounds of the data processing is your consent, you have the right to revoke this.

On filing a claim: You can always contact the Data Protection Officer, and you also have the right to file a claim with the Spanish Data Protection Agency.

From you, when you register, or participate in our events, seminars, courses, seminars, Teams-webinars, interviews and videos.

FREMAP, MUTUAL SOCIETY No. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE, with registered office in Carretera de Pozuelo No. 61, 28222 Majadahonda (Madrid). Write to us at the indicated address, or email us on derechos_arco@fremap.es.

The Data Protection Officer is the person in charge of safeguarding security in our company. If you want to contact him or her, you can do so at dpd@fremap.es or by sending a letter to the above address and including the reference "Data Protection Officer".

If you file a claim or a complaint, we will process your identification and contact details, full name, National ID No. or passport, address, email address, telephone number, signature and data pertaining to the complaint or claim in question.

Your personal data will be used to attend to and properly manage your complaint or claim.

If your claim or complaint is related with our collaboration with the protective action of Social Security, we will store the data for as long as we provide the healthcare and manage the provisions derived from your condition as a recipient of Social Security protective action, and, in any case, for the statutes of limitation of actions that may be incurred against the Mutual Company.

If you receive Social Security benefits and we attend to you in our healthcare or administrative centres, we are legally authorised by virtue of article 9.2.b) and f) of Regulation (EU) 2016/679 on General Data Protection, given that it is necessary for compliance with obligations and exercising specific rights in the area of social security and protection, and we are authorised to process the rest of your data by virtue of article 6.1.c) of said Regulation, as we are obliged to comply with Royal Decree 8/2015, of 30 October, which approves the amended text of the General Social Security Act and Royal Decree 1993/1995, of 7 December, on the Collaboration of Mutual Companies with Social Security.

You are obliged to provide your data when filing your claim or complaint, as failure to do so prevents us from being able to process it.

The Ministry of Employment and Social Security and Authorities and Entities that comprise Social Security to correctly control the performance of our collaboration with said Authorities, in compliance with Social Security regulations, Royal Decree 8/2015, of 30 October, which approves the amended text of the General Social Security Act, and Royal Decree 1993/1995, of 7 December, on the Collaboration of Mutual Companies with Social Security, and the data will be transferred or disclosed to any recipients that must receive them by virtue of a legal obligation.

We will not make any international transfers of data to third countries or international organisations.

Right of access: The right to obtain confirmation on whether FREMAP, MUTUA COLABORADORA DE LA SEGURIDAD SOCIAL NO. 61 is processing personal details that concern you, and, if so, the right to access such data.

Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.

Right of erasure: The right to request that your details be erased or deleted due to the unlawful processing of data, the disappearance of the purpose that gave rise to its processing or collection, when you revoke your consent or oppose to the data processing, or when they must be deleted in compliance with a legal obligation.

Right of opposition: The right to oppose, at any time, for reasons related to your particular situation, to personal data concerning you to be processed based on a public interest or a legitimate interest of the data processing controller or a third party.

Right of limitation of the processing: The right to obtain the limitation of the data processing, if you contest its accuracy, if the processing is unlawful, if your personal data is no longer required for processing purposes, or if you have exercised your right to oppose to the data processing.

Right of portability of the data: The right to receive the personal data held on you in a structured format, in common use and machine readable, and to transfer them to another controller, provided this is technically possible.

The right not to be subject to individual automated decisions: The right to oppose to being the subject of decisions based on the automated processing of personal data, including the elaboration of profiles, when this decision can affect you legally or significantly.

To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

• identification data,
• a copy of your National Identity Card (DNI) or another official document that confirms your identity
• the claim specifying the request,
• address for notification purposes,
• date, and requester's signature.

If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

• Postal mail: Carretera de Pozuelo, 61, Majadahonda 28222 – Madrid.
• E-mail: derechos_arco@fremap.es

Similarly, you may also contact the Data Protection Officer, by:

• E-mail: dpd@fremap.es

Furthermore, you have the right to:

Revoke the consent you have provided: If the legal grounds of the data processing is your consent, you have the right to revoke this.

Lodge a claim: You can always contact the Data Protection Officer, and you also have the right to file a claim with the Spanish Data Protection Agency.

Directly from you when you come to any of our administrative and healthcare centres and file your claim or complaint.

FREMAP, MUTUAL SOCIETY No. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE, with registered office on Carretera de Pozuelo No. 61, 28222 Majadahonda (Madrid).

The Data Protection Officer is the person in charge of safeguarding your privacy at our company. If you wish to contact them, you can do so at dpd@fremap.es or by written letter sent to the aforementioned address, including the reference "Data Protection Officer".

Your identification details (name and surnames, ID/NIE/Passport, electronic signature, Social Security affiliation number), contact details (postal or electronic address and telephone number), personal characteristics (date and place of birth, age, sex, nationality), professional and employment details.

For the management and control of communications received, requests for access and use of web applications owned by FREMAP that are carried out and for the resolution of any technical incidents that may occur.

The data will be kept for the time necessary to deal with your communication or request, or resolve the reported incident and, in all cases, for the period necessary to deal with the claim processes that may be presented against the company.

We are entitled to process your personal data because we are permitted by Article 6.1 c) and f) and Article 9.2 a) of Regulation (EU) 2016/679, on the General Protection of Personal Data, as it is necessary to process this information in order to comply with data protection obligations, specifically relating to attention to the rights of the interested parties, in accordance with Articles 12 to 22 of the aforementioned Regulations and Articles 12 to 18 of Organic Law 3/2018, of 5 December, on Personal Data Protection and guaranteeing digital rights. Furthermore, its processing is necessary to serve the mutual legitimate interests of the parties, including FREMAP's interest in providing a fast and simple remote service for interested users and the User's interest in making fast and secure communications or accessing voluntary and free services provided by FREMAP.

You are obliged to provide your data, as otherwise the communication you send us or the request for access to the applications owned by FREMAP that you make may not be attended to, and any technical incidents that have occurred may not be resolved.

No data will be reported to third parties except in cases where it is necessary to comply with a legal obligation. International transfers of personal data will not be carried out, unless legally required.

• Right of access: The right to obtain confirmation as to whether FREMAP, MUTUAL SOCIETY NO. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE is, or is not processing personal data that concerns you and, in this case, to access that data.
• Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.
• Right of erasure: The right to request the deletion or suppression of your data on the grounds of illegal processing of the same, because the reason for its processing or collection no longer exists, when you revoke your consent or oppose its processing, or when it must be suppressed in compliance with a legal obligation.
• Right of opposition: The right to object, at any time, on grounds relating to your specific situation, to the processing of personal data that concerns you, on the basis of public interest or the legitimate interest of the controller or a third party.
• Right of limitation of the processing: The right to limit the processing of your data, if you contest its accuracy, if the processing is illegal, if your personal data is no longer necessary for the processing purposes, or if you have exercised your right to oppose said data processing.
• Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly-used format that can be digitally read, and to transmit this data to another controller, provided that it is technically possible.
• The right not to be subject to individual automated decisions: The right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.

You may exercise these rights, in writing, together with the copy of a document accrediting your identity, before the Data Protection Officer, whose contact details we have included in the question on this figure.

In addition, you have the right:

• Revoke the consent you have provided: If the legal grounds of the data processing is your consent, you have the right to revoke this.
• Lodge a claim: In all cases, you may turn to the Data Protection Officer, and you also have the right to lodge a claim with the Spanish Data Protection Authority (AEPD).

The only data that will be processed is that which you provide us with in communications addressed to us or on completed forms.

FREMAP, MUTUAL INSURANCE COMPANY No. 61 PARTNERING WITH THE SOCIAL SECURITY INSTITUTE, with registered office at Carretera de Pozuelo, número 61, 28222 Majadahonda (Madrid). Contact us by postal mail at the aforementioned address or by email at the address derechos_arco@fremap.es.

The Data Protection Officer is the person in charge of safeguarding your privacy at our company. If you want to contact him or her, you can do so at dpd@fremap.es or through a letter sent to the address above, including the reference 'Data Protection Officer'.

If you visit our administrative or healthcare centres and we record your image or collect your data at reception or at an access control point, the data relating to your image, full name, National ID No. and organisation or company you belong to will be processed.

If you access the internet via the WiFi connection provided by FREMAP, the data relating to your phone number, email address and IP address will be processed.

To guarantee the security of people, goods and facilities through the video surveillance and controlling visits.

To identify access to the WiFi network, if it is known to have been fraudulently used.

If your image is recorded by video camera, the data will be removed one month after it is recorded by deleting the image, except for recordings related to criminal or administrative offences with regard to public safety, an ongoing criminal investigation or an open legal or administrative proceeding. If your data is collected at reception or at an access control point at our facilities, it will be erased one month after the date it was collected.

In the case of WiFi network access data, the data will be deleted 90 days after it is collected, which is the period deemed necessary to detect possible irregularities.

Our legal capacity to process identification data is based on the legitimate interest provided for in article 6.1.f) of General Data Protection Regulation (EU) 2016/679 to process images using photographic cameras or video cameras and to control physical access in order to safeguard the security of people, goods and facilities, as their interests or rights and fundamental liberties do not prevail over the aforementioned interest.

Our legal capacity to process identification data is based on the consent freely given by the data subject who wishes to use the wifi network provided to him/her (article 6.1.a) of General Data Protection Regulation (EU) 2016/679).

You are obliged to provide your data because we must protect people, goods and facilities. If you do not provide this data, you may not be able to access our facilities for security reasons.

Similarly, if you wish to use the WiFi network provided, you must identify yourself in order to register your access for security reasons.

To Security Forces and Agencies and the Law Courts if criminal or administrative offences have been committed.

We shall not, by any means, internationally transfer your data to third-party countries or to international organisations.

Right of access: Right to obtain confirmation as to whether FREMAP, MUTUA COLABORADORA DE LA SEGURIDAD SOCIAL Nº 61 is processing personal data concerning you or not and, in this case, to access them.

Right of rectification: The right to request the amendment or rectification of your data if they are inaccurate.

Right of erasure: The right to request that your data be erased or deleted due to having been unlawfully processed, because the reason for collecting or processing it no longer exists, if you revoke your consent or object to your data being processed or when it must be deleted to comply with a legal obligation.

Right of opposition: The right to object at any time for reasons related to your particular situation, to personal data concerning you being processed based on a public interest or a legitimate interest of the controller or a third party.

Right to restrict processing: Right to obtain the limitation of the processing of your data, if you contest its accuracy, if the processing is illegal, if personal data are no longer necessary for the purposes of processing or if you have exercised your right to oppose the processing of data.

Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly-used format that can be digitally read, and to transmit it to another data controller, provided it is technically possible.

The right not to be subject to individual automated decisions: The right to object to being the subject of decisions solely based on the automated processing of personal data, including creating profiles, when this decision may legally or significantly affect you.

To exercise the aforementioned rights, you are required to send a written statement to FREMAP, containing:

• identification data,
• a copy of your National Identity Card (DNI) or another official document that confirms your identity
• the claim specifying the request,
• address for notification purposes,
• date, and requester's signature.

In the event you exercise your rights through a representative, the request must be accompanied by an express authorisation and a copy of the National Identity Card (DNI) of the representative and of the principal.

You can file the statement at any of our centres or hospitals, or send it to FREMAP, by:

• Postal mail: Carretera de Pozuelo, 61, Majadahonda 28222 – Madrid.
• E-mail: derechos_arco@fremap.es

Similarly, you may also contact the Data Protection Officer, by:

• E-mail: dpd@fremap.es

Furthermore, you have the right to:

Revoke the consent you have provided: If the processing is legitimised by such consent, you have the right to revoke the same.

Lodge a claim: You may pursue, in any case, the Data Protection Officer, and you also have the right to lodge a claim with the Spanish Data Protection Authority (AEPD).

From you, when you access our administrative and healthcare centres and your image or data are recorded at reception or during the access control.

From you when you access FREMAP's WiFi network via your device.

FREMAP, Collaborative Mutual Society with Social Security Institute No. 61, with registered office at Carretera de Pozuelo No. 61, 28222, Majadahonda (MADRID).
The Data Protection Officer is the person in charge of safeguarding your privacy at our company.

If you need to contact the Data Protection Officer, you can do so at dpd@fremap.es or by sending a written letter to the aforementioned address, including the reference "Data Protection Area".

Your identification details (name and surname) and contact details (postal or electronic address and telephone number), as well as the name and contact details of the persons included in the application for the exercise of your rights.

To comply with your right to the protection of personal data. In accordance with this, your application will be recorded and processed, making any communications that may be required according to the form of contact provided.

Additionally, if necessary, your data will be processed in order to be able to accredit the exercised right to the Control Authority.

The data will be kept for the time necessary to deal with your request and, in any case, for the period necessary to deal with the claim processes that may be presented against the company.

We are entitled to process your personal data because we are permitted by Article 6.1 c) of Regulation (EU) 2016/679, General Protection of Personal Data, as it is necessary to process this information in order to comply with data protection obligations, specifically in relation to the attention to the rights of the interested parties, in accordance with Articles 12 to 22 of the aforementioned Regulations and Articles 12 to 18 of Organic Law 3/2018, of 5 December, on Personal Data Protection and guaranteeing digital rights.

You are obliged to provide your details, otherwise the exercised right may not be respected.

No data will be reported to third parties except in cases where it is necessary to comply with a legal obligation. In this regard, your data may be transferred to the Control Authority (Spanish Data Protection Agency), the Management and Guardianship Body of the Mutual Society, the Ministry of Employment and Social Security, its subsidiary bodies, courts and tribunals upon request or in defence of legal or administrative proceedings, and security forces and bodies in the event of civil, criminal or administrative offences (Article 6.1.c) and f) of Regulation (EU) 2016/679 on General Data Protection).

International transfers of personal data will not be carried out, unless legally required.

Right of access: The right to obtain confirmation on whether FREMAP, MUTUA COLABORADORA DE LA SEGURIDAD SOCIAL NO. 61 is processing personal details that concern you, and, if so, the right to access such data.

Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.

Right of erasure: The right to request that your details be erased or deleted due to the unlawful processing of data, the disappearance of the purpose that gave rise to its processing or collection, when you revoke your consent or oppose to the data processing, or when they must be deleted in compliance with a legal obligation.

Right of opposition: The right to oppose, at any time, for reasons related to your particular situation, to personal data concerning you to be processed based on a public interest or a legitimate interest of the data processing controller or a third party.

Right of limitation of the processing: The right to obtain the limitation of the data processing, if you contest its accuracy, if the processing is unlawful, if your personal data is no longer required for processing purposes, or if you have exercised your right to oppose to the data processing.

Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly-used format that can be digitally read, and to transmit this to another controller, provided that it is technically possible.

The right not to be subject to individual automated decisions: The right to oppose being subject to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.

You may exercise these rights, in writing, together with a copy of a document accrediting your identity, before the Data Protection Officer, whose contact details we have included in the question on this figure.

Furthermore, you have the right to:

Revoke the consent you have provided: If the legal grounds of the processing is your consent, you have the right to revoke this.

Lodge a claim: You can always contact the Data Protection Officer, and you also have the right to file a claim with the Spanish Data Protection Agency.

Of you, yourself, when you ask us in writing to exercise a right to the protection of personal data (access, rectification, erasure, objection, limitation of processing, portability and the right not to be subjected to automated individual decisions).

FREMAP, MUTUAL SOCIETY No. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE, with registered office in Carretera de Pozuelo No. 61, 28222 Majadahonda (Madrid). Write to us at the indicated address, or email us on derechos_arco@fremap.es.

The Data Protection Officer is the person in charge of safeguarding security in our company. If you want to contact him or her, you can do so at dpd@fremap.es or by sending a letter to the above address and including the reference "Data Protection Officer".

The personal data that will be processed for managing a detected security incident will be your identification, full name, DNI/NIE, contact details, address, telephone number and professional email address and professional or employment data, such as your position or role within the company.

To manage security breaches that may occur in the company.

Your details will be stored for as long as needed to manage the detected incident and, in any case, for the statutes of limitation of actions that may be incurred against the Mutual Company.

Because the data processing is needed to meet the Mutual Company's legal obligations (article 6.1.c) of Regulation (EU) 2016/679 on General Data Protection).

You are obliged to provide the information required for the resolution of the incident, as otherwise it would not be possible to resolve it properly or comply with legal obligations attributed to the Mutual Company.

Your data may be communicated to the Spanish Data Protection Agency in compliance with obligations legally attributed by Data Protection regulations, and, if the security incident could represent a high risk to the rights and freedoms of third parties, the implications and the information related thereto will be notified to the data subjects.

To security forces and bodies. Courts and Tribunals in the case of criminal or administrative infractions.

We will not make any international transfers of data to third countries or international organisations.

Right of access: The right to obtain confirmation on whether FREMAP, MUTUA COLABORADORA DE LA SEGURIDAD SOCIAL NO. 61 is processing personal details that concern you, and, if so, the right to access such data.

Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.

Right of erasure: The right to request that your details be erased or deleted due to the unlawful processing of data, the disappearance of the purpose that gave rise to its processing or collection, when you revoke your consent or oppose to the data processing, or when they must be deleted in compliance with a legal obligation.

Right of opposition: The right to oppose, at any time, for reasons related to your particular situation, to personal data concerning you to be processed based on a public interest or a legitimate interest of the data processing controller or a third party.

Right of limitation of the processing: The right to obtain the limitation of the data processing, if you contest its accuracy, if the processing is unlawful, if your personal data is no longer required for processing purposes, or if you have exercised your right to oppose to the data processing.

Right of portability of the data: The right to receive the personal data held on you in a structured format, in common use and machine readable, and to transfer them to another controller, provided this is technically possible.

The right not to be subject to individual automated decisions: The right to oppose to being the subject of decisions based on the automated processing of personal data, including the elaboration of profiles, when this decision can affect you legally or significantly.

To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

• identification data,
• a copy of your National Identity Card (DNI) or another official document that confirms your identity
• the claim specifying the request,
• address for notification purposes,
• date, and requester's signature.

If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

• Postal mail: Carretera de Pozuelo, 61, Majadahonda 28222 – Madrid.
• E-mail: derechos_arco@fremap.es

Similarly, you may also contact the Data Protection Officer, by:

• E-mail: dpd@fremap.es

Furthermore, you have the right to:

Revoke the consent you have provided: If the legal grounds of the data processing is your consent, you have the right to revoke this.

Lodge a claim: You can always contact the Data Protection Officer, and you also have the right to file a claim with the Spanish Data Protection Agency.

Directly by you, your company or the entity you work for or collaborate with, and from the Social Security Fund.

FREMAP, Mutual Society Collaborating with the Social Security Institute no. 61, with registered office at Carretera de Pozuelo no. 61, 28222, Majadahonda (MADRID).

The Data Protection Officer is the person responsible for safeguarding your privacy at our company. If you need to contact the Mutual Society, you can do so at dpd@fremap.es, or by letter sent to the previous address, including the reference "Data Protection Area."

Your identification details (full name) and contact details (postal or electronic address and telephone number), as well as the identification and contact details of the persons listed in the complaint and the employment details mentioned.

To manage the complaints received regarding possible risks or breaches of the FREMAP Catalogue of Forbidden Beams, within the framework of the Plan for the Prevention of Criminal Charges implemented by FREMAP. Accordingly, your data will be processed to process the communications and complaints received in the Communication and Complaint Channel and to open the corresponding investigation file, where applicable.

The data will be stored in the Communication and Reporting Channel system only for the time required to decide on the origin of initiating an investigation into the reported facts. In any case, three months after the data is entered, the communication and reporting channel system will be deleted. If it is necessary to keep it in order to continue the investigation or to determine possible responsibilities and to attend to the claim processes that Page 2 of 3 may present against the company, they will be dealt with in a different environment by the Regulatory Compliance Committee, the body responsible for the investigation.

We are entitled to process your personal data because this is permitted by article 6,1 c) of the General Protection Regulation (EU) 2016/679 Of Personal Data, as it is necessary to process it in order to comply with obligations in the field of criminal prevention, in accordance with the provisions of article . 31 bis of Organic Law 10/1995, of 23 November, of the Penal Code, after reform operated by LO 1/2015.

Knowledge of your personal data facilitates the investigation of the reported facts, however you are not obliged to provide your data.

No data will be disclosed to third parties except in cases where it is necessary to comply with a legal obligation. In this regard, your data may be transferred to the Management and Guardianship Body of the Mutual Society, the Ministry of Employment and Social Security, to its Subordinate bodies, to Courts and Tribunals on request or in defence of judicial or administrative processes and to Security Forces and Bodies in the event of civil and criminal offences Or administrative (article 6.1.c) and f) of the General Data Protection Regulation (EU) 2016/679.

International transfers of personal data will not be carried out, unless legally required.

• Right of access: Right to obtain confirmation as to whether FREMAP, MUTUA COLABORADORA DE LA SEGURIDAD SOCIAL Nº 61 is processing personal data concerning you or not and, in this case, to access them.
• Right of rectification: Right to request the modification or rectification of your data if they are inaccurate.
• Right of erasure: The right to request that your data be deleted or deleted due to illegal data processing, due to the disappearance of the purpose that led to the processing or collection, when you withdraw your consent or object to it being processed or when it must be deleted in compliance with a legal obligation.
• Right of opposition: The right to object at any time for reasons related to your particular situation, to personal data concerning you being processed based on a public interest or a legitimate interest of the controller or a third party.
• Right of limitation of the processing: The right to obtain the limitation of the processing of your data, if you contest its accuracy, if the processing is illegal, if personal data are no longer necessary for the purposes of the processing or if you have exercised your right to oppose the processing of data.
• Right of portability of the data: The right to receive the personal data that concern you in a structured format, for common use and mechanical reading, and to transfer it to another controller, whenever technically possible.
• The right not to be subject to individual automated decisions: The right to object to decisions based solely on the automated processing of personal data, including profiling, when this decision may affect you legally or significantly.

You can exercise these rights, in writing, together with a copy of a document that accredits your identity, before the Data Protection Officer whose contact details we have included in the question on this figure.

In addition, you have the right:

• Revoke the consent you have provided: If the processing has its legitimacy in consent, it has the right to revoke it.
• Lodge a claim: You can in any case go to the Data Protection Officer, and you also have the right to file a claim with the Spanish Data Protection Agency.

Of yourself when you inform us when you send the report. They may also proceed from the complaint made by third parties when expressly mentioned.

FREMAP, Mutual Society Collaborating with the Social Security Institute no. 61, with registered office at Carretera de Pozuelo no. 61, 28222, Majadahonda (MADRID).

The Data Protection Officer is the person responsible for safeguarding your privacy at our company. If you need to contact the Mutual Society, you can do so at dpd@fremap.es, or by letter sent to the previous address, including the reference "Data Protection Area."

Your identification data (name and surname) and health data (body temperature, illnesses or disorders that may be symptoms of SARS-CoV-2 infection and serological or test results that are prescribed or provided and that allow us to determine whether the disease has been contracted and is in a contagious period).

For the prevention and control of SARS-CoV-2 infection, in accordance with the recommendations of the Health Authorities; Protection of the health of people who carry out their functions or provide services in the centre; And compliance with Occupational Risk Prevention obligations.

The data collected will be recorded in your medical history where it will be stored indefinitely, taking into account the healthcare purpose of the History.

We are entitled to process your personal data because we are permitted by Article 6.1 e) of Regulation (EU) 2016/679, General Data Protection Regulation, as it is necessary to process this information in order to comply with the general interests of public health, in relation to Article 9.2 h) of the aforementioned Regulation.

In the event that you provide services to the Mutual Society, this processing is necessary in order to comply with obligations related to the health and safety of workers, being entitled to process your data as stated in articles 6.1 c) and 9.2 b) of Regulation (EU) 2016/679 on Personal Data Protection.

Knowledge of your state of health is necessary in order to adopt the appropriate measures for the prevention and control of the SARS-CoV-2 infection, so you must provide the information that permits us to know your medical situation, collaborating in the prevention and control of the pandemic.

No data will be reported to third parties except in cases where it is necessary to comply with a legal obligation. In this regard, your data may be transferred to the Public Health Services and Health Authorities and Services with responsibilities in the area of Occupational Risk Prevention.

International transfers of personal data will not be carried out, unless legally required.

• Right of access: The right to obtain confirmation as to whether FREMAP, MUTUAL SOCIETY NO. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE is, or is not processing personal data that concerns you and, in this case, to access that data.
• Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.
• Right of erasure: The right to request the deletion or suppression of your data on the grounds of illegal processing of the same, because the reason for its processing or collection no longer exists, when you revoke your consent or oppose its processing, or when it must be suppressed in compliance with a legal obligation.
• Right of opposition: The right to object, at any time, on grounds relating to your specific situation, to the processing of personal data that concerns you, on the basis of public interest or the legitimate interest of the controller or a third party.
• Right of limitation of the processing: The right to limit the processing of your data, if you contest its accuracy, if the processing is illegal, if your personal data is no longer necessary for the processing purposes, or if you have exercised your right to oppose said data processing.
• Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly-used format that can be digitally read, and to transmit this data to another controller, provided that it is technically possible.
• The right not to be subject to individual automated decisions: The right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.

You may exercise these rights, in writing, together with the copy of a document accrediting your identity, before the Data Protection Officer, whose contact details we have included in the question on this figure.

In addition, you have the right:

• Revoke the consent you have provided: If the legal grounds of the data processing is your consent, you have the right to revoke this.
• Lodge a claim: In all cases, you may turn to the Data Protection Officer, and you also have the right to lodge a claim with the Spanish Data Protection Authority (AEPD).

Of yourself when you give us a telephone call or when you visit a FREMAP centre.

The Data Processing Officer is the Ministry of Health (www.mscbs.go.es). FREMAP, Collaborative Mutual Society with Social Security Institute No. 61, with registered office at Carretera de Pozuelo No. 61, 28222, Majadahonda (MADRID), will be responsible for the processing of your data.

If you wish to contact the FREMAP Data Protection Officer, you can do so via the mailbox dpd@fremap.es, or through a letter sent to the previous address, including the reference "Data Protection Area".

Your identification details (name and surname) and contact details (postal or electronic address and telephone number), as well as your health details (date of vaccination and possible adverse effects after vaccination).

Your data will be processed by the Controller (Ministry of Health) in order to be able to inject you with the COVID-19 vaccination, collaborating with the Public Health Services in the Coronavirus vaccination campaign in Spain. Accordingly, your data will be processed to verify that you are a company worker or a self-employed worker associated with the Mutual Society and that you can receive the vaccine, as well as be monitored for any possible side effects or adverse reactions, recording these circumstances for subsequent communication to the competent Health Authorities.

Your personal data will be retained as long as necessary to provide the healthcare treatment recommended to the Mutual Society by the Health Authorities, and to determine any liabilities that may arise from this purpose and data processing.

We are entitled to process your personal data as it is necessary to fulfil a mission carried out in the essential public interest, in the field of Public health (Article 6.1 c) and Article 9.2 g) of the General Data Protection Regulation (EU) 2016/679, taking into account the situation of pandemic that has been experienced, and the general objective of the COVID-19 Vaccination in Spain to reduce morbidity and mortality caused by this disease, protecting the most vulnerable groups through COVID-19 Vaccination.

Vaccination is voluntary, you are not obliged to provide your data. If you do not provide your data, we cannot verify whether you belong to the group protected by FREMAP and proceed to carry out the COVID-19 vaccination.

Your data will be communicated to the Autonomous Health Departments, which are dependent on the Ministry of Health, registering in the computer system enabled by the Departments the information relating to the act of vaccination and, where applicable, to serious adverse reactions that you communicate. No other communication of personal data or international transfers of personal data will be carried out, unless legally required.

Data Protection rights must be exercised before the Data Controller, who is the Ministry of Health, the competent body to collect data until the end of the health crisis. You can contact the Ministry of Health to exercise the following rights:

• Right of access: The right to obtain confirmation as to whether or not personal data concerning you is being processed and, in such case, to access it.
• Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.
• Right of erasure: The right to request the deletion or suppression of your data on the grounds of illegal processing of the same, because the reason for its processing or collection no longer exists, when you revoke your consent or oppose its processing, or when it must be suppressed in compliance with a legal obligation.
• Right of opposition: The right to object, at any time, on grounds relating to your specific situation, to the processing of personal data that concerns you.
• The right to limit the processing of your data, if you contest its accuracy, if the processing is illegal, if your personal data is no longer necessary for the processing purposes, or if you have exercised your right to oppose said data processing.
• Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly-used format that can be digitally read, and to transmit this data to another controller, provided that it is technically possible.
• The right not to be subject to individual automated decisions: The right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.

You can exercise these rights, filling in the form that the Ministry of Health has published on its website

Or, you can request it in person, through the Ministry of Health's physical customer service offices

In addition, you have the right:

• Lodge a claim: In all cases, you may turn to the Data Protection Officer, and you also have the right to lodge a claim with the Spanish Data Protection Authority (AEPD).

From you, by making it available to us at our centres, information is also gathered from the employer company associated with FREMAP or consultancy that provides services to the associated employee's company or self-employed person, and from the TGSS and other Social Security Bodies, when they provide the Mutual Society with the personal data necessary to comply with the legal obligations assigned.