Data Protection

Page content
Decorative image, FREMAP file cabinets

In accordance with its Mission, Vision and Values, FREMAP is committed to maintaining and improving its management model based on continuous improvement and innovation, the key factors of which are excellence in service and excellence in management, within the framework of legislation in force.

This Policy establishes the principles that govern the actions of FREMAP, containing the framework that must prevail in the company regarding personal data protection.

The purpose of the Policy is to guarantee compliance with Regulation (EU) 2016/679, General Data Protection Regulation, as well as the Organic Law on Personal Data Protection in Spain, along with all other applicable legislation. In particular, the objective of the Data Protection Policy is to guarantee the right to data protection for all individuals who deal with FREMAP, ensuring that the right of honour and privacy is respected when processing personal information needed to perform its activities.

Scope of the Privacy Policy

The Policy is applicable to all those who provide services with FREMAP and to third parties who deal with the company in some other way, through service provision agreements or collaboration agreements, covering the scope of all the company's processes and resources.

Principles of action

The Principles pursuant to personal data processing.

  • Principle of legality, loyalty and transparency. Personal data shall be processed lawfully and fairly in accordance with applicable legislation, whereby all data subjects must be informed of the circumstances relating to the processing of their information. In cases where it is mandatory due to applicable legislation, the consent of data subjects must be given before their information is processed.
  • Principle of purpose limitation. Personal data will be collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with those purposes.
  • Principle of data minimisation. Only personal information that is strictly necessary and adequate for the purposes for which it was collected will be processed.
  • Principle of accuracy. Personal data must be accurate and kept up to date. Otherwise, such information must be deleted or amended.
  • Principle of limitation of data retention period. Personal data will not be kept beyond the period necessary for the purposes for which it was collected, unless legally required.
  • Principle of integrity and confidentiality. Personal data will be processed in such a way that ensures its appropriate security, adopting technical and organisational measures that protect it against unauthorised or unlawful processing and against accidental loss, destruction or damage. Furthermore, the personal data collected and processed by FREMAP must be conserved with maximum confidentiality, and cannot be used for any other purposes than those that justified and allowed for its collection, without the possibility for such data to be communicated or transferred to third parties outside of the cases permitted by applicable legislation.

Legal grounds for processing personal data.

FREMAP will only process personal data when at least one of the following circumstances arises:

  • The data subject has consented to the processing of his/her personal data for specific purposes.
  • Processing is necessary for the execution of a contract in which the data subject is a party, or, at the data subject's request, to apply pre-contractual measures.
  • The processing is necessary for compliance with a legal obligation.
  • The processing is required to protect the vital interests of the data subject or another individual.
  • Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
  • Processing is necessary for the purposes of the legitimate interests pursued by FREMAP or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

Consent of the data subject.

When the processing of personal data by FREMAP is based on the data subject's consent, this must be given in a clear affirmative act that reflects the data subject's free, specific, informed and unambiguous will to accept the processing of personal data that concerns him/her, with a declaration in writing, including through digital means, or a verbal declaration. Consent must be given for all processing activities carried out with the data or with the same purposes. When there are multiple purposes to the consent, consent must be given for all of them. FREMAP will be responsible for demonstrating that the data subject provided his/her consent through any means of legally admissible evidence. The interested party will have the right to withdraw his/her consent at any time.

When the processing affects special data categories, particularly those relating to health, genetics or biometrics, and is based on the data subject's consent, this must be given explicitly, through a written declaration signed by the data subject.

Data subjects' rights.

Data transparency and communication to data subjects. The processing of personal data will be transparent in relation to the data subject, providing him/her with information on the processing of their data concisely, transparently, intelligibly and easily accessible, in clear, simple language. When personal data is acquired on a data subject, at the time of acquisition, FREMAP will provide him/her with the following information:

  • The identity of FREMAP as the party responsible for processing the data, and its contact details.
  • Contact details for the Data Protection Officer.
  • Reasons for processing the data.
  • Legal base of the treatment.
  • Recipients of the data.
  • The rights of the affected persons.

In the event that the data is not obtained from the data subject, but instead as a result of a lawful transfer, or from publicly accessible sources, FREMAP will inform the data subjects of said circumstances, and the source of the data.

Rights of access, rectification, deletion, opposition, portability, limitation of processing and not being subject to automated individual decisions. FREMAP will enable data subjects to be able to exercise their rights, establishing the internal procedures required to do so for this purpose.

Data treatment by third parties.

Prior to contracting any service provider who accesses or can access personal data held by FREMAP, and during the term of the contractual relationship, measures must be adopted to ensure that the data processing by the processor is carried out in accordance with applicable regulations and the relationship is formalised through a contract. This contract will contain the obligations bestowed upon the processor by applicable regulations.

Security breaches or loss of personal data.

When FREMAP becomes aware of an incident that entails the accidental or unlawful destruction, loss or alteration of personal data, or the unauthorised communication or access to said data represents a high risk to the rights and freedoms of the data subjects, it must, without undue delay and, if possible, within 72 hours of becoming aware of it, report the security breach to the Spanish Data Protection Agency. Cases where it is unlikely that the security breach of personal data represents a risk to the rights and freedoms of individuals will be exempt. If such notification is not possible within 72 hours, the reasons for the delay will be indicated, and information may be provided in phases without any further undue delay.

Furthermore, if the security breach could entail a high risk to the rights and freedoms of data subjects, FREMAP will communicate said breach to personal data to each data subject, allowing them to take the necessary precautions.

Said incidents must be documented, and measures will be taken to rectify and alleviate the potential negative effects on data subjects, following the internal protocols established for this purpose.

Prevention and Control

Proactive responsibility.

FREMAP will keep a Record of processing activities, which will contain detailed information on each data processing action under the framework of its activity. The Record of activities will be constantly kept up to date

Likewise, FREMAP will conduct an Assessment of the risk level that the company is exposed to in order to determine the technical and organisational measures that should be applied, ensuring privacy by default and by design. When the risk analysis conducted reveals that a kind of data processing entails a high risk to the rights and freedoms of individuals, before the processing takes place, FREMAP will perform an assessment of the impact of the processing operations on the protection of personal data. FREMAP will check whether such processing still complies with the Impact Assessment, and, in any case, will review this when there is a change in the risk level of the processing.

The functions of the Data Protection Officer.

The Data Protection Officer will be responsible for controlling and overseeing the provisions of this Policy, with the following duties legally in place:

  • a) to inform and advise FREMAP or the processor and the employees who carry out processing of their obligations pursuant to this Regulation and to other Union or Member State data protection provisions.
  • b) to monitor compliance with this Regulation, with other Union or Member State data protection provisions and with the policies of the controller or processor in relation to the protection of personal data, including the assignment of responsibilities, awareness-raising and training of staff involved in processing operations, and the related audits.
  • c) to provide advice where requested as regards the data protection impact assessment and monitor its performance.
  • d) cooperating with the Spanish Data Protection Authority.
  • e) to act as the contact point for the Spanish Data Protection Agency on issues relating to processing, including the prior consultation referred to data processing, and to consult, where appropriate, with regard to any other matter.

In the performance of his or her tasks, the data protection officer shall have due regard to the risk associated with processing operations, taking into account the nature, scope, context and purposes of processing.

Implementation and Dissemination

The Data Protection Policy must be known by all employees, as well as those who collaborate with FREMAP. It must be communicated to the whole organisation, and must be available in the channels accessible by all employees and other stakeholders.

This Policy is understood as implemented and maintained from today, with the full commitment of Management.

Majadahonda, 22 May 2018

Informational Notices

Processing of third party data

In the event that you communicate to FREMAP personal data from third parties, whatever the purpose of the communication, you are hereby informed of the corresponding obligation to provide the affected party with information regarding the purpose of the communication and the legal standing justifying this, identifying FREMAP Mutual Society Collaborating with the Social Security Institute as the recipient of the communication.

The personal data provided must be adequate, relevant and not excessive, in accordance with the requirements of Regulation (EU) 2016/679 on General Data Protection. You are responsible for the accuracy and updated nature of the personal data you communicate, and FREMAP is exempt from the obligation to inform the affected parties, in accordance with the provisions of Article 14.5 a) of the aforementioned Regulations.

Likewise, we inform you of FREMAP's exemption from the duty to inform, as provided for in Article 14,1 of Regulation (EU) 2016/679 on General Data Protection, in cases where the personal data received by the Mutual Society is to be used for statistical purposes and due to the concurrent circumstances, communicating information regarding the treatment to each of the affected parties is impossible or involves a disproportionate effort, pursuant to Article 14.5 b) of the aforementioned Regulation.

Additional information on processing personal data

Provisions and healthcare

  • FREMAP, MUTUAL SOCIETY No. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE, with registered office in Carretera de Pozuelo No. 61, 28222 Majadahonda (Madrid). Contact us by post at the address indicated, or sending an email to the address derechos_arco@fremap.es.

    The Data Protection Officer is the person responsible for safeguarding your privacy in our company. If you want to contact him or her, you can do so at dpd@fremap.es or by writing to the aforementioned address, including the reference 'Data Protection Officer'.

  • If you receive Social Security benefits and go to our administrative or healthcare centres:

    Full name, national ID number or passport, address and email address, telephone number and signature, family information, age, gender, date of birth, employment details, bank details, health details related to the healthcare provision and financial information, along with other details needed to verify the origin of such information.

    If you do not receive Social Security benefits and we attend to you in one of our centres:

    Full name, national ID number or passport, address and email address, telephone number, signature, age, gender, health information related to the healthcare provision and insurance details.

  • If you receive Social Security benefits and go to our administrative or healthcare centres:

    To collaborate with the protective actions of Social Security in terms of healthcare, and in managing economic provisions for professional contingencies, in the preventive activity, in professional recovery where relevant and in financial provisions for temporary disability derived from common contingencies due to risk during pregnancy and risk during breastfeeding, for the cessation of business activity of self-employed workers, for looking after minors with cancer or other serious illnesses, and all other activities of Social Security legally attributed to them by Royal Legislative Decree 8/2015, of 30 October, which approves the Amended Text of the General Social Security Act and its implementing regulations, thus complying with all the purposes related to this collaboration.

    For the purpose of improving management, your data may be used for surveys on quality (Article 6.1) of the General Data Protection Regulation (EU) 2016/679.

    To inform your company, or any natural or legal person who performs administrative tasks on behalf of the company, of any information needed to comply with the legally-established obligations pursuant to Social Security, of the issuance of occupational accident reports with the corresponding leave, of reports on occupational accidents without leave, of any economic information required to recognise the right to the temporary disability allowance, and to report the start and end of the payout obligation of said provision, only if you provide your consent.

    To inform the Insurance Company responsible for the costs derived from the accident, whether by regulations or contractually, of any medical information or documentation regarding the injuries resulting from the accident beyond that included in regulations, only if you provide your consent, with the exclusive purpose of covering the costs incurred during your inpatient or outpatient healthcare.

    If you do not receive Social Security benefits and we see you in one of our healthcare centres, to provide emergency healthcare and manage it administratively.

  • If you receive Social Security benefits and visit one of our administrative or healthcare centres.

    We store the data for as long as we provide your healthcare, and manage the provisions derived from your condition as a beneficiary of protective action from Social Security, and for the storage periods establish by law, in accordance with the provisions of article 16.5 of Act 41/2002, of 14 November, on the basic regulations of patient autonomy and the rights and obligations regarding clinical information and documentation, and article 16 of Royal Decree 1993/1995, of 7 December, which approves the Regulation on the Collaboration of Mutual Companies with Social Security, unless different regional regulations prevail, and for the prescription periods of actions derived from the contingencies arisen.

    If you do not receive Social Security benefits and we attend to you in one of our centres:

    We will store the data for five years from the time of the healthcare provision in accordance with the provisions of article 16.5 of Act 41/2002, of 14 November, on the basic regulations of patient autonomy and the rights and obligations regarding clinical information and documentation, and article 16 of Royal Decree 1993/1995, of 7 December, which approves the Regulation on the Collaboration of Mutual Companies with Social Security, unless regional regulations stipulate a different period.

  • If you receive Social Security benefits and go to our administrative or healthcare centres:

    We are legally authorised to process health-related data by virtue of Article 9.2.b) of Regulation (EU) 2016/679 on General Data Protection, regarding Article 6.1 c) and f), whereby processing is necessary for the purposes of carrying out the obligations and exercising specific rights in the field of social security and social protection, as well as fulfilling legitimate interests related with the correct assessment of the contingencies of the same, and by virtue of your consent in cases where this is required to communicate medical information and documentation to Insurance Companies regarding injuries resulting from the accident beyond the stipulations of regulations, with the exclusive objective of covering the costs incurred during your inpatient or outpatient healthcare, under the scope of the provisions of Article 9.2 a) of said Regulation.

    And we are entitled to process the rest of your data because Article 6.1.c) of said Regulations allows us to do so, as we are obliged to comply with Royal Decree 8/2015, of 30 October, approving the revised text of the General Law on Social Security and Royal Decree 860/2018, of 13 July, regulating the preventive activities of Social Security protective action to be carried out by Mutual Societies Collaborating with the Social Security Institute and Royal Decree 1993/1995, of 7 December, on the Collaboration of Mutual Societies with the Social Security Institute.

    Furthermore, if you provide your consent under the scope of article 6.1.a) of said Regulation, we will be authorised to inform your company on any information required for it to meet the legal obligations, statistics and quality surveys they carry out.

    If you do not receive Social Security benefits and visit our healthcare or administrative centres to receive healthcare, we will be authorised to process data related to your health by virtue of article 9.2.c) of Regulation (EU) 2016/679 on General Data Protection, given that the processing is needed to protect your vital interests.

  • If you receive Social Security benefits and go to our administrative or healthcare centres:

    You are obliged to provide your data so that we can provide you with healthcare and financial provisions. Refusal to provide such data impedes access to the financial and healthcare provisions that you have the right to access, on the basis of Social Security legislation.

    If you do not receive Social Security benefits and we see you in our healthcare centres:

    You are obliged to provide your data so that we can provide you with the healthcare required, as refusal to do so will prevent us from being able to provide this healthcare.

  • If you receive Social Security benefits and go to our administrative or healthcare centres:

    To the Ministry of Employment and Social Security, Bodies and Entities making up the Social Security Institute, other Mutual Societies collaborating with the Social Security Institute, and insurance companies legally or contractually responsible for the costs arising from the accident suffered, with the sole aim of recovering the expenses incurred during the outpatient or hospital healthcare (Royal Decree 8/2015, of 30 October, approving the revised text of the General Law on Social Security and Royal Decree 1993/1995, of 7 December, on Collaboration of Mutual Societies with the Social Security).

    To your company, in relation to the preventive activities of the protective action of the Social Security Institute legally attributed to FREMAP by the social security regulations, in favour of associated employers and their dependent workers, as well as of associated self-employed workers, aimed at assisting them in controlling and, where applicable, reducing work-related accidents and work-related illnesses by the Social Security Institute, including advisory activities (Art. 82.3 of Royal Decree 8/2015, of 30 October, approving the Consolidated Text of the General Social Security Law and Royal Decree 860/2018, of 13 July, regulating the preventive activities of the protective action of the Social Security Institute to be carried out by Mutual Societies collaborating with the Social Security Institute

    Similarly, if you give your consent, the data may be disclosed to your company to enable it to fulfil its legally established obligations relating to Social Security (Royal Decree 8/2015, of 30 October, approving the revised text of the General Social Security Act and Royal Decree 1993/1995, of 7 December, on the Collaboration of Mutual Societies with the Social Security Institute).

    In addition, your personal data will be transferred or communicated to those recipients who must receive this under a legal or contractual obligation to provide the services required by the Mutual Society.

    We will not make any international transfers of data to third countries or international organisations.

    If you do not receive Social Security benefits and we attend to you in one of our centres:

    To the corresponding public health service.

    We will not make any international transfers of data to third countries or international organisations.

  • Right of access: The right to obtain confirmation on whether FREMAP, MUTUA COLABORADORA DE LA SEGURIDAD SOCIAL NO. 61 is processing personal details that concern you, and, if so, the right to access such data.

    Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.

    Right of erasure: The right to request that your details be erased or deleted due to the unlawful processing of data, the disappearance of the purpose that gave rise to its processing or collection, when you revoke your consent or oppose to the data processing, or when they must be deleted in compliance with a legal obligation.

    Right of opposition: The right to oppose, at any time, for reasons related to your particular situation, to personal data concerning you to be processed based on a public interest or a legitimate interest of the data processing controller or a third party.

    Right of limitation of the processing: The right to obtain the limitation of the data processing, if you contest its accuracy, if the processing is unlawful, if your personal data is no longer required for processing purposes, or if you have exercised your right to oppose to the data processing.

    Right of portability of the data: The right to receive the personal data held on you in a structured format, in common use and machine readable, and to transfer them to another controller, provided this is technically possible.

    The right not to be subject to individual automated decisions: The right to oppose to being the subject of decisions based on the automated processing of personal data, including the elaboration of profiles, when this decision can affect you legally or significantly.

    To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

    • identification data,
    • a copy of your National Identity Card (DNI) or another official document that confirms your identity
    • the claim specifying the request,
    • address for notification purposes,
    • date, and requester's signature.

    If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

    The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

    Similarly, you may also contact the Data Protection Officer, by:

    Furthermore, you have the right to:

    revoke the consent given: If the legal grounds of the processing is your consent, you have the right to revoke this.

    file a claim: You can always contact the Data Protection Officer, and you also have the right to file a claim with the Spanish Data Protection Agency.

  • If you receive Social Security benefits and go to our administrative or healthcare centres:

    We acquire the data directly from you in our administrative and healthcare centres, and in admission locations and provision managers, or digitally when you provide your data in any of the forms.

    From the Social Security Fund, the National Social Security Institute and Public Health Services.

    From companies or labour consultants responsible for managing human resources, when said parties fill in the healthcare application form, or report on how the accident happened, in cases of occupational accidents and other cases stipulated by law.

    If you do not receive Social Security benefits and we attend to you in one of our centres:

    From you, when you access our administrative and healthcare centres.

Companies and Professionals

  • FREMAP, MUTUAL SOCIETY No. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE, with registered office in Carretera de Pozuelo No. 61, 28222 Majadahonda (Madrid). Contact us by post at the address indicated, or sending an email to the address derechos_arco@fremap.es.

    The Data Protection Officer is the person responsible for safeguarding your privacy in our company. If you want to contact him or her, you can do so at dpd@fremap.es or by writing to the aforementioned address, including the reference 'Data Protection Officer'.

  • The personal data that will be processed during our activity consists in your identification, full name, DNI/NIE and contact details, and professional address, telephone number and email address.

    Please provide this information on data protection to the people in your company participating in the relationship with us (contact persons)

  • In the case of business or administrative relations with us, in your capacity as a representative of a company or individual businessperson, to maintain our administrative or contractual relationship.

    In the case of supplier contacts, partner companies, affiliated individual business operators or authorised RED agents, data will be processed in order to maintain the relationship with the company or individual business operator the RED agent acts on behalf of and to comply with legal and contractual obligations.

  • The data will be stored for the time required to meet the purpose for which it was collected, to determine the possible liabilities and to attend to the claim against the company, which could occur at a future date.

    In any case, the data will need to be stored for the time needed for FREMAP to carry out any legal or administrative actions derived from the account audits and compliance stipulated in article 98.2 of Royal Legislative Decree 8/2015, of 30 October, which approves the Amended Text on the General Social Security Act.

    The provisions of Royal Decree 1993/1995, of 7 December, which approves the Regulation on the Collaboration of Mutual Companies, will be applicable, along with those of Article 1964 of the Civil Coe.

  • If you have a business or administrative relationship with us, in your quality as a representative of a company or individual businessperson, we are legally authorised by virtue of article 6.1 b) and c) of Regulation (EU) 2016/679 on General Data Protection, whereby this is needed to comply with legal and contractual obligations, and article 6.1 f), whereby the processing is needed to satisfy the legitimate interests of FREMAP.

    In the case of contact persons for a supplier company, an associated company or an individual associated businessperson, we are legally authorised by virtue of article 6.1 b), c) and f) of Regulation (EU) 2016/679 on General Data Protection, whereby this is necessary for the execution of a contract, application of pre-contractual measures at the request of the data subject, or to comply with legal obligations and legitimate interests.

  • You are obliged to provide your data or consent to the processing of your data as this is required to formalise and maintain the relationship with you or with the company you represent, or through which you are acting, as it would not be possible to attend to you correctly otherwise.

  • Your personal data are processed at our company. To the extent stipulated by Law, we can transfer your data to recipients external to the mutual company. These recipients can include service providers (which, in accordance with contracts in place, provide services including the processing of personal data) and public bodies, insofar that we are obliged to communicate such data by virtue of a legal obligation.

    We will not make any international transfers of data to third countries or international organisations.

  • Right of access: The right to obtain confirmation on whether FREMAP, MUTUA COLABORADORA DE LA SEGURIDAD SOCIAL NO. 61 is processing personal details that concern you, and, if so, the right to access such data.

    Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.

    Right of erasure: The right to request that your details be erased or deleted due to the unlawful processing of data, the disappearance of the purpose that gave rise to its processing or collection, when you revoke your consent or oppose to the data processing, or when they must be deleted in compliance with a legal obligation.

    Right of opposition: The right to oppose, at any time, for reasons related to your particular situation, to personal data concerning you to be processed based on a public interest or a legitimate interest of the data processing controller or a third party.

    Right of limitation of the processing: The right to obtain the limitation of the data processing, if you contest its accuracy, if the processing is unlawful, if your personal data is no longer required for processing purposes, or if you have exercised your right to oppose to the data processing.

    Right of portability of the data: The right to receive the personal data held on you in a structured format, in common use and machine readable, and to transfer them to another controller, provided this is technically possible.

    The right not to be subject to individual automated decisions: The right to oppose to being the subject of decisions based on the automated processing of personal data, including the elaboration of profiles, when this decision can affect you legally or significantly.

    To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

    • identification data,
    • a copy of your National Identity Card (DNI) or another official document that confirms your identity
    • the claim specifying the request,
    • address for notification purposes,
    • date, and requester's signature.

    If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

    The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

    Similarly, you may also contact the Data Protection Officer, by:

    Furthermore, you have the right to:

    revoke the consent given: If the legal grounds of the processing is your consent, you have the right to revoke this.

    file a claim: You can always contact the Data Protection Officer, and you also have the right to file a claim with the Spanish Data Protection Agency.

  • If you have a business relationship with us, directly from you when you provide your information before entering into a contract. If you have an administrative relationship with us, in your capacity as representative of a company, when you fill in the association application form.

    If you have an administrative relationship with us, in your capacity as an individual businessperson, from Social Security when you register with the Special Scheme for Self-Employed Workers.

    If you are the contact person for a provider company, mutual company or individual businessperson, the data is provided by the company you represent or are acting through. If you are an authorised RED agent for a mutual insurance partner company or are self-employed and affiliated to the mutual insurance company, your data will be supplied to us by the Social Security General Treasury.

Job candidates

  • FREMAP, MUTUAL SOCIETY No. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE, with registered office in Carretera de Pozuelo No. 61, 28222 Majadahonda (Madrid). Contact us by post at the address indicated, or sending an email to the address derechos_arco@fremap.es.

    The Data Protection Officer is the person responsible for safeguarding your privacy in our company. If you want to contact him or her, you can do so at dpd@fremap.es or by writing to the aforementioned address, including the reference 'Data Protection Officer'.

  • Identification and contract data, personal characteristics, academic and professional data, image and employment details.

  • The main purpose is the management of staff selection processes and the provision of work positions.

    Furthermore, for video surveillance and access control in facilities for security purposes.

  • The data will be stored for the time needed to comply with the purpose for which it was collected and to determine the potential liabilities that may be derived from said purpose and from the processing of data, for as long as the tax subject does not exercise his/her right of removal

  • The data processing needed to execute a contract to which the data subject is a party, or, at the request of the latter, for pre-contractual measures (article 6.1.b) of Regulation (EU) 2016/679, on General Data Protection).

    The data processing is required to comply with a legal obligation applicable to the data processing controller. (article 6.1.c) of Regulation (EU) 2016/679 on General Data Protection): Royal Legislative Decree 2/2015, of 23 October, which approves the amended text of the Law on the Statute of Workers' Rights.

    In relation to the special data categories (health), where relevant, the processing required to comply with obligations and exercise rights in the field of occupational law, security and social protection (article 9.2.b) of Regulation (EU) 2016/679 on General Data Protection).

  • You are obliged to provide your data as it is required to manage candidacies and develop the corresponding selection process. If you do not provide your data, we will not be able to manage your participation in the selection processes.

  • Your data will not be transferred to third parties, other than transportation companies, travel agencies and hotel establishments, for trips made during the selection processes in which you participate and which are necessary.

    We will not make any international data transfers to third countries or international organisations

  • Right of access: The right to obtain confirmation on whether FREMAP, MUTUA COLABORADORA DE LA SEGURIDAD SOCIAL NO. 61 is processing personal details that concern you, and, if so, the right to access such data.

    Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.

    Right of erasure: The right to request that your details be erased or deleted due to the unlawful processing of data, the disappearance of the purpose that gave rise to its processing or collection, when you revoke your consent or oppose to the data processing, or when they must be deleted in compliance with a legal obligation.

    Right of opposition: The right to oppose, at any time, for reasons related to your particular situation, to personal data concerning you to be processed based on a public interest or a legitimate interest of the data processing controller or a third party.

    Right of limitation of the processing: The right to obtain the limitation of the data processing, if you contest its accuracy, if the processing is unlawful, if your personal data is no longer required for processing purposes, or if you have exercised your right to oppose to the data processing.

    Right of portability of the data: The right to receive the personal data held on you in a structured format, in common use and machine readable, and to transfer them to another controller, provided this is technically possible.

    The right not to be subject to individual automated decisions: The right to oppose to being the subject of decisions based on the automated processing of personal data, including the elaboration of profiles, when this decision can affect you legally or significantly.

    To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

    • identification data,
    • a copy of your National Identity Card (DNI) or another official document that confirms your identity
    • the claim specifying the request,
    • address for notification purposes,
    • date, and requester's signature.

    If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

    The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

    Similarly, you may also contact the Data Protection Officer, by:

    Furthermore, you have the right to:

    revoke the consent given: If the legal grounds of the processing is your consent, you have the right to revoke this.

    file a claim: You can always contact the Data Protection Officer, and you also have the right to file a claim with the Spanish Data Protection Agency.

  • Directly from you when you send your CV to FREMAP, when you offer your candidacy through the website, or subsequently when you provide your data in the selection interview, psycho-technical tests, group dynamics or exams carried out, and from employment companies or job boards you may be subscribed to.

External workers and students in internships

  • FREMAP, MUTUAL SOCIETY No. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE, with registered office in Carretera de Pozuelo No. 61, 28222 Majadahonda (Madrid). Write to us at the indicated address, or email us on derechos_arco@fremap.es.

    The Data Protection Officer is the person in charge of safeguarding security in our company. If you want to contact him or her, you can do so at dpd@fremap.es or by sending a letter to the above address and including the reference "Data Protection Officer".

  • Identification and contact details, personal characteristics, academic and professional data, employment details, image and economic, financial and insurance details.

  • Your personal data is processed to manage the internship or services provided in the company.

  • Your details will be stored for the time needed to comply with the purpose for which they were collected, and, where relevant, to attend to the liabilities that may be derived from this purpose and data processing.

  • We are legally authorised to manage your data as it is needed to execute a contract and comply with legal obligations (article 6.1 b) and c) of Regulation 2016/679 on General Data Protection).

  • You are obliged to provide your data in order to manage the internship or service provisions and to comply with the contractual or collaborative relationship.

  • Your personal data will be disclosed to the educational centre you belong to, or to the company with which you have a labour or trade relationship.

    Furthermore, your data may be communicated to the occupational authority when this is requested in compliance with the obligations of the Mutual Company.

    We will not make any international transfers of data to third countries or international organisations.

  • Right of access: The right to obtain confirmation on whether FREMAP, MUTUA COLABORADORA DE LA SEGURIDAD SOCIAL NO. 61 is processing personal details that concern you, and, if so, the right to access such data.

    Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.

    Right of erasure: The right to request that your details be erased or deleted due to the unlawful processing of data, the disappearance of the purpose that gave rise to its processing or collection, when you revoke your consent or oppose to the data processing, or when they must be deleted in compliance with a legal obligation.

    Right of opposition: The right to oppose, at any time, for reasons related to your particular situation, to personal data concerning you to be processed based on a public interest or a legitimate interest of the data processing controller or a third party.

    Right of limitation of the processing: The right to obtain the limitation of the data processing, if you contest its accuracy, if the processing is unlawful, if your personal data is no longer required for processing purposes, or if you have exercised your right to oppose to the data processing.

    Right of portability of the data: The right to receive the personal data held on you in a structured format, in common use and machine readable, and to transfer them to another controller, provided this is technically possible.

    The right not to be subject to individual automated decisions: The right to oppose to being the subject of decisions based on the automated processing of personal data, including the elaboration of profiles, when this decision can affect you legally or significantly.

    To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

    • identification data,
    • a copy of your National Identity Card (DNI) or another official document that confirms your identity
    • the claim specifying the request,
    • address for notification purposes,
    • date, and requester's signature.

    If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

    The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

    Similarly, you may also contact the Data Protection Officer, by:

    Furthermore, you have the right to:

    revoke the consent given: If the legal grounds of the processing is your consent, you have the right to revoke this.

    file a claim: You can always contact the Data Protection Officer, and you also have the right to file a claim with the Spanish Data Protection Agency.

  • If you are a student taking an internship, your details are provided to us by the educational centre you are part of.

    If you are an external worker providing services to FREMAP, your data is provided to us by the company with which you have a labour or trade relationship, a service provider to FREMAP.

Governing and participation bodies

  • FREMAP, MUTUAL SOCIETY No. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE, with registered office in Carretera de Pozuelo No. 61, 28222 Majadahonda (Madrid). Write to us at the indicated address, or email us on derechos_arco@fremap.es.

    The Data Protection Officer is the person in charge of safeguarding security in our company. If you want to contact him or her, you can do so at dpd@fremap.es or by sending a letter to the above address and including the reference "Data Protection Officer".

  • The personal details that will be processed to manage the governing and participation bodies are your identification details (full name, DNI/NIE), contact details (address, telephone number and email address) and professional details.

  • Your details will be processed for the administrative management of governing and administration bodies of the Mutual Company.

  • The data will be stored for the time required to meet the purpose for which it was collected, to determine the possible liabilities and to attend to the claim against the company, which could occur at a future date.

    In any case, the data will need to be stored for the time needed for FREMAP to carry out any legal or administrative actions derived from the account audits and compliance stipulated in article 98.2 of Royal Legislative Decree 8/2015, of 30 October, which approves the Amended Text on the General Social Security Act.

    The provisions of Royal Decree 1993/1995, of 7 December, which approves the Regulation on the Collaboration of Mutual Companies, will be applicable, along with those of Article 1964 of the Civil Coe.

  • Our legal ground for processing your data is based on compliance with legal obligations attributed to the Mutual Company, stipulated in article 6.1 c) of Regulation (EU) 2016/679 on General Data Protection.

  • You are obliged to provide your data as it is required for the administrative management of governing and administration bodies of the Mutual Company. Otherwise, your participation in governing and participation bodies of the Mutual Company would not be possible.

  • Personal data processing also takes place in our company. To the extent provided by law, we can transfer your data to recipients external to the Mutual Company. These recipients can include service providers (which, in accordance with contracts in place, provide services including the processing of personal data) and public bodies, insofar that we are obliged to communicate such data by virtue of a legal obligation.

    We will not make any international transfers of data to third countries or international organisations.

  • Right of access: The right to obtain confirmation on whether FREMAP, MUTUA COLABORADORA DE LA SEGURIDAD SOCIAL NO. 61 is processing personal details that concern you, and, if so, the right to access such data.

    Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.

    Right of erasure: The right to request that your details be erased or deleted due to the unlawful processing of data, the disappearance of the purpose that gave rise to its processing or collection, when you revoke your consent or oppose to the data processing, or when they must be deleted in compliance with a legal obligation.

    Right of opposition: The right to oppose, at any time, for reasons related to your particular situation, to personal data concerning you to be processed based on a public interest or a legitimate interest of the data processing controller or a third party.

    Right of limitation of the processing: The right to obtain the limitation of the data processing, if you contest its accuracy, if the processing is unlawful, if your personal data is no longer required for processing purposes, or if you have exercised your right to oppose to the data processing.

    Right of portability of the data: The right to receive the personal data held on you in a structured format, in common use and machine readable, and to transfer them to another controller, provided this is technically possible.

    The right not to be subject to individual automated decisions: The right to oppose to being the subject of decisions based on the automated processing of personal data, including the elaboration of profiles, when this decision can affect you legally or significantly.

    To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

    • identification data,
    • a copy of your National Identity Card (DNI) or another official document that confirms your identity
    • the claim specifying the request,
    • address for notification purposes,
    • date, and requester's signature.

    If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

    The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

    Similarly, you may also contact the Data Protection Officer, by:

    Furthermore, you have the right to:

    revoke the consent given: If the legal grounds of the processing is your consent, you have the right to revoke this.

    file a claim: You can always contact the Data Protection Officer, and you also have the right to file a claim with the Spanish Data Protection Agency.

  • You provide your details yourself when you apply to form part of a governing and participation body of the Mutual Company.

Institutional Activities, Workshops and Events

  • FREMAP, MUTUAL SOCIETY No. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE, with registered office in Carretera de Pozuelo No. 61, 28222 Majadahonda (Madrid). Write to us at the indicated address, or email us on derechos_arco@fremap.es.

    The Data Protection Officer is the person in charge of safeguarding security in our company. If you want to contact him or her, you can do so at dpd@fremap.es or by sending a letter to the above address and including the reference "Data Protection Officer".

  • Identification and contact details, as well as academic and professional information.

    Similarly, can proceed to the images capture and recording and voice of the people that attend events, meeting, courses or seminars organised by FREMAP.

  • Your details will be used to manage and organise institutional activities, workshops and events held in relation to the activities of the Mutual Company.

  • Your data will be stored for the time required to meet the purpose for which it was collected, to determine the possible liabilities and to attend to the claim against the company, which could occur at a future date.

  • The legal base for the processing of its details is its consent, in accordance with it considered in the article 6.1 a) and article 9.2 a) of the Regulations (EU) 2016/679, General of Data protection, which is why will only be proceeded to its details' processing if expressly you has stated that it consents the same one.

  • You are obliged to provide your details in order to properly manage your enrolment in institutional activities, workshops and events organised by FREMAP. If you do not provide this data, you will not be able to participate.

  • Personal data processing also takes place in our company. To the extent permitted by law, and if you provide your consent, we can communicate your data to recipients external to the Mutual Company. These recipients can include service providers (which, in accordance with contracts in place, provide services including the processing of personal data) and public bodies, insofar that we are obliged to communicate such data by virtue of a legal obligation, or third parties interested in finding out about the activities of FREMAP, through institutional documentation, web applications and social networks.

  • Right of access: The right to obtain confirmation on whether FREMAP, MUTUA COLABORADORA DE LA SEGURIDAD SOCIAL NO. 61 is processing personal details that concern you, and, if so, the right to access such data.

    Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.

    Right of erasure: The right to request that your details be erased or deleted due to the unlawful processing of data, the disappearance of the purpose that gave rise to its processing or collection, when you revoke your consent or oppose to the data processing, or when they must be deleted in compliance with a legal obligation.

    Right of opposition: The right to oppose, at any time, for reasons related to your particular situation, to personal data concerning you to be processed based on a public interest or a legitimate interest of the data processing controller or a third party.

    Right of limitation of the processing: The right to obtain the limitation of the data processing, if you contest its accuracy, if the processing is unlawful, if your personal data is no longer required for processing purposes, or if you have exercised your right to oppose to the data processing.

    Right of portability of the data: The right to receive the personal data held on you in a structured format, in common use and machine readable, and to transfer them to another controller, provided this is technically possible.

    The right not to be subject to individual automated decisions: The right to oppose to being the subject of decisions based on the automated processing of personal data, including the elaboration of profiles, when this decision can affect you legally or significantly.

    To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

    • identification data,
    • a copy of your National Identity Card (DNI) or another official document that confirms your identity
    • the claim specifying the request,
    • address for notification purposes,
    • date, and requester's signature.

    If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

    The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

    Similarly, you may also contact the Data Protection Officer, by:

    Furthermore, you have the right to:

    Revoke the consent you have provided: If the legal grounds of the data processing is your consent, you have the right to revoke this.

    Lodge a claim: You can always contact the Data Protection Officer, and you also have the right to file a claim with the Spanish Data Protection Agency.

  • Directly from you, when you voluntarily participate in activities, workshops and events organised by FREMAP.

Claim management

  • FREMAP, MUTUAL SOCIETY No. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE, with registered office in Carretera de Pozuelo No. 61, 28222 Majadahonda (Madrid). Write to us at the indicated address, or email us on derechos_arco@fremap.es.

    The Data Protection Officer is the person in charge of safeguarding security in our company. If you want to contact him or her, you can do so at dpd@fremap.es or by sending a letter to the above address and including the reference "Data Protection Officer".

  • If you file a claim or a complaint, we will process your identification and contact details, full name, National ID No. or passport, address, email address, telephone number, signature and data pertaining to the complaint or claim in question.

  • Your personal data will be used to attend to and properly manage your complaint or claim.

  • If your claim or complaint is related with our collaboration with the protective action of Social Security, we will store the data for as long as we provide the healthcare and manage the provisions derived from your condition as a recipient of Social Security protective action, and, in any case, for the statutes of limitation of actions that may be incurred against the Mutual Company.

  • If you receive Social Security benefits and we attend to you in our healthcare or administrative centres, we are legally authorised by virtue of article 9.2.b) and f) of Regulation (EU) 2016/679 on General Data Protection, given that it is necessary for compliance with obligations and exercising specific rights in the area of social security and protection, and we are authorised to process the rest of your data by virtue of article 6.1.c) of said Regulation, as we are obliged to comply with Royal Decree 8/2015, of 30 October, which approves the amended text of the General Social Security Act and Royal Decree 1993/1995, of 7 December, on the Collaboration of Mutual Companies with Social Security.

  • You are obliged to provide your data when filing your claim or complaint, as failure to do so prevents us from being able to process it.

  • The Ministry of Employment and Social Security and Authorities and Entities that comprise Social Security to correctly control the performance of our collaboration with said Authorities, in compliance with Social Security regulations, Royal Decree 8/2015, of 30 October, which approves the amended text of the General Social Security Act, and Royal Decree 1993/1995, of 7 December, on the Collaboration of Mutual Companies with Social Security, and the data will be transferred or disclosed to any recipients that must receive them by virtue of a legal obligation.

    We will not make any international transfers of data to third countries or international organisations.

  • Right of access: The right to obtain confirmation on whether FREMAP, MUTUA COLABORADORA DE LA SEGURIDAD SOCIAL NO. 61 is processing personal details that concern you, and, if so, the right to access such data.

    Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.

    Right of erasure: The right to request that your details be erased or deleted due to the unlawful processing of data, the disappearance of the purpose that gave rise to its processing or collection, when you revoke your consent or oppose to the data processing, or when they must be deleted in compliance with a legal obligation.

    Right of opposition: The right to oppose, at any time, for reasons related to your particular situation, to personal data concerning you to be processed based on a public interest or a legitimate interest of the data processing controller or a third party.

    Right of limitation of the processing: The right to obtain the limitation of the data processing, if you contest its accuracy, if the processing is unlawful, if your personal data is no longer required for processing purposes, or if you have exercised your right to oppose to the data processing.

    Right of portability of the data: The right to receive the personal data held on you in a structured format, in common use and machine readable, and to transfer them to another controller, provided this is technically possible.

    The right not to be subject to individual automated decisions: The right to oppose to being the subject of decisions based on the automated processing of personal data, including the elaboration of profiles, when this decision can affect you legally or significantly.

    To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

    • identification data,
    • a copy of your National Identity Card (DNI) or another official document that confirms your identity
    • the claim specifying the request,
    • address for notification purposes,
    • date, and requester's signature.

    If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

    The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

    Similarly, you may also contact the Data Protection Officer, by:

    Furthermore, you have the right to:

    Revoke the consent you have provided: If the legal grounds of the data processing is your consent, you have the right to revoke this.

    Lodge a claim: You can always contact the Data Protection Officer, and you also have the right to file a claim with the Spanish Data Protection Agency.

  • Directly from you when you come to any of our administrative and healthcare centres and file your claim or complaint.

Remote Management

  • FREMAP, MUTUAL SOCIETY No. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE, with registered office on Carretera de Pozuelo No. 61, 28222 Majadahonda (Madrid).

    The Data Protection Officer is the person in charge of safeguarding your privacy at our company. If you wish to contact them, you can do so at dpd@fremap.es or by written letter sent to the aforementioned address, including the reference "Data Protection Officer".

  • Your identification details (name and surnames, ID/NIE/Passport, electronic signature, Social Security affiliation number), contact details (postal or electronic address and telephone number), personal characteristics (date and place of birth, age, sex, nationality), professional and employment details.

  • For the management and control of communications received, requests for access and use of web applications owned by FREMAP that are carried out and for the resolution of any technical incidents that may occur.

  • The data will be kept for the time necessary to deal with your communication or request, or resolve the reported incident and, in all cases, for the period necessary to deal with the claim processes that may be presented against the company.

  • We are entitled to process your personal data because we are permitted by Article 6.1 c) and f) and Article 9.2 a) of Regulation (EU) 2016/679, on the General Protection of Personal Data, as it is necessary to process this information in order to comply with data protection obligations, specifically relating to attention to the rights of the interested parties, in accordance with Articles 12 to 22 of the aforementioned Regulations and Articles 12 to 18 of Organic Law 3/2018, of 5 December, on Personal Data Protection and guaranteeing digital rights. Furthermore, its processing is necessary to serve the mutual legitimate interests of the parties, including FREMAP's interest in providing a fast and simple remote service for interested users and the User's interest in making fast and secure communications or accessing voluntary and free services provided by FREMAP.

  • You are obliged to provide your data, as otherwise the communication you send us or the request for access to the applications owned by FREMAP that you make may not be attended to, and any technical incidents that have occurred may not be resolved.

  • No data will be reported to third parties except in cases where it is necessary to comply with a legal obligation. International transfers of personal data will not be carried out, unless legally required.

    • Right of access: The right to obtain confirmation as to whether FREMAP, MUTUAL SOCIETY NO. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE is, or is not processing personal data that concerns you and, in this case, to access that data.
    • Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.
    • Right of erasure: The right to request the deletion or suppression of your data on the grounds of illegal processing of the same, because the reason for its processing or collection no longer exists, when you revoke your consent or oppose its processing, or when it must be suppressed in compliance with a legal obligation.
    • Right of opposition: The right to object, at any time, on grounds relating to your specific situation, to the processing of personal data that concerns you, on the basis of public interest or the legitimate interest of the controller or a third party.
    • Right of limitation of the processing: The right to limit the processing of your data, if you contest its accuracy, if the processing is illegal, if your personal data is no longer necessary for the processing purposes, or if you have exercised your right to oppose said data processing.
    • Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly-used format that can be digitally read, and to transmit this data to another controller, provided that it is technically possible.
    • The right not to be subject to individual automated decisions: The right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.

    You may exercise these rights, in writing, together with the copy of a document accrediting your identity, before the Data Protection Officer, whose contact details we have included in the question on this figure.

    In addition, has right:

    • Revoke the consent you have provided: If the legal grounds of the data processing is your consent, you have the right to revoke this.
    • Lodge a claim: In all cases, you may turn to the Data Protection Officer, and you also have the right to lodge a claim with the Spanish Data Protection Authority (AEPD).
  • The only data that will be processed is that which you provide us with in communications addressed to us or on completed forms.

Security and Video Surveillance

  • FREMAP, MUTUAL SOCIETY No. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE, with registered office in Carretera de Pozuelo No. 61, 28222 Majadahonda (Madrid). Write to us at the indicated address, or email us on derechos_arco@fremap.es.

    The Data Protection Officer is the person in charge of safeguarding security in our company. If you want to contact him or her, you can do so at dpd@fremap.es or by sending a letter to the above address and including the reference "Data Protection Officer".

  • If you visit our administrative or healthcare centres and we record your image or collect your data at reception or at an access control point, the data of your image, full name, National ID No. and organisation or company you belong to will be processed.

  • To ensure the safety of people, goods and facilities through video surveillance and visit controls.

  • In the case of capturing and recording your images through video cameras, the data will be eliminated one month later by deleting the images, except for recordings related to criminal or administrative infractions regarding public safety, an ongoing police investigation or an open legal or administrative procedure. If your data is collected at reception or at the access control point to our facilities, the data will be deleted one month following the collection.

  • Our legal basis for processing your identification details is based on our legitimate interest stipulated in article 6.1.f) of Regulation (EU) 2016/679 on General Data Protection, to carry out image processing through cameras or video cameras or to control physical access with a view to preserve the safety of people, goods and facilities, given that said interest does not prevail over interests or rights and fundamental freedoms.

  • You are obliged to provide your data because we must protect people, goods and facilities. If you do not provide this data, this impedes your access to our centres for security reasons.

  • To security forces and bodies. Courts and Tribunals in the case of committing criminal or administrative infractions in compliance with Organic Law 4/1997, of 4 August, on the use of video cameras by security forces or bodies in public places.

    We will not make any international transfers of data to third countries or international organisations.

  • Right of access: The right to obtain confirmation on whether FREMAP, MUTUA COLABORADORA DE LA SEGURIDAD SOCIAL NO. 61 is processing personal details that concern you, and, if so, the right to access such data.

    Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.

    Right of erasure: The right to request that your details be erased or deleted due to the unlawful processing of data, the disappearance of the purpose that gave rise to its processing or collection, when you revoke your consent or oppose to the data processing, or when they must be deleted in compliance with a legal obligation.

    Right of opposition: The right to oppose, at any time, for reasons related to your particular situation, to personal data concerning you to be processed based on a public interest or a legitimate interest of the data processing controller or a third party.

    Right of limitation of the processing: The right to obtain the limitation of the data processing, if you contest its accuracy, if the processing is unlawful, if your personal data is no longer required for processing purposes, or if you have exercised your right to oppose to the data processing.

    Right of portability of the data: The right to receive the personal data held on you in a structured format, in common use and machine readable, and to transfer them to another controller, provided this is technically possible.

    The right not to be subject to individual automated decisions: The right to oppose to being the subject of decisions based on the automated processing of personal data, including the elaboration of profiles, when this decision can affect you legally or significantly.

    To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

    • identification data,
    • a copy of your National Identity Card (DNI) or another official document that confirms your identity
    • the claim specifying the request,
    • address for notification purposes,
    • date, and requester's signature.

    If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

    The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

    Similarly, you may also contact the Data Protection Officer, by:

    Furthermore, you have the right to:

    Revoke the consent you have provided: If the legal grounds of the data processing is your consent, you have the right to revoke this.

    Lodge a claim: You can always contact the Data Protection Officer, and you also have the right to file a claim with the Spanish Data Protection Agency.

  • Directly from you when you come to our administrative or healthcare centres and your image is recorded or your data is collected at reception or at an access control point.

Rights of the interested party

  • FREMAP, Collaborative Mutual Society with Social Security Institute No. 61, with registered office at Carretera de Pozuelo No. 61, 28222, Majadahonda (MADRID).
    The Data Protection Officer is the person in charge of safeguarding your privacy at our company.

    If you need to contact the Data Protection Officer, you can do so at dpd@fremap.es or by sending a written letter to the aforementioned address, including the reference "Data Protection Area".

  • Your identification details (name and surname) and contact details (postal or electronic address and telephone number), as well as the name and contact details of the persons included in the application for the exercise of your rights.

  • To comply with your right to the protection of personal data. In accordance with this, your application will be recorded and processed, making any communications that may be required according to the form of contact provided.

    Additionally, if necessary, your data will be processed in order to be able to accredit the exercised right to the Control Authority.

  • The data will be kept for the time necessary to deal with your request and, in any case, for the period necessary to deal with the claim processes that may be presented against the company.

  • We are entitled to process your personal data because we are permitted by Article 6.1 c) of Regulation (EU) 2016/679, General Protection of Personal Data, as it is necessary to process this information in order to comply with data protection obligations, specifically in relation to the attention to the rights of the interested parties, in accordance with Articles 12 to 22 of the aforementioned Regulations and Articles 12 to 18 of Organic Law 3/2018, of 5 December, on Personal Data Protection and guaranteeing digital rights.

  • You are obliged to provide your details, otherwise the exercised right may not be respected.

  • No data will be reported to third parties except in cases where it is necessary to comply with a legal obligation. In this regard, your data may be transferred to the Control Authority (Spanish Data Protection Agency), the Management and Guardianship Body of the Mutual Society, the Ministry of Employment and Social Security, its subsidiary bodies, courts and tribunals upon request or in defence of legal or administrative proceedings, and security forces and bodies in the event of civil, criminal or administrative offences (Article 6.1.c) and f) of Regulation (EU) 2016/679 on General Data Protection).

    International transfers of personal details neither be made, except for legal obligation .

  • Right of access: The right to obtain confirmation on whether FREMAP, MUTUA COLABORADORA DE LA SEGURIDAD SOCIAL NO. 61 is processing personal details that concern you, and, if so, the right to access such data.

    Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.

    Right of erasure: The right to request that your details be erased or deleted due to the unlawful processing of data, the disappearance of the purpose that gave rise to its processing or collection, when you revoke your consent or oppose to the data processing, or when they must be deleted in compliance with a legal obligation.

    Right of opposition: The right to oppose, at any time, for reasons related to your particular situation, to personal data concerning you to be processed based on a public interest or a legitimate interest of the data processing controller or a third party.

    Right of limitation of the processing: The right to obtain the limitation of the data processing, if you contest its accuracy, if the processing is unlawful, if your personal data is no longer required for processing purposes, or if you have exercised your right to oppose to the data processing.

    Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly-used format that can be digitally read, and to transmit this to another controller, provided that it is technically possible.

    The right not to be subject to individual automated decisions: The right to oppose being subject to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.

    You may exercise these rights, in writing, together with a copy of a document accrediting your identity, before the Data Protection Officer, whose contact details we have included in the question on this figure.

    Furthermore, you have the right to:

    Revoke the consent you have provided: If the legal grounds of the processing is your consent, you have the right to revoke this.

    Lodge a claim: You can always contact the Data Protection Officer, and you also have the right to file a claim with the Spanish Data Protection Agency.

  • Of you, yourself, when you ask us in writing to exercise a right to the protection of personal data (access, rectification, erasure, objection, limitation of processing, portability and the right not to be subjected to automated individual decisions).

Management of Security Breaches

  • FREMAP, MUTUAL SOCIETY No. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE, with registered office in Carretera de Pozuelo No. 61, 28222 Majadahonda (Madrid). Write to us at the indicated address, or email us on derechos_arco@fremap.es.

    The Data Protection Officer is the person in charge of safeguarding security in our company. If you want to contact him or her, you can do so at dpd@fremap.es or by sending a letter to the above address and including the reference "Data Protection Officer".

  • The personal data that will be processed for managing a detected security incident will be your identification, full name, DNI/NIE, contact details, address, telephone number and professional email address and professional or employment data, such as your position or role within the company.

  • To manage security breaches that may occur in the company.

  • Your details will be stored for as long as needed to manage the detected incident and, in any case, for the statutes of limitation of actions that may be incurred against the Mutual Company.

  • Because the data processing is needed to meet the Mutual Company's legal obligations (article 6.1.c) of Regulation (EU) 2016/679 on General Data Protection).

  • You are obliged to provide the information required for the resolution of the incident, as otherwise it would not be possible to resolve it properly or comply with legal obligations attributed to the Mutual Company.

  • Your data may be communicated to the Spanish Data Protection Agency in compliance with obligations legally attributed by Data Protection regulations, and, if the security incident could represent a high risk to the rights and freedoms of third parties, the implications and the information related thereto will be notified to the data subjects.

    To security forces and bodies. Courts and Tribunals in the case of criminal or administrative infractions.

    We will not make any international transfers of data to third countries or international organisations.

  • Right of access: The right to obtain confirmation on whether FREMAP, MUTUA COLABORADORA DE LA SEGURIDAD SOCIAL NO. 61 is processing personal details that concern you, and, if so, the right to access such data.

    Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.

    Right of erasure: The right to request that your details be erased or deleted due to the unlawful processing of data, the disappearance of the purpose that gave rise to its processing or collection, when you revoke your consent or oppose to the data processing, or when they must be deleted in compliance with a legal obligation.

    Right of opposition: The right to oppose, at any time, for reasons related to your particular situation, to personal data concerning you to be processed based on a public interest or a legitimate interest of the data processing controller or a third party.

    Right of limitation of the processing: The right to obtain the limitation of the data processing, if you contest its accuracy, if the processing is unlawful, if your personal data is no longer required for processing purposes, or if you have exercised your right to oppose to the data processing.

    Right of portability of the data: The right to receive the personal data held on you in a structured format, in common use and machine readable, and to transfer them to another controller, provided this is technically possible.

    The right not to be subject to individual automated decisions: The right to oppose to being the subject of decisions based on the automated processing of personal data, including the elaboration of profiles, when this decision can affect you legally or significantly.

    To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

    • identification data,
    • a copy of your National Identity Card (DNI) or another official document that confirms your identity
    • the claim specifying the request,
    • address for notification purposes,
    • date, and requester's signature.

    If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

    The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

    Similarly, you may also contact the Data Protection Officer, by:

    Furthermore, you have the right to:

    Revoke the consent you have provided: If the legal grounds of the data processing is your consent, you have the right to revoke this.

    Lodge a claim: You can always contact the Data Protection Officer, and you also have the right to file a claim with the Spanish Data Protection Agency.

  • Directly by you, your company or the entity you work for or collaborate with, and from the Social Security Fund.

Communication channel and Denunciation

  • FREMAP, Collaborative Mutual Society with the Social Security Institute no. 61, with registered office in Carretera de Pozuelo nº 61 , 28222, Majadahonda (MADRID).

    The Delegate of Data protection is the person in charge of safeguarding its privacy in our company. If you need to contact the Mutual Society, you can do so at dpd@fremap.es, or through letter referred to the previous address , including the Area Data protection ”reference “.

  • Its identification details (full name) and contact (postal address or electronics and telephone), as well as the details of identification and contact of the people that are related in the denunciation and details of employment that are mentioned.

  • To manage the denunciations received from possible risks or defaults of the Catalogue of Forbidden Conducts of FREMAP, within the framework of Plan of Criminal Imputation Prevention implemented by FREMAP. In accordance with it, its details will be discussed to process communications and denunciations that are received in the Communication channel and Denunciation and aperturar where applicable, the corresponding research dossier.

  • Details will be kept in the system of Communication channel and Denunciation only during the essential time to decide on the origin of initiating a research on denounced facts. In any case, elapsed three months from the introduction of the details will be proceeded its suppression from the system of Communication channel and Denunciation. If it was necessary its conservation to continue with the research or to determine possible responsibilities and to attend processes of claim that is Page 2 of 3 could present against the company, will be discussed in a different environment by the Committee for Regulatory Compliance , body to that which is the responsibility the research.

  • We are legitimised to discuss its personal details because it allows it to us the article 6.1 c) of the Regulations (EU) 2016/679, Personal Data protection General, when being necessary its processing for the fulfillment of obligations in the field of the penal prevention, in accordance with it considered in the article 31 bis of the Organic Law 10/1995, of 23 November, of the Penal Code, after reform operated by IT 1/2015.

  • Its personal details' knowledge provides the research of the denounced facts, nonetheless you does not have obligation of providing its details.

  • Not se communicate details to third parties except for in those cases in which necessary to fulfill is a legal obligation. In this respect its details will be able to yield to the Governing body and Guardianship of the Mutual Society, the Ministry of Employment and Social Security Institute, to its dependent Bodies, to Courts on demand or in judicial process defense or office workers and to Forces and Bodies of Security in civil offences case, penintentiaries or office workers (article 6.1.c) and f) of the Regulations (EU) 2016/679 General of Data protection .

    International transfers of personal details neither be made, except for legal obligation .

    • Right of access: Law to obtain confirmation on if in FREMAP, MUTUAL SOCIETY COLLABORATING WITH THE SOCIAL SECURITY No. 61 are discussing personal details that him concern or not and, in such a case , to access the same.
    • Right of rectification: Law to request the modification or rectification of its details if are inaccurate.
    • Right of erasure: Law to be requested that its details are erased or suppressed for illicit processing of details, for the disappearance of the aim that motivated the processing or collected, when it revokes its consent or it holds out against that are discussed or when they must suppress in compliance with a legal obligation.
    • Right of opposition: Law to oppose for reasons at any time related to its particular situation, to that personal details that they concern him are object of a processing based on a public interest or in a legitimate interest of the person responsible for the processing or of a third party.
    • Right of limitation of the processing: Law to obtain the limitation of the processing of its details, if it contests its accuracy, if the processing is illicit, if they were no longer necessary personal details for ends of treatment or if it has exercised its opposition right to the data processing .
    • Right of portability of the data: Law to receive personal details that they concern him in a structured format, of common use and reading mechanic and to transmit them to another person in charge, provided that is technically possible.
    • The right not to be subject to individual automated decisions: Law to hold out against be object of decisions based only in the automated processing of personal details, included the elaboration of profiles, when this decision can affect him legal or significantly.

    It can practice these rights, in writing together with copy of a document that it proves your identity, before the Delegate of Data protection whose contact details have added in the question on this figure.

    In addition, has right:

    • Revoke the consent you have provided: If the processing has its legitimation in the consent, has right to be revoked.
    • Lodge a claim: It can attend in any case before the Delegate of Data protection, also has right to present a claim before the Spanish Data Protection Authority .
  • Of yourself when it communicates them to us when sending the denunciation. Additionally can come from the denunciation formulated by third parties when mentions him to him expressly.

Prevention and Control SARS-CoV-2

  • FREMAP, Collaborative Mutual Society with the Social Security Institute no. 61, with registered office in Carretera de Pozuelo nº 61 , 28222, Majadahonda (MADRID).

    The Delegate of Data protection is the person in charge of safeguarding its privacy in our company. If you need to contact the Mutual Society, you can do so at dpd@fremap.es, or through letter referred to the previous address , including the Area Data protection ”reference “.

  • Your identification data (name and surname) and health data (body temperature, illnesses or disorders that may be symptoms of SARS-CoV-2 infection and serological or test results that are prescribed or provided and that allow us to determine whether the disease has been contracted and is in a contagious period).

  • For the prevention and control of SARS-CoV-2 infection, in accordance with the recommendations of the Health Authorities; Protection of the health of people who carry out their functions or provide services in the centre; And compliance with Occupational Risk Prevention obligations.

  • The data collected will be recorded in your medical history where it will be stored indefinitely, taking into account the healthcare purpose of the History.

  • We are entitled to process your personal data because we are permitted by Article 6.1 e) of Regulation (EU) 2016/679, General Data Protection Regulation, as it is necessary to process this information in order to comply with the general interests of public health, in relation to Article 9.2 h) of the aforementioned Regulation.

    In the event that you provide services to the Mutual Society, this processing is necessary in order to comply with obligations related to the health and safety of workers, being entitled to process your data as stated in articles 6.1 c) and 9.2 b) of Regulation (EU) 2016/679 on Personal Data Protection.

  • Knowledge of your state of health is necessary in order to adopt the appropriate measures for the prevention and control of the SARS-CoV-2 infection, so you must provide the information that permits us to know your medical situation, collaborating in the prevention and control of the pandemic.

  • No data will be reported to third parties except in cases where it is necessary to comply with a legal obligation. In this regard, your data may be transferred to the Public Health Services and Health Authorities and Services with responsibilities in the area of Occupational Risk Prevention.

    International transfers of personal data will not be carried out, unless legally required.

    • Right of access: The right to obtain confirmation as to whether FREMAP, MUTUAL SOCIETY NO. 61 COLLABORATING WITH THE SOCIAL SECURITY INSTITUTE is, or is not processing personal data that concerns you and, in this case, to access that data.
    • Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.
    • Right of erasure: The right to request the deletion or suppression of your data on the grounds of illegal processing of the same, because the reason for its processing or collection no longer exists, when you revoke your consent or oppose its processing, or when it must be suppressed in compliance with a legal obligation.
    • Right of opposition: The right to object, at any time, on grounds relating to your specific situation, to the processing of personal data that concerns you, on the basis of public interest or the legitimate interest of the controller or a third party.
    • Right of limitation of the processing: The right to limit the processing of your data, if you contest its accuracy, if the processing is illegal, if your personal data is no longer necessary for the processing purposes, or if you have exercised your right to oppose said data processing.
    • Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly-used format that can be digitally read, and to transmit this data to another controller, provided that it is technically possible.
    • The right not to be subject to individual automated decisions: The right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.

    You may exercise these rights, in writing, together with the copy of a document accrediting your identity, before the Data Protection Officer, whose contact details we have included in the question on this figure.

    In addition, has right:

    • Revoke the consent you have provided: If the legal grounds of the data processing is your consent, you have the right to revoke this.
    • Lodge a claim: In all cases, you may turn to the Data Protection Officer, and you also have the right to lodge a claim with the Spanish Data Protection Authority (AEPD).
  • By you when you communicate them to us by phone or in person at a FREMAP centre.

Information about PDF documents: In order to display PDF files correctly, you need to have installed Acrobat Reader This link opens in a new window installed on your computer.