The legal basis that allows us to process your personal data depends on the reason why we need to process it.
If you receive Social Security benefits and go to our administrative or healthcare centres:
a) To manage your social security benefits.
We need to process your personal data to comply with legal obligations for managing social security benefits, and we are entitled to process your data under article 9.2 b), f) and h) of the General Data Protection Regulation (EU) 2016/679, in relation to Article 6,1 c) on the basis of the social security regulations that apply to Partner Mutual Insurance Companies (art. 80 et seq. of Royal Decree 8/2015 of 30 October, which approves the consolidated text of the General Social Security Act, Royal Decree 625/2014 of 18 July which governs certain aspects of the management and control of processes for temporary disability in the first three hundred and sixty-five days, Royal Decree 860/2018 of 13 July, which governs the preventive activities of the Protective action of the Social Security Institute to be carried out by Mutual Insurance Companies that Partner with the Social Security Institute, Royal Decree 1993/1995 of 7 December on Mutual Insurance Company Partnerships with the Social Security Institute and the implementing regulations), and on the basis of the applicable health regulations (Act 41 / 2002 of 14 November, basic regulation of patient autonomy and rights and obligations with regard to information and clinical documentation).
b) To make sure your rights to any benefits are recognised quickly.
The legal basis to process your data for this purpose is your consent. Therefore, if you give your express authorisation, your company will be sent information from your medical certificate or a certificate to confirm that you have received medical assistance without leave so it can comply with its legal obligations to transfer the information to the Delta@ system. Equally, and only when you give your express authorisation, your company will be sent information from your certificate of fitness to return to work so it can comply with its legal obligation to register it on the RED system and correctly apply the necessary subsidised payment deductions. Similarly and only if you give your express authorisation, your company will be asked for the financial data needed to check the social security contributions made so that your benefits can be correctly calculated (article 6.1a) of the General Data Protection Regulation (EU) 2016/679).
c) To analyse and investigate work-related accidents and illnesses and develop a comprehensive preventive action.
We believe we have a legitimate interest to process the information required to analyse and investigate work-related accidents and illnesses and develop a comprehensive preventive action to efficiently and effectively manage any benefits you may be entitled to, on the basis that processing this data will be beneficial to you as, if a work-related accident or illness is found to have taken place, a nunber of rights to social security beneifts will be generated in your favour (art. 6.1 f) of Regulation (EU) 2016/679 on General Data Protection.
d) To transfer information on your healthcare process to the insurance company responsible for the medical services that you have expressly authorised.
The legal basis to process your data for this purpose is your voluntary consent under art. 6.1 a) of the General Data Protection Regulation (EU) 2016/679.
e) For research, teaching, statistical and analytical purposes.
We consider that we have a legitimate interest to process data and information on processes arising from your work-related injuries and illnesses that may be of interest for research, teaching, statistical and analytical purposes, after it has been made irreversibly unidentifiable (Article 6.1 f) of the General Data Protection Regulation (EU) 2016/679).
f) To improve the management of the services provided.
We consider that we have a legitimate interest in knowing your degree of satisfaction with the services provided to analyse their quality, as we understand that processing this data is beneficial to you, as it enables us to improve our services (art. 6.1 f) of the General Data Protection Regulation (EU) 2016/679).
g) To maintain security.
We consider that we have a legitimate interest to record your image when you visit our centres and facilities, as we understand that processing this data can be beneficial to you should any incident that affects your security occur (art. 6.1 f) of the General Data Protection Regulation (EU) 2016/679).
If you do not receive social security benefits and go to any of our administrative or healthcare facilities:
a) To provide you with emergency healthcare.
It is necessary to process your personal data to comply with legal obligations to provide emergency healthcare and related adminsitrative services (art. 9.2 c) of the General Data Protection Regulation (EU) 2016/679), in relation to article 6.1 d) of the same and article 196 of Organic Law 10/1995 of 23 November of the Criminal Code).
e) For research, teaching, statistical and analytical purposes.
We consider that we have a legitimate interest to process data that may be of interest for research, teaching, statistical and analytical purposes, after it has been made irreversibly unidentifiable (art. 6.1 f) of the General Data Protection Regulation (EU) 2016/679).
c) To protect your safety.
We consider that we have a legitimate interest to record your image when you visit our centres and facilities, as we understand that processing this data can be beneficial to you should any incident that affects your security occur (art. 6.1 f) of the General Data Protection Regulation (EU) 2016/679).