Skip ribbon commands
Jump to main content

FREMAP website

Jump to content

Data Protection Policy and Privacy Notice

​​​​​​​​​​​​​​​​​Data Protection Policy

Decorative image, FREMAP filing cabinets

FREMAP is committed, in accordance with its Purpose, Mission, Vision and Values, to maintaining and improving its management model based on continuous improvement and innovation, whose key factors are excellence in service and excellence in management, within the current legislative framework.

This Policy establishes the principles that inspire FREMAP's actions, containing the framework that must be applicable to the entity in the area of personal data protection.

The purpose of the Policy is to ensure compliance with Regulation (EU) 2016/679, General Data Protection Regulation, as well as the Organic Law on Personal Data Protection, which is national and other applicable legislation. In particular, the Data Protection Policy aims to guarantee the right to data protection for all individuals who are related to FREMAP, ensuring respect for the right to honour and privacy in the processing of the personal data necessary for the performance of their activity.

Scope of the Privacy Policy

The Policy applies to all people who provide services at FREMAP and to external staff who are related to the company, through service provision contracts or collaboration agreements, reaching all the company's processes and resources.

Principles of action

The Principles relating to the processing of personal data.

  • Principle of legality, loyalty and transparency. The processing of personal data shall be fair, legitimate and lawful in accordance with applicable law, and the interested parties should be informed of the circumstances relating to the processing of their data. In cases where it is mandatory in accordance with applicable law, the consent of the data subjects must be obtained before processing their data.
  • Principle of purpose limitation. Personal data will be collected for specific, explicit and legitimate purposes and will not be processed subsequently in a manner incompatible with these purposes.
  • Principle of data minimisation. Only personal data that is strictly necessary for the purpose for which it is collected or processed and suitable for this purpose will be processed.
  • Principle of accuracy. Personal data must be accurate and kept up to date. Otherwise, they must be deleted or rectified.
  • Principle of limitation of data retention period. Personal data will not be kept beyond the period necessary to achieve the purpose for which it is processed, except in cases of legally planned conservation.
  • Principle of integrity and confidentiality. Personal data will be processed in such a way as to ensure its adequate security, adopting technical and organisational measures that protect them from unauthorised or unlawful processing and that prevent their loss, destruction and accidental damage. Likewise, the personal data collected and processed by FREMAP must be kept with maximum confidentiality and secrecy, and cannot be used for purposes other than those that justified and allowed collection and without being communicated or transferred to third parties outside the cases permitted by applicable law.

Legal basis for the processing of personal data.

FREMAP will only process personal data when at least one of the following circumstances occurs:

  • The data subject has consented to the processing of his/her personal data for specific purposes.
  • The processing is necessary for the execution of a contract for which the data subject is a party or to apply, at the request of the data subject, pre-contractual measures.
  • The processing is necessary for compliance with a legal obligation.
  • The processing is required to protect the vital interests of the data subject or another individual.
  • The processing is necessary for the fulfilment of a mission carried out in the public interest or in the exercise of public powers conferred.
  • The processing is necessary to satisfy a legitimate interest pursued by FREMAP or by a third party, provided that the interests or fundamental rights and freedoms of the data subject do not prevail.

Consent of the data subject.

When the processing of personal data that FREMAP must carry out is based on the consent of the data subject, it must be carried out by means of a clear affirmative action that reflects a Statement of free, specific, informed and unambiguous will of the data subject to accept the processing of personal data concerning him, such as a written declaration, including by electronic means, or a verbal declaration. Consent must be given for all processing activities carried out for the same or the same purposes. When there are multiple purposes to the consent, consent must be given for all of them. FREMAP will be responsible for demonstrating that the interested party provided their consent by any means of admissible evidence in Law. The interested party will have the right to withdraw his/her consent at any time.

When the processing affects special categories of data, and specifically data relating to health, genetic or biometric data and is based on the consent of the data subject, this must be given explicitly, by means of a written declaration signed by the data subject.

Data subjects' rights.

Data transparency and communication to data subjects. The processing of personal data will be transparent in relation to the data subject, providing them with information on the processing of their data in a concise, transparent, intelligible and easy to access manner, with a clear and simple language. When a data subject obtains personal data, when they are obtained, FREMAP will provide the following information:

  • The identity of FREMAP as the party responsible for processing the data, and its contact details.
  • Contact details for the Data Protection Officer.
  • Reasons for processing the data.
  • Legal base of the treatment.
  • Recipients of the data.
  • The rights of the affected persons.

If the data is not obtained from the data subject, due to a legitimate transfer, or from public access sources, FREMAP will inform the interested parties of the circumstances indicated above and also the origin of the data.

Rights of access to rectification, deletion, opposition, portability, limitation of processing and not to be subject to automated individual decisions. FREMAP will make it easier for interested parties to exercise their rights by establishing, for this purpose, the internal procedures that are necessary to ensure their exercise.

  • Data Protection regulations grant you a series of rights, which you can exercise in relation to the data processed on your person.

    We inform you of these and the procedure you must follow for their exercise at FREMAP:

    The Data Protection Officer is the person responsible for safeguarding your privacy in our company. If you need to contact her, you can do so at dpd@fremap.es or by sending a letter to the previous address, including the reference “Data Protection Officer.”

    • Right of access: Right to obtain confirmation as to whether FREMAP, MUTUA SOCIEDAD CON LA SEGURIDAD SOCIAL Nº 61 is processing personal data that concern you or not and, in this case, to access them.

    • Right of rectification: Right to request modification or rectification of your data if they are inaccurate.

    • Right of erasure: Right to request that your data be deleted or deleted by illicit data processing, due to the disappearance of the purpose that motivated the processing or collection, when you revoke your consent or object to it being processed or when they must be deleted in compliance with a legal obligation.

    • Right of opposition: The right to object at any time for reasons related to your particular situation, to personal data that concern you being processed based on a public interest or a legitimate interest of the data controller or a third party.

    • Right of limitation of the processing: The right to obtain the limitation of processing of your data, if you contest its accuracy, if the processing is unlawful, if personal data is no longer required for the purposes of processing or if you have exercised your right to object to processing your data.

    • Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly used format and to read it in a mechanical way and to transfer it to another controller, provided that it is technically possible.

    • The right not to be subject to automated individual decisions: The right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.

    ​The aforementioned rights may be exercised by sending a written communication to FREMAP las follows:
    • In person: At any of FREMAP's offices or hospitals, showing your original National Identity Card or equivalent identification document.
    • By e-mail: By sending the application signed by digital
      certificate to the mailbox at derechos_arco@fremap.es
    ​ ​

    Furthermore, you have the right to:

    • Revoke the consent you have provided: If the processing has its legal basis in the consent, it has the right to revoke it. Revocation may be requested in the manner indicated above for exercising your rights.

    • Lodge a claim: You can address any concerns to the Data Protection Officer (dpd@fremap.es), and you are also entitled to file a complaint with the Spanish Data Protection Authority (www.aepd.es).

Data treatment by third parties.

Before contracting any service provider who accesses or can access personal data that is the responsibility of FREMAP, as well as during the The validity of the contractual relationship must be taken into account to ensure that the data processing by the data processor is carried out in accordance with the applicable regulations and the relationship is formalized through a contract. This contract will contain the obligations that this applicable regulation imposes on the processor.

Security breaches or loss of personal data.

When FREMAP becomes aware of an incident that causes the destruction, loss or accidental or unlawful alteration of personal data, or communication or access not Authorised to this data entails a high risk for the rights and freedoms of the data subjects must, without undue delay and, if possible, at the latest 72 hours after it has been informed of it, notify the Spanish Data Protection Agency of the security breach of the personal data. Exceptions shall be those cases where it is unlikely that the security breach of personal data would pose a risk to the rights and freedoms of individuals. If this notification is not possible within 72 hours, the reasons for the delay will be indicated, and information may be provided in phases without further undue delay.

Similarly, if the security breach could entail a high risk to the rights and freedoms of the data subjects, FREMAP will inform each data subject without undue delay of the security of the personal data and allow them to take the necessary precautions.

These incidents must be documented and measures taken to resolve and mitigate possible negative effects for the interested parties, and the internal protocols established for this purpose must be followed.

Prevention and Control

Proactive responsibility.

FREMAP will keep a Record of processing activities containing detailed information on each data processing carried out within the framework of its activity. The Activity Log will be kept permanently updated

FREMAP will also carry out an assessment of the risk level to which the institution is exposed in order to determine the technical and organisational measures that must be applied, guaranteeing default privacy and design. When the risk analysis carried out shows that a type of treatment entails a high risk for the rights and freedoms of individuals, FREMAP will carry out, before processing, an Assessment of the impact of processing operations on the protection of personal data. FREMAP will review whether the processing is still in accordance with the Impact Assessment to which it has been subjected and, in any case, review it when there is a change in the risk of processing.

In addition, FREMAP will carry out training actions in the protection of mandatory personal data for all personnel involved in personal data processing operations.

Similarly, FREMAP will inform all personnel involved in personal data processing operations of their confidentiality obligations in the processing of information, and it is an essential requirement for the provision of services to sign a confidentiality commitment.

The functions of the Data Protection Officer.

The Data Protection Officer will be responsible for controlling and supervising the provisions of this Policy, and the functions are legally established:

  • A) to inform and advise FREMAP or the data processor and employees that are engaged in the processing of their obligations under this Regulation and other data protection provisions of the Union or of the Member States.
  • B) oversee compliance with the provisions of this General Data Protection Regulation, other provisions for the protection of data of the Union or Of Member States and of policies on personal data protection, including the assignment of responsibilities, the awareness and training of staff involved in processing operations, and the corresponding audits.
  • C) to offer the advice requested on the assessment of impact on data protection and to monitor its application.
  • d) cooperating with the Spanish Data Protection Authority.
  • E) to act as a contact point of the Spanish Data Protection Agency for processing matters, including consulting prior to data processing, if necessary, and making enquiries, if necessary, on any other matter.

The Data Protection Officer will perform his/her duties by paying due attention to the risks associated with the processing operations, taking into account the nature, scope, context and purposes of the processing.

Implementation and Dissemination

The Data Protection Policy must be known to all employees, as well as those who collaborate with FREMAP. It must be communicated to the entire Organization and available in the media accessible by all employees and other stakeholders.

This Policy is understood to be implemented and maintained from today, with the total commitment of Management.

Majadahonda, 22 May 2018

Informational Notices

Processing of third party data

If you provide FREMAP with personal data of third parties, regardless of the purpose of the communication, you are hereby informed of The obligation that corresponds to provide the affected party with information regarding the purpose of the communication and the legal justification thereof, identifying FREMAP Mutual Society Collaborating with the Social Security Institute as the recipient of the communication.

The personal data provided must be adequate, relevant and not excessive, in accordance with the requirements of Regulation (EU) 2016/679 on General Data Protection. You are responsible for the accuracy and updated nature of the personal data you communicate, and FREMAP is exempt from the obligation to inform the affected parties, in accordance with the provisions of article 14.5 a) of the aforementioned Regulation.

Likewise, we inform you of FREMAP's exemption from the duty to inform, as provided for in article 14.1 of Regulation (EU) 2016/679 on General Data Protection, in cases where the personal data received by the Mutual Society is to be used for statistical purposes and due to the concurrent circumstances, communicating information regarding the treatment to each of the affected parties is impossible or involves a disproportionate effort, pursuant to article 14.5 b) of the aforementioned Regulation.


Privacy Policy

FREMAP then provides you with comprehensive information on the processing of your personal data.

Provisions and healthcare

  • FREMAP, MUTUA COLLABORADORA CON LA SEGURIDAD SOCIAL Nº 61, with registered office at Carretera de Pozuelo número 61, 28222 Majadahonda (Madrid). Contact us by post at the address indicated or by email at derechos_arco@fremap.es.

    The Data Protection Officer is the person responsible for safeguarding your privacy in our company. If you need to contact her, you can do so at dpd@fremap.es or by sending a letter to the previous address, including the reference “Data Protection Officer.”

  • If you are a beneficiary of the Social Security Institute and go to our administrative or healthcare centres:

    • Identification and contact details (name, surname, ID/NIE/passport, postal and electronic address, Social Security number, telephone number of the interested party or of their relatives or representatives, signature and image);
    • Personal characteristics (date of birth, age, family, sex and nationality);
    • Professional data and employment details (profession, work centre, position and professional category);
    • Economic and insurance data (bank details, salary, subsidies, Social Security registration and details relating to insurance company);
    • Special category data (health data);
    • Other information necessary to verify your right to Social Security benefits under the responsibility of mutual societies and to carry out a comprehensive preventive action:
      • Information on the work-related accident that allows us to know the form of occurrence and its work nature (accident report, work hours, journey -in case For accidents in the workplace, functions performed, employment contract, RLC and RNT-Nominal Worker Relationship and Payment of contributions and time of healthcare).
      • Information on the occupational disease that may affect you and that allows you to obtain a correct rating of the illness (information on the presence of specific substances or agents-risk factor-in the workplace).

    If you are not a social security beneficiary and we attend to you at one of our healthcare facilities:

    • Identification and contact details (name, surname, ID/NIF/Passport, postal and email address, telephone number, signature and image);
    • Personal characteristics (age, sex and family);
    • Insurance details and Social Security registration.
    • Special category data (health data)
  • If you are a beneficiary of the Social Security Institute and go to our administrative or healthcare centres, your data will be processed:

    a) To manage your social security benefits.

    • We will process your data to collaborate with the social security protection action in the management of healthcare, in the management of financial benefits for contingencies Professionals, in preventive activity, in professional recovery, where applicable, and in economic benefits for temporary disability resulting from common contingencies and non-work-related accidents , due to risk during pregnancy and risk during breastfeeding, due to cessation of the activity of self-employed workers and due to the care of minors suffering from cancer or another serious illness

      This management entails the need to process your data to determine and meet your right to Social Security benefits and to make the necessary communications of your Appointments or revisions with the mutual society's medical service and to notify you and the employer while the employment relationship subsets, the acts dictated by Those who recognise, suspend, cancel or issue rights.

    B) To expedite the recognition of the right to benefits that may correspond to it and proceed to the correct classification of the contingency.

    • In those cases where you authorise it, you will inform your company-or the natural or legal person who carries out this procedure on behalf of this administrative person - the information on your medical leave certificate or health care certificate without medical leave due to a work-related accident or occupational disease, in order to Your company may comply with the legal obligation to transfer the corresponding part of the work-related accident or work-related accident report without medical leave, through the Delt@system.
    • Similarly, only in those cases where you authorize it will you inform your company-or the natural or legal person who carries it out On account of this administrative procedure-the information on your medical discharge report due to work-related accident or occupational disease, in order for your company to You can register the amount immediately in the RED system and correctly apply any applicable delegated payment deductions.
    • In addition, in cases where you expressly authorize it, your company will be asked for the financial data necessary to recognise the right to the temporary disability benefit, as well as the salary bills that are required to check the correction of the calculation of your benefits.

    C) To analyse and research the occupational contingencies and carry out a comprehensive preventive action.

    This purpose includes processing your data for:

    • To obtain from your company or from the medical services that have provided you with the information that allows you to know the way of occurrence of the accident suffered and, in its Case, the assistance provided and the exact time of the same, in order to be able to provide you with proper healthcare and to determine the employment status of the contingency.
    • And, if you are affected by a possible occupational disease, to obtain from your company information on the presence of specific substances or agents in your workplace, and to inform the employer of the risk factors detected by the mutual society's technical staff to prevent them.

    D) To transfer information on your healthcare process to the insurance company responsible for the accident or to any medical services that you expressly authorise.

    • In cases where you give your consent, your data may be communicated to the insurance company responsible for the regulatory or contractual costs derived from the An accident, specifically the information and medical documentation relating to injuries resulting from the accident suffered, and in order to recover the expenses incurred during outpatient or hospital care.
    • Similarly, in cases where you give your consent, your medical leave may be communicated to your company's medical services, In order to verify their health, in accordance with article 20,4 of Royal Legislative Decree 2/2015 of 23 October, approving the revised text of the Workers'Statute Act. Similarly, if you expressly authorise it, your company's medical services may be informed of the information on your last medical process, so that they can help improve your health situation by providing evidence or treatments if possible or pay for any salary supplements you have planned. And if you expressly consent to it, you can also inform the company's medical service of the medical discharge proposal made by the Mutual Society, so that they can provide for their return to work and reorganise the service.

    e) For research, teaching, statistical and analytical purposes.

    • After the anonymization or irreversible dissociation of your personal data, these may be used for medical research, teaching and statistical or analytical purposes.

    f) To improve the management of the services provided.

    • Your data may be processed for satisfaction surveys, for any complaints or suggestions you may have, and for your acknowledgements and compliments to be managed.

    g) For security purposes.

    • To preserve the safety of people, goods and installations, their image may be recorded by the security cameras installed in our centres and hospitals.

    If you, not being a beneficiary of the Social Security Institute, attend to you in our healthcare centres, we will process your data:

    a) To provide you with emergency medical care.

    b) For research, teaching, statistical and analytical purposes.

    • After the anonymization or irreversible dissociation of your personal data, these may be used for medical research, teaching and statistical or analytical activities

    c) For security purposes.

    • To preserve the safety of people, goods and installations, their image may be recorded by the security cameras installed in our centres and hospitals.
  • The legal basis that allows us to process your personal data depends on the purpose for which we process them.

    If you are a beneficiary of the Social Security Institute and go to our administrative or healthcare centres:

    a) To manage your social security benefits.
    The processing of your data is necessary to comply with legal obligations to manage Social Security benefits, and is legitimately entitled to process your data from In accordance with Article 9,2 (b), (f) and (h) of Regulation (EU) 2016/679 on General Data Protection, in relation to Article 6,1 (c), on the basis of the Social Security regulations applicable to Mutual Societies Collaborating (Article 80 and following of the Royal Decree 8/2015, of 30 October, approving the revised text of the General Social Security Act, Royal Decree 625/2014, of 18 July, which regulates certain aspects of the management and control of processes due to temporary disability in the former Three hundred and sixty-five days of its duration, Royal Decree 860/2018, of 13 July, regulating the preventive activities of the Social Security protective action to be carried out by Mutual Societies Collaborating with the Social Security Institute, Royal Decree 1993/1995 of 7 December, Of the Collaboration of Mutual Societies with the Social Security Institute and development regulations), and on the basis of applicable health regulations (Act 41 / 2002, of 14 November, basic regulating the autonomy of the patient and of the rights and obligations in terms of information and clinical documentation).

    B) In relation to the purpose of expediting the recognition of the right to benefits that may correspond to it:
    The legitimate basis for processing your data for this purpose is your consent, so only if you expressly authorize it will your company be provided with the Details of the medical leave/certificate without medical leave so that the company can comply with its legal obligations to transfer information in the Delt@system. Furthermore, only if you expressly authorize it, your company will be informed of your medical discharge so that it can comply with its legal obligation to register in the RED system and apply the corresponding delegated payment deductions. And, similarly, your company will be asked for the economic data that allows the verification of the items listed for an accurate calculation of Any benefits that may correspond to you, only if you expressly authorize it (article 6,1 a) of Regulation (EU) 2016/679 on General Data Protection).

    C) In relation to the purpose of analysing and investigating occupational contingencies and carrying out a comprehensive preventive action:
    We believe that we have a legitimate interest in processing the information that allows us to analyse and research the contingencies and to carry out a comprehensive preventive action, with the aim of To achieve effective and efficient management of the benefits that may correspond to you, understanding that the processing is beneficial for you as if the tax return is applicable A series of rights will be generated in favour of a work-related injury or disease in relation to the provision of the Social Security System (art. 6,1 f) of Regulation (EU) 2016/679 on General Data Protection.

    D) In relation to the purpose of transferring information on your healthcare process to the responsible insurance company or to the medical services that you expressly authorise:
    The legitimate basis for processing your data for this purpose is the consent you voluntarily provide (Article 6,1 a) of Regulation (EU) 2016/679 on General Data Protection).

    e) For research, teaching, statistical and analytical purposes.
    We believe that we have a legitimate interest in processing data and information on the processes derived from their employment contingencies that may be of interest for research purposes , teaching, statistical and analytical studies, after irreversible dissociation (Article 6,1 f) of Regulation (EU) 2016/679 on General Data Protection).

    f) To improve the management of the services provided.
    We believe that we have a legitimate interest in finding out how satisfied you are with the services provided to analyse your quality, since we understand that the processing is beneficial for you by allowing us to improve our services (art. 6,1 f) of Regulation (EU) 2016/679 General Data Protection).

    g) To maintain security.
    We believe that we have a legitimate interest in recording your image when you visit our centres and facilities, since we understand that the processing can also be beneficial for If any incident that affects your security (Article 6,1 f) of Regulation (EU) 2016/679 on General Data Protection) occurs.

    If you are not a beneficiary of the Social Security Institute and go to our administrative or healthcare centres:

    a) To provide you with emergency healthcare.
    The processing of your data is necessary to comply with legal obligations to provide emergency healthcare and to manage it administratively (Article 9,2 C) of Regulation (EU) 2016/679 on General Data Protection, in relation to Article 6,1 d) of the same, in relation to Article 196 L.O.10/1995 of 23 November of the Criminal Code).

    B) For the purpose of research, teaching and statistical and analytical studies:
    We believe that we have a legitimate interest in processing data that may be of interest to research, teaching, statistical and analytical purposes after dissociating them (Article 6,1 f) of Regulation (EU) 2016/679 on General Data Protection).

    c) To protect your safety.
    We believe that we have a legitimate interest in recording the image of the people who attend our centres and facilities, since we believe that the processing can also be beneficial for you in the event of any incident (art. 6,1 f) of Regulation (EU) 2016/679 General Data Protection

  • They will be kept for the time necessary to comply with the purpose for which they were collected and for the period necessary to meet any liabilities and claims processes that may be filed against the bank, in accordance with applicable regulations.

  • If you are a beneficiary of the Social Security Institute and go to our administrative or healthcare centres:

    You have the obligation to provide us with your data in order to provide you with healthcare and financial assistance. Refusal to provide them prevents access to the economic and health benefits to which they have the right, based on Social Security legislation.

    If you are not a beneficiary of the Social Security Institute, we will attend to you at our healthcare centres:

    You have the obligation to provide us with your data in order to provide you with the necessary healthcare, because your refusal to provide them prevents us from providing you with this healthcare.

  • If you are a beneficiary of the Social Security Institute and go to our administrative or healthcare centres, you may need to disclose your data to third parties to comply with some of the purposes indicated above, specifically:

    • To comply with the purpose of managing Social Security benefits, your data may be communicated to the Ministry of Employment and Social Security, Organisations and Entities that comprise the Social Security, Public Health Service, Medical and Labour Inspections, other Mutual Societies that collaborate with the Social Security Institute, To your company and companies providing health services with which there is a contractual relationship for the provision of healthcare or the performance of medical tests. The personal data that may be communicated will be: Identifying data and data that may affect the birth, modification, conservation or extinction of the right to benefits and the amounts of the same that are Recognised by the Mutual Society (art. 71,1 82,2 of Royal Legislative Decree 8/2015 approving the revised text of the General Security Act Social and article 5 of Royal Decree 1630/2011 of 14 November).
    • To comply with the purpose of expediting the recognition of the right to benefits that may be applicable, your data may be communicated to your company or natural or legal person acting on behalf of these administrative procedures. The data that may be communicated are: Identification details (name, surname and NIF/NIE), data relating to the health necessary for the company to be able to record the contingency in full in the RED system (date of the accident; Date of attendance; Date of medical leave, official codes relating to the form of the accident, the type of injury, degree and nature of the accident, as well as As if it is a relapse or not, the severity forecast, the date of the medical discharge, the reason for the relapse, as well as the cancellation of the death penalty if applicable, salaries and contribution documents).
    • To comply with the purpose of analysing and investigating occupational contingencies and carrying out a comprehensive preventive action, your data may be communicated to your company and to the medical services that, if applicable, have provided you with assistance. The data that may be communicated are: Identification details (name, surname and NIF/NIE), information on the work-related accident that allows us to know the form of occurrence and its employment status (Accident report, work hours, journey -in the event of accidents in the workplace, completed functions, work contract, RLC and RPL NT-Nominal Worker Relationship and Payment of Quota-and Time of Healthcare) and information on the occupational disease that may Affect you (risk factors detected in your workplace by the mutual society's technical prevention staff).
    • To comply with the purpose of transferring information on your healthcare process to the insurance company responsible for the damages suffered or the medical services of your company after authorisation, the data that may be communicated are: Identification details (Name, surname and DNI/NIE) and health details (Information relating to your last medical process).

    In addition, your personal data will be transferred or communicated to those recipients who must receive it under a legal obligation and make the corresponding request to the Mutual Society (State Security Forces, Courts, Tribunals and Tax Ministry), or contractual Services for the provision of services required by the Mutual Society in the normal course of its activity.

    No international transfer of data is planned for third countries or international organizations.

    If you do not receive Social Security benefits and we attend to you in one of our centres:

    Your data may be communicated to the relevant Public Health Department or your relatives.

    We will not make any international transfer of data to third countries or to international organizations.

  • Right of access: Right to obtain confirmation as to whether FREMAP, MUTUA COLLABORATING WITH SOCIAL SECURITY NUMBER 61 is processing personal data that concern you or not and, in this case, to access them.

    Right of rectification: Right to request modification or rectification of your data if they are inaccurate.

    Right of erasure: Right to request that your data be deleted or deleted by illicit data processing, due to the disappearance of the purpose that motivated the processing or collection, when you revoke your consent or object to it being processed or when they must be deleted in compliance with a legal obligation.

    Right of opposition: The right to object at any time for reasons related to your particular situation, to personal data that concern you being processed based on a public interest or a legitimate interest of the data controller or a third party.

    Right to restrict processing: The right to restrict the processing of your data, if you contest its accuracy, if it is being processed unlawfully, if your personal data is no longer needed for the purpose it was originally being processed for, or if you have exercised your right to object to the processing of your data.

    Right to portability of data: The right to receive the personal data that concerns you in a structured, commonly-used format that can be digitally read, and to send it to another data controller, provided this is technically possible.

    The right not to be subject to automated individual decisions :The right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.


    ​The aforementioned rights may be exercised by sending a written communication to FREMAP las follows:
    • In person: At any of FREMAP's offices or hospitals, showing your original National Identity Card or equivalent identification document.
    • By e-mail: By sending the application signed by digital
      certificate to the mailbox at derechos_arco@fremap.es

    ​Furthermore, you have the right to:

    revoke the consent given: If the processing has its legal basis in the consent, it has the right to revoke it. Revocation may be requested in the manner indicated above for exercising your rights.

    file a claim: You can address any concerns to the Data Protection Officer (dpd@fremap.es), and you are also entitled to file a complaint with the Spanish Data Protection Authority (www.aepd.es).

  • If you are a beneficiary of the Social Security Institute and go to our administrative or healthcare centres:

    You can do so when you are in person at our administrative and healthcare centres and at the admission stations and service managers or remotely when you provide it through any of the forms.

    Of the General Treasury of the Social Security, the National Institute of Social Security and Public Health Services.

    Of companies or labour consultants that have the responsibility for managing human resources when they complete the healthcare application form or report On the form of occurrence of the accident in the event of work-related accidents, or on the non-occurrence of a work-related accident, as well as the medical service that, if applicable, provides you with assistance.

    Similarly, your data is obtained from the employer or person in whom you delegate when you report on the presence of specific substances or agents in your workplace if you may be affected by a possible occupational disease.

    Similarly, from your company, when it is necessary to know the work centre to which you are in the preparation of the corresponding statistical reports on accidents by work centres in the development of our preventive activities.

    If you are not a social security beneficiary and we attend to you at one of our healthcare facilities:

    Of yourself when you are in person in our administrative and healthcare centres or family members or people accompanying you.

Companies and Professionals

  • FREMAP, MUTUA COLLABORADORA CON LA SEGURIDAD SOCIAL Nº 61, with registered office at Carretera de Pozuelo número 61, 28222 Majadahonda (Madrid). Contact us by post at the address indicated or by email at derechos_arco@fremap.es.

    The Data Protection Officer is the person responsible for safeguarding your privacy in our company. If you need to contact them, you can do so at dpd@fremap.es or by sending a letter to the previous address, including the reference “Data Protection Officer.”

  • The personal data that will be processed in the course of our activity are identification details, name, surname, DNI/NIE and contact details, address, telephone number and professional email address.

    If your personal data is to be used to carry out satisfaction surveys in order to improve the management of the services provided by the Mutual Society, no personal data of any kind, including IP address, will be stored.​

    Please provide this information on data protection to the people of your company who participate in the relationship with us (contact persons)

  • In the event of business or administrative relationship with us as a representative of a company or individual employer, to maintain our administrative or contractual relationship.

    In the case of contact persons of the supplier company, associated company or affiliated individual employer, or authorised RED, their data will be processed to maintain the relationship with the company or with the sole proprietor on behalf of who acts and to comply with legal and contractual obligations.

    In either case, your data may be used to carry out satisfaction surveys to improve the management of the services provided by the Mutual Society, in order to obtain the opinion of the persons surveyed on the main services provided by FREMAP (absenteeism, delta assistance, care in the centres, single point of contact).​

  • They will be kept for the time necessary to comply with the purpose for which they were collected and to determine the possible responsibilities and to attend to the claims processes against the entity, which may be presented in the future.

    In any case, the data will need to be kept for as long as necessary so that FREMAP can carry out the legal or administrative actions derived from the Auditing Administration of accounts and compliance provided for in article 98,2 of Royal Legislative Decree 8/2015 of 30 October, approving the Consolidated Text of the General Social Security Act.

    The provisions of Royal Decree 1993/1995 of 7 December approving the Regulations for the Collaboration of Mutual Societies and Article 1964 of the Civil Code shall apply.

  • If you are a business or administrative person with us as a representative of a company or individual business, you are entitled to this because you can use it to give us an article 6,1 b) and c) Regulation (EU) 2016/679 General Data Protection, as it is necessary to comply with legal and contractual obligations , and Article 6,1 f), as it is the necessary treatment for the satisfaction of legitimate interests of FREMAP.

    In the case of contact persons of a supplier company, associated company or affiliated individual employer, we are legitimately entitled because we are entitled to it in article 6,1 b ), c) and f) Regulation (EU) 2016/679 General Data Protection, as it is necessary for the execution of a contract, Application of pre-contractual measures at the request of the data subject or for compliance with legal obligations and legitimate interests.

  • You are obliged to provide your data or consent to the processing of your data as it is necessary to formalize and maintain the relationship with you or with the company you represent or act for as otherwise it cannot be attended correctly.

    You are not obliged to provide your data if you are sent satisfaction surveys in order to improve the management of the services provided, as the surveys are voluntary for the persons to whom they are addressed.

    ​​
  • Your personal data are processed at our company. To the extent permitted by law, we may transfer your data to recipients outside the Mutual Society. These recipients may include service providers (who, in accordance with the contracts awarded, provide services between those who are the processing of personal data) and Public bodies to the extent that we are obliged to communicate them under a legal obligation

    We will not make any international transfer of data to third countries or to international organizations.

  • Right of access: Right to obtain confirmation as to whether FREMAP, MUTUA COLLABORATING WITH SOCIAL SECURITY NUMBER 61 is processing personal data that concern you or not and, in this case, to access them.

    Right of rectification: Right to request modification or rectification of your data if they are inaccurate.

    Right of erasure: Right to request that your data be deleted or deleted by illicit data processing, due to the disappearance of the purpose that motivated the processing or collection, when you revoke your consent or object to it being processed or when they must be deleted in compliance with a legal obligation.

    Right of opposition: The right to object at any time for reasons related to your particular situation, to personal data that concern you being processed based on a public interest or a legitimate interest of the data controller or a third party.

    Right of limitation of the processing: The right to obtain the limitation of processing of your data, if you contest its accuracy, if the processing is unlawful, if personal data is no longer required for the purposes of processing or if you have exercised your right to object to processing your data.

    Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly used format and to read it in a mechanical way and to transfer it to another controller, provided that it is technically possible.

    The right not to be subject to individual automated decisions: Right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.


    ​The aforementioned rights may be exercised by sending a written communication to FREMAP las follows:
    • In person: At any of FREMAP's offices or hospitals, showing your original National Identity Card or equivalent identification document.
    • By e-mail: By sending the application signed by digital
      certificate to the mailbox at derechos_arco@fremap.es.

    Furthermore, you have the right to:

    revoke the consent given: If the processing has its legal basis in the consent, it has the right to revoke it. Revocation may be requested in the manner indicated above for exercising your rights.

    file a claim: You can address any concerns to the Data Protection Officer (dpd@fremap.es), and you are also entitled to file a complaint with the Spanish Data Protection Authority (www.aepd.es).

  • If you are in business with us, you will be able to provide us with your data in the pre-contractual phase. If you are administratively related to us as a company representative, when you fill in the association application form.

    If you are administratively related to us as an individual employer, from the Social Security Institute when you register in the Special Regime for Self-Employed Workers.

    In the case of a contact person of a supplier company, a mutual society member company, an individual entrepreneur, their details are provided by the company they represent or act for. If you are authorised a Mutual Society member or self-employed RED, your data is provided by the General Treasury of the Social Security.

    In the case of data processing for the purpose of carrying out satisfaction surveys, the data that will be used for the purpose of carrying out such surveys will be the data that you have provided to us for the purpose of establishing the relationship with the Mutual Society.

Job candidates

  • FREMAP, MUTUA COLLABORADORA CON LA SEGURIDAD SOCIAL Nº 61, with registered office at Carretera de Pozuelo número 61, 28222 Majadahonda (Madrid). Contact us by post at the address indicated or by email at derechos_arco@fremap.es.

    The Data Protection Officer is the person responsible for safeguarding your privacy in our company. If you need to contact them, you can do so at dpd@fremap.es or by sending a letter to the previous address, including the reference “Data Protection Officer.”

  • Identification and contact details, personal characteristics, academic and professional data, image, employment details and health data (psychological data obtained from psychotechnical testing)

  • As the main purpose, for the management of personnel selection processes, assessment of personal aspects (profile creation) and provision of jobs in which they participate. We inform you that FREMAP will carry out automated processing with the information you obtain from the psychotechnical test you are given (profiling), if you provide Your consent to this end, given that FREMAP needs to obtain information that allows you to decide on the best suitability and integration of the person with the job you are going to perform. In this psychotechnical test, professional skills and personality factors are evaluated that have to do with professional and/or vocational training (skills measurement test).

    Under no circumstances will the result of the psychotechnical test be used alone to rule out the selection process in which it has been included, and only one of the different factors to be considered. For selection or removal of candidates, FREMAP will take into account other factors, such as personal interviews, previous experience, assessment of the test period and the result of the examinations carried out. Factors from which FREMAP will reach the decision to select or download them for the vacancy offered (criteria of the decision or logic applied).

    The decision on how to select or download the candidate will be taken by the staff in charge of the selection process and will never be a decision based solely on the automated processing of their data.

    In addition, for video surveillance and control of access to facilities for security purposes.

  • They will be kept for the time necessary to comply with the purpose for which they were collected and to determine the possible responsibilities that may derive from this purpose and the processing of the data and while the data subject does not exercise their right of erasure

  • The processing of your personal data for the management of personnel selection processes and the provision of jobs in which you participate is necessary for the application of pre-contractual measures (article 6.1.b) Regulation (EU) 2016/679, General Data Protection).

    In relation to the special categories of data (health), such as those obtained with the psychotechnical test carried out for the assessment of Personal aspects, the processing of your data is subject to your consent, so this data will only be processed if you expressly provide your consent To do so (article 9,1 a) of General Data Protection Regulation (EU) 2016/679, in relation to Article 22,4 of that Regulation).

    The personal data collected for video surveillance and control of access to facilities are legitimately held by FREMAP, such as guaranteeing the security of persons with property and facilities (article 6,1. F) General Data Protection Regulation (EU) 2016/679): Legislative Royal Decree 2/2015, of 23 October, approving the revised text of the Workers'Statute Act.

  • You are required to provide us with your data if you want to participate in the selection process to fill a vacancy in the bank, as these are necessary for managing your candidacy and for the selection process in which you participate. If you do not provide your data, we will not be able to manage your participation in selection processes.

  • Your data will not be transferred to third parties, except for transport companies, travel agencies and hotel establishments, for trips you make during the selection processes in which you participate and it is necessary.

    We will not make any international transfer of data to third countries or to international organizations

  • Right of access: Right to obtain confirmation as to whether FREMAP, MUTUA COLLABORATING WITH SOCIAL SECURITY NUMBER 61 is processing personal data that concern you or not and, in this case, to access them.

    Right of rectification: Right to request modification or rectification of your data if they are inaccurate.

    Right of erasure: Right to request that your data be deleted or deleted by illicit data processing, due to the disappearance of the purpose that motivated the processing or collection, when you revoke your consent or object to it being processed or when they must be deleted in compliance with a legal obligation.

    Right of opposition: The right to object at any time for reasons related to your particular situation, to personal data that concern you being processed based on a public interest or a legitimate interest of the data controller or a third party.

    Right of limitation of the processing: The right to obtain the limitation of processing of your data, if you contest its accuracy, if the processing is unlawful, if personal data is no longer required for the purposes of processing or if you have exercised your right to object to processing your data.

    Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly used format and to read it in a mechanical way and to transfer it to another controller, provided that it is technically possible.

    The right not to be subject to individual automated decisions: The right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you. You have the possibility of expressing your opinion, challenging the decision and requesting the intervention of a person in the process to review the decision taken.


    ​The aforementioned rights may be exercised by sending a written communication to FREMAP las follows:
    • In person: At any of FREMAP's offices or hospitals, showing your original National Identity Card or equivalent identification document.
    • By e-mail: By sending the application signed by digital
      certificate to the mailbox at derechos_arco@fremap.es

    Furthermore, you have the right to:

    revoke the consent given: If the processing has its legal basis in the consent, it has the right to revoke it. Revocation may be requested in the manner indicated above for exercising your rights.

    file a claim: You can address any concerns to the Data Protection Officer (dpd@fremap.es), and you are also entitled to file a complaint with the Spanish Data Protection Authority (www.aepd.es).

  • Of you when you give FREMAP your CV, when you submit your candidacy through the website or later when you provide your details in the Interview with the selection, psychotechnical tests, group dynamics or examinations carried out and, of the employment companies or job pools in which it is subscribed.

External workers and students in practice

  • FREMAP, MUTUA COLLABORADORA CON LA SEGURIDAD SOCIAL Nº 61, with registered office at Carretera de Pozuelo número 61, 28222 Majadahonda (Madrid). Contact us by post at the address indicated or by email at derechos_arco@fremap.es.

    The Data Protection Officer is the person responsible for safeguarding your privacy in our company. If you need to contact them, you can do so at dpd@fremap.es or by sending a letter to the previous address, including the reference “Data Protection Officer.”

  • Identification and contact details, personal characteristics, academic and professional details, employment details, image and economic, financial and insurance details.

  • Your personal data are processed to manage the practices that are carried out or to manage the services provided at the bank.

  • Your data will be kept for as long as necessary to comply with the purpose for which they were collected and to meet, where applicable, any liabilities that may derive from this purpose and data processing.

  • We are entitled to process your data as it is necessary for the execution of a contract and the fulfilment of legal obligations (article 6,1 b) and (c) of General Data Protection Regulation 2016/679).

  • You are obliged to provide us with your data in order to manage training practices or the provision of services and to comply with the contractual or collaborative relationship.

  • Your personal data is communicated to the educational centre you belong to or to the company with which you have a working or commercial relationship.

    Similarly, your data may be communicated to the labour authority when they require us to comply with obligations imposed on the Mutual Society.

    We will not make any international transfer of data to third countries or to international organizations.

  • Right of access: Right to obtain confirmation as to whether FREMAP, MUTUA COLLABORATING WITH SOCIAL SECURITY NUMBER 61 is processing personal data that concern you or not and, in this case, to access them.

    Right of rectification: Right to request modification or rectification of your data if they are inaccurate.

    Right of erasure: Right to request that your data be deleted or deleted by illicit data processing, due to the disappearance of the purpose that motivated the processing or collection, when you revoke your consent or object to it being processed or when they must be deleted in compliance with a legal obligation.

    Right of opposition: The right to object at any time for reasons related to your particular situation, to personal data that concern you being processed based on a public interest or a legitimate interest of the data controller or a third party.

    Right of limitation of the processing: The right to obtain the limitation of processing of your data, if you contest its accuracy, if the processing is unlawful, if personal data is no longer required for the purposes of processing or if you have exercised your right to object to processing your data.

    Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly used format and to read it in a mechanical way and to transfer it to another controller, provided that it is technically possible.

    The right not to be subject to individual automated decisions: Right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.


    ​The aforementioned rights may be exercised by sending a written communication to FREMAP las follows:
    • In person: At any of FREMAP's offices or hospitals, showing your original National Identity Card or equivalent identification document.
    • By e-mail: By sending the application signed by digital
      certificate to the mailbox at derechos_arco@fremap.es.

    Furthermore, you have the right to:

    revoke the consent given: If the processing has its legal basis in the consent, it has the right to revoke it. Revocation may be requested in the manner indicated above for exercising your rights.

    file a claim: You can address any concerns to the Data Protection Officer (dpd@fremap.es), and you are also entitled to file a complaint with the Spanish Data Protection Authority (www.aepd.es).

  • If you are a student in practice, your data is provided by the educational centre you belong to.

    If you are an external worker who provides services at FREMAP, your data is provided by the company with which you have a working or commercial relationship, which provides services to FREMAP.

Governing and participation bodies

  • FREMAP, MUTUA COLLABORADORA CON LA SEGURIDAD SOCIAL Nº 61, with registered office at Carretera de Pozuelo número 61, 28222 Majadahonda (Madrid). Contact us by post at the address indicated or by email at derechos_arco@fremap.es.

    The Data Protection Officer is the person responsible for safeguarding your privacy in our company. If you need to contact them, you can do so at dpd@fremap.es or by sending a letter to the previous address, including the reference “Data Protection Officer.”

  • The personal data that will be processed for the management of the governing and participation bodies are identification data (name, surname, DNI/NIE), contact details (address, telephone number and professional email address) and professional data.

  • Your data is processed for the administrative management of the governing and administrative bodies of the Mutual Society.

  • They will be kept for the time necessary to comply with the purpose for which they were collected and to determine the possible responsibilities and to attend to the claims processes against the entity, which may be presented in the future.

    In any case, the data will need to be kept for as long as necessary so that FREMAP can carry out the legal or administrative actions derived from the Auditing Administration of accounts and compliance provided for in article 98,2 of Royal Legislative Decree 8/2015 of 30 October, approving the Consolidated Text of the General Social Security Act.

    The provisions of Royal Decree 1993/1995 of 7 December approving the Regulations for the Collaboration of Mutual Societies and Article 1964 of the Civil Code shall apply.

  • Our legal basis for processing your data is compliance with legal obligations attributed to the Mutual Society, as provided for in Article 6,1 (c) of the General Data Protection Regulation (EU) 2016/679.

  • You are obliged to provide your data as it is necessary for the administrative management of the governing and administrative bodies of the Mutual Society. Otherwise, the governing bodies and the mutual society's participation could not take place.

  • Personal data processing also takes place in our company. To the extent permitted by law, we may transfer your data to recipients outside the Mutual Society. These recipients may include service providers (who, in accordance with the contracts awarded, provide services between those who are the processing of personal data) and Public bodies, insofar as we are obliged to communicate them because of legal obligation.

    We will not make any international transfer of data to third countries or to international organizations.

  • Right of access: Right to obtain confirmation as to whether FREMAP, MUTUA COLLABORATING WITH SOCIAL SECURITY NUMBER 61 is processing personal data that concern you or not and, in this case, to access them.

    Right of rectification: Right to request modification or rectification of your data if they are inaccurate.

    Right of erasure: Right to request that your data be deleted or deleted by illicit data processing, due to the disappearance of the purpose that motivated the processing or collection, when you revoke your consent or object to it being processed or when they must be deleted in compliance with a legal obligation.

    Right of opposition: The right to object at any time for reasons related to your particular situation, to personal data that concern you being processed based on a public interest or a legitimate interest of the data controller or a third party.

    Right of limitation of the processing: The right to obtain the limitation of processing of your data, if you contest its accuracy, if the processing is unlawful, if personal data is no longer required for the purposes of processing or if you have exercised your right to object to processing your data.

    Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly used format and to read it in a mechanical way and to transfer it to another controller, provided that it is technically possible.

    The right not to be subject to individual automated decisions: Right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.


    ​The aforementioned rights may be exercised by sending a written communication to FREMAP las follows:
    • In person: At any of FREMAP's offices or hospitals, showing your original National Identity Card or equivalent identification document.
    • By e-mail: By sending the application signed by digital
      certificate to the mailbox at derechos_arco@fremap.es

    Furthermore, you have the right to:

    revoke the consent given: If the processing has its legal basis in the consent, it has the right to revoke it. Revocation may be requested in the manner indicated above for exercising your rights.

    file a claim: You can address any concerns to the Data Protection Officer (dpd@fremap.es), and you are also entitled to file a complaint with the Spanish Data Protection Authority (www.aepd.es).

  • Your data is provided by you when you request to form part of a governing body and the mutual society's participation.

Institutional Activities, Meetings and Events

  • FREMAP, MUTUA COLLABORADORA CON LA SEGURIDAD SOCIAL Nº 61, with registered office at Carretera de Pozuelo número 61, 28220 Majadahonda (Madrid). Contact us by post at the address indicated or by email at derechos_arco@fremap.es.

    The Data Protection Officer is the person responsible for safeguarding your privacy in our company. If you need to contact them, you can do so at dpd@fremap.es or by sending a letter to the previous address, including the reference “Data Protection Officer.”

  • In the course of its activity, FREMAP organises events, seminars, webinar and interviews in which the data are taken and recorded Identification (name/DNI/NIE), as well as biometric data (image and voice) of the participants, and the company they belong to or represent.

    Similarly, the capture and recording of images and voice of the people participating in the events, seminars, courses, seminars, webinar and interviews may be carried out.

  • The data collected from participants in events, seminars, webinars and interviews organised by FREMAP will be used to control participants In these and to make known the activities that FREMAP carries out, through institutional documentation, web applications and social networks, as well as, in Where appropriate, justify the development of these actions before official bodies or third parties that must receive them under legal obligation.

  • The personal data of the participants in events, seminars, webinars and interviews held by the Mutual Society in the course of its activity is Will be kept for the time necessary for dissemination in institutional documentation, web applications and social networks and for five years from the end of the process or Until they prescribe any actions that may be taken to demand responsibility from the Mutual Society.

  • The legal basis for the processing of your data is your consent, in accordance with Article 6,1 a) of Regulation (EU) 2016/679, General Data Protection Officer, so only your data will be processed if you have expressly stated that you consent to it.

  • You do not have any obligation to provide your data. Participation in events, seminars, webinars and interviews organised by FREMAP to publicize its activity is voluntary.

    If you do not provide your data and expressly consent to the processing, you will not be able to participate in events, seminars, webinars and interviews to prevent your image or voice being recorded.

  • The data will be disclosed, if applicable, through institutional documentation, web applications and social networks, so third parties interested in FREMAP's activities will be informed, as well as those recipients who must receive them under legal obligation.

    We will not make any international transfer of data to third countries or to international organizations.

  • Right of access:The right to obtain confirmation as to whether FREMAP, Mutual Society No. 61 Collaborating with the Social Security Institute is, or is not processing personal data that concerns you and, in this case, to access that data.

    Right of rectification: Right to request modification or rectification of your data if they are inaccurate.

    Right of erasure: Right to request that your data be deleted or deleted by illicit data processing, due to the disappearance of the purpose that motivated the processing or collection, when you revoke your consent or object to it being processed or when they must be deleted in compliance with a legal obligation.

    Right of opposition: The right to object at any time for reasons related to your particular situation, to personal data that concern you being processed based on a public interest or a legitimate interest of the data controller or a third party.

    Right of limitation of the processing: The right to obtain the limitation of processing of your data, if you contest its accuracy, if the processing is unlawful, if personal data is no longer required for the purposes of processing or if you have exercised your right to object to processing your data.

    Right to portability of data: The right to receive the personal data that concerns you in a structured, commonly-used format that can be digitally read, and to send it to another data controller, provided this is technically possible.

    The right not to be subject to individual automated decisions: : Right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.


    ​The aforementioned rights may be exercised by sending a written communication to FREMAP las follows:
    • In person: At any of FREMAP's offices or hospitals, showing your original National Identity Card or equivalent identification document.
    • By e-mail: By sending the application signed by digital
      certificate to the mailbox at derechos_arco@fremap.es

    Furthermore, you have the right to:

    Revoke the consent you have provided: If the processing has its legal basis in the consent, it has the right to revoke it. Revocation may be requested in the manner indicated above for exercising your rights.

    To file a claim:You can address any concerns to the Data Protection Officer (dpd@fremap.es), and you are also entitled to file a complaint with the Spanish Data Protection Authority (www.aepd.es).

  • You can also attend events, seminars, courses or seminars, webinar and interviews.

Claim management

  • FREMAP, MUTUA COLLABORADORA CON LA SEGURIDAD SOCIAL Nº 61, with registered office at Carretera de Pozuelo número 61, 28222 Majadahonda (Madrid). Contact us by post at the address indicated or by email at derechos_arco@fremap.es.

    The Data Protection Officer is the person responsible for safeguarding your privacy in our company. If you need to contact them, you can do so at dpd@fremap.es or by sending a letter to the previous address, including the reference “Data Protection Officer.”

  • If you file a complaint or claim, we will process your identification and contact details, name, surname, DNI or passport, postal and email address, telephone number, signature and details related to the complaint or claim you make.

  • Your personal data will be used to attend to and properly manage your complaint or claim.

  • If your complaint or claim is related to our collaboration with the Social Security protective action, we will keep them while providing healthcare and management We will provide the benefits derived from your status as a beneficiary of the social security protection action and, in any case, during the limitation periods for any actions that may arise against the Mutual Society.

  • If you are a Social Security beneficiary and we attend to you in our healthcare or administrative centres, we are entitled to this because article 9.2.b allows you to do so) And f) General Data Protection Regulation (EU) 2016/679, as it is necessary to process it in order to comply with obligations and to exercise Specific rights in the field of social security and protection and we are entitled to process the rest of your data because we are allowed by article 6.1.c) Of this Regulation, as it is obliged to comply with Royal Decree 8/2015 of 30 October, approving the revised text of The General Social Security Act and Royal Decree 1993/1995, of 7 December, on the Collaboration of Mutual Societies with Social Security.

  • You are obliged to provide us with your data when filing your complaint or claim because your refusal to provide them prevents us from processing your complaint or claim.

  • To the Ministry of Employment and Social Security and the Bodies and Entities that make up the Social Security Institute to control the correct functioning of our collaboration with these bodies, In compliance with the Social Security regulations, Royal Decree 8/2015 of 30 October approving the consolidated text of the General Social Security Act and Royal Decree 1993/1995, of 7 December, on the Collaboration of Mutual Societies with the Social Security Institute and In addition, they will be transferred or communicated to those recipients who must receive them under legal obligation.

    We will not make any international transfer of data to third countries or to international organizations.

  • Right of access: Right to obtain confirmation as to whether FREMAP, MUTUA COLLABORATING WITH SOCIAL SECURITY NUMBER 61 is processing personal data that concern you or not and, in this case, to access them.

    Right of rectification: Right to request modification or rectification of your data if they are inaccurate.

    Right of erasure: Right to request that your data be deleted or deleted by illicit data processing, due to the disappearance of the purpose that motivated the processing or collection, when you revoke your consent or object to it being processed or when they must be deleted in compliance with a legal obligation.

    Right of opposition: The right to object at any time for reasons related to your particular situation, to personal data that concern you being processed based on a public interest or a legitimate interest of the data controller or a third party.

    Right of limitation of the processing: The right to obtain the limitation of processing of your data, if you contest its accuracy, if the processing is unlawful, if personal data is no longer required for the purposes of processing or if you have exercised your right to object to processing your data.

    Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly used format and to read it in a mechanical way and to transfer it to another controller, provided that it is technically possible.

    The right not to be subject to individual automated decisions: Right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.


    ​The aforementioned rights may be exercised by sending a written communication to FREMAP las follows:
    • In person: At any of FREMAP's offices or hospitals, showing your original National Identity Card or equivalent identification document.
    • By e-mail: By sending the application signed by digital
      certificate to the mailbox at derechos_arco@fremap.es

    Furthermore, you have the right to:

    Revoke the consent you have provided: If the processing has its legal basis in the consent, it has the right to revoke it. Revocation may be requested in the manner indicated above for exercising your rights.

    To file a claim:You can address any concerns to the Data Protection Officer (dpd@fremap.es), and you are also entitled to file a complaint with the Spanish Data Protection Authority (www.aepd.es).

  • Of yourself when you are in person at our administrative and healthcare centres and make a complaint or claim.

Remote Management

  • FREMAP, MUTUA COLLABORADORA CON LA SEGURIDAD SOCIAL Nº 61, with registered office at Carretera de Pozuelo número 61, 28222 Majadahonda (Madrid).

    The Data Protection Officer is the person responsible for safeguarding your privacy in our company. If you need to contact her, you can do so at dpd@fremap.es or by sending a letter to the previous address, including the reference “Data Protection Officer.”

  • Your identification details (full name, DNI/NIE/Passport, electronic signature, Social Security membership number), details of Contact (postal or email address and telephone number), personal characteristics (date of birth, place of birth, age, sex, nationality), professional details and employment details.

  • For the management and control of communications received, requests for access and use of web applications owned by FREMAP that are made and for the resolution of technical incidents that may occur.

  • The data will be kept for as long as necessary to handle your communication or request, or to resolve the incident reported and, in any case, for the period necessary to deal with the claims processes that may be filed against the bank.

  • We are entitled to process your personal data because it allows us to do so in Article 6,1 (c) and (f) and Article 9,2 (a) of Regulation (EU) ) 2016/679, General Data Protection Officer, as it is necessary to process it in order to comply with data protection obligations, specifically In the field of attention to the rights of the interested parties, in accordance with Articles 12 to 22 of the aforementioned Regulation and Articles 12 18 of Organic Law 3/2018 of 5 December on Personal Data Protection and guarantee of digital rights. Furthermore, its processing is necessary to meet the legitimate mutual interests of the parties, such as FREMAP's interest in providing a fast and simple online service to interested users and the User's interest in making quick and secure communications or accessing voluntary and free services provided by FREMAP.

  • You are obliged to provide your data, since otherwise you cannot attend to the communication you send us or the request to access the applications owned by FREMAP you make, or resolve any technical incidents that have occurred.

  • No data will be communicated to third parties except in cases where it is necessary to comply with a legal obligation. International transfers of personal data will not be carried out, unless legally required.

    • Right of access: Right to obtain confirmation as to whether FREMAP, MUTUA COLLABORATING WITH SOCIAL SECURITY NUMBER 61 is processing personal data that concern you or not and, in this case, to access them.
    • Right of rectification: Right to request modification or rectification of your data if they are inaccurate.
    • Right of erasure: Right to request that your data be deleted or deleted by illicit data processing, due to the disappearance of the purpose that motivated the processing or collection, when you revoke your consent or object to it being processed or when they must be deleted in compliance with a legal obligation.
    • Right of opposition: The right to object at any time for reasons related to your particular situation, to personal data that concern you being processed based on a public interest or a legitimate interest of the data controller or a third party.
    • Right of limitation of the processing: The right to obtain the limitation of processing of your data, if you contest its accuracy, if the processing is unlawful, if personal data is no longer required for the purposes of processing or if you have exercised your right to object to processing your data.
    • Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly used format and to read it in a mechanical way and to transfer it to another controller, provided that it is technically possible.
    • The right not to be subject to individual automated decisions: Right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.
    ​The aforementioned rights may be exercised by sending a written communication to FREMAP las follows:
    • In person: At any of FREMAP's offices or hospitals, showing your original National Identity Card or equivalent identification document.
    • By e-mail: By sending the application signed by digital
      certificate to the mailbox at derechos_arco@fremap.es
    ​ ​You also have the right to:
    • Revoke the consent you have provided: If the processing has its legal basis in the consent, it has the right to revoke it. Revocation may be requested in the manner indicated above for exercising your rights.
    • Lodge a claim: You can address any concerns to the Data Protection Officer (dpd@fremap.es), and you are also entitled to file a complaint with the Spanish Data Protection Authority (www.aepd.es).
  • Only the data you have provided us in the communications addressed or in the completed forms will be processed.

Security and Video Surveillance

  • FREMAP, MUTUA COLLABORADORA CON LA SEGURIDAD SOCIAL Nº 61, with registered office at Carretera de Pozuelo número 61, 28222 Majadahonda (Madrid). Contact us by post at the address indicated or by email at derechos_arco@fremap.es.

    The Data Protection Officer is the person responsible for safeguarding your privacy in our company. If you need to contact them, you can do so at dpd@fremap.es or by sending a letter to the previous address, including the reference “Data Protection Officer.”

  • If you visit or access our administrative or healthcare centres and we record your image or collect your data at the reception or in the access control, the details of your image, name, surname, DNI and organisation or company to which you belong will be processed.

    If you access the internet via the WiFi connection provided by FREMAP, the data of your telephone number will be processed, the email address and the IP address.

  • To ensure the safety of people, goods and facilities through video surveillance and visit control.

    To identify access to the WiFi network, if you have knowledge of fraudulent use of the network.

  • In the case of capturing and recording your images via video cameras, the data is deleted one month after it is captured by deleting The image, except for recordings related to criminal or administrative offences in the field of public security, ongoing police investigation or an open judicial or administrative procedure. If you were receiving the data or checking access to our facilities, the data is deleted in one month from the collection.

    In the case of WiFi network access data, the data will be deleted 90 days after it is captured, a period that is deemed necessary to detect possible irregularities.

  • Our legal basis for processing the identification data is based on our legitimate interest provided for in Article 6.1.f) of General Protection Regulation (EU) 2016/679 Data) to process images through cameras or video cameras and to control physical access in order to preserve the Security of people, goods and facilities, as their interests do not prevail over fundamental rights and freedoms.

    Our legal basis for processing the identification data is based on the consent freely given by the data subject who wishes to use the WiFi network provided to them, article 6.1.a) of the General Data Protection Regulation (EU) 2016/679.

  • You have the obligation to provide us with your data because we must protect people, goods and facilities. Refusal to provide them prevents them from accessing our centres for security reasons.

    If you wish to use the Wi-Fi network provided to you, you must also identify yourself in order to register your access for security reasons.

  • To the Security Forces and Tribunals in the event of criminal or administrative offences

    We will not make any international transfer of data to third countries or to international organizations.

  • Right of access: Right to obtain confirmation as to whether FREMAP, MUTUA COLLABORATING WITH SOCIAL SECURITY NUMBER 61 is processing personal data that concern you or not and, in this case, to access them.

    Right of rectification: Right to request modification or rectification of your data if they are inaccurate.

    Right of erasure: Right to request that your data be deleted or deleted by illicit data processing, due to the disappearance of the purpose that motivated the processing or collection, when you revoke your consent or object to it being processed or when they must be deleted in compliance with a legal obligation.

    Right of opposition: The right to object at any time for reasons related to your particular situation, to personal data that concern you being processed based on a public interest or a legitimate interest of the data controller or a third party.

    Right to restrict processing: The right to restrict the processing of your data, if you contest its accuracy, if it is being processed unlawfully, if your personal data is no longer needed for the purpose it was originally being processed for, or if you have exercised your right to object to the processing of your data.

    Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly used format and to read it in a mechanical way and to transfer it to another controller, provided that it is technically possible.

    The right not to be subject to individual automated decisions: Right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.


    ​The aforementioned rights may be exercised by sending a written communication to FREMAP las follows:
    • In person: At any of FREMAP's offices or hospitals, showing your original National Identity Card or equivalent identification document.
    • By e-mail: By sending the application signed by digital
      certificate to the mailbox at derechos_arco@fremap.es

    Furthermore, you have the right to:

    Revoke the consent you have provided: If the processing has its legal basis in the consent, it has the right to revoke it. Revocation may be requested in the manner indicated above for exercising your rights.

    Lodge a claim: You can address any concerns to the Data Protection Officer (dpd@fremap.es), and you are also entitled to file a complaint with the Spanish Data Protection Authority (www.aepd.es).

  • Of you, when you are in person at our administrative and healthcare centres, your image is recorded or your data is collected at the reception or access control.

    From you when you access FREMAP's WiFi network via your device.

Rights of the interested party

  • FREMAP, Mutual Society Collaborating with the Social Security Institute No. 61, with registered office at Carretera de Pozuelo nº 61, 28222, Majadahonda (MADRID).
    The Data Protection Officer is the person responsible for safeguarding your privacy in our company.

    If you need to contact her, you can do so at dpd@fremap.es, or by sending a letter to the previous address, including the reference “Data Protection Area.”

  • Your identification details (name and surname) and contact details (postal or email address and telephone number), as well as the identification and contact details of the persons who are listed in the application for exercising their rights.

  • To comply with your right to the protection of personal data. Accordingly, the request will be registered and processed, making any appropriate communications according to the form of contact provided.

    In addition, if necessary, your data will be processed in order to be able to prove to the Control Authority the attention of the exercised right.

  • The data will be kept for as long as necessary to handle your request and in any case for the period necessary to deal with any claims that may be filed against the bank.

  • We are entitled to process your personal data because we are allowed by Article 6,1 (c) of Regulation (EU) 2016/679, General Protection Of Personal Data, as it is necessary to process it in order to comply with data protection obligations, specifically in the field of the attention of Rights of interested parties, in accordance with the provisions of Articles 12 to 22 of the aforementioned Regulation and Articles 12 to 18 of Organic Law 3 / 2018 of 5 December on Personal Data Protection and guarantee of digital rights.

  • You are obliged to provide your data, as otherwise the exercised right cannot be complied with.

  • No data will be communicated to third parties except in cases where it is necessary to comply with a legal obligation. In this regard, your data may be transferred to the Control Authority (Spanish Data Protection Agency), the Management Body and the Fabric Of the Mutual Society, the Ministry of Employment and Social Security, its dependent bodies, courts and tribunals on demand or in defence of legal proceedings or Administrative, Security Forces and Bodies in the event of civil, criminal or administrative offences (article 6.1.c) and f) of Regulation (EU) 2016/679 General Data Protection.

    International transfers of personal data will not be carried out, unless legally required.

  • Right of access: Right to obtain confirmation as to whether FREMAP, MUTUA COLLABORATING WITH SOCIAL SECURITY NUMBER 61 is processing personal data that concern you or not and, in this case, to access them.

    Right of rectification: Right to request modification or rectification of your data if they are inaccurate.

    Right of erasure: Right to request that your data be deleted or deleted by illicit data processing, due to the disappearance of the purpose that motivated the processing or collection, when you revoke your consent or object to it being processed or when they must be deleted in compliance with a legal obligation.

    Right of opposition: The right to object at any time for reasons related to your particular situation, to personal data that concern you being processed based on a public interest or a legitimate interest of the data controller or a third party.

    Right of limitation of the processing: The right to obtain the limitation of processing of your data, if you contest its accuracy, if the processing is unlawful, if personal data is no longer required for the purposes of processing or if you have exercised your right to object to processing your data.

    Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly used format and to read it in a mechanical way and to transfer it to another controller, provided that it is technically possible.

    The right not to be subject to individual automated decisions: Right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.


    ​​The aforementioned rights may be exercised by sending a written communication to FREMAP las follows:
    • In person: At any of FREMAP's offices or hospitals, showing your original National Identity Card or equivalent identification document.
    • By e-mail: By sending the application signed by digital
      certificate to the mailbox at derechos_arco@fremap.es.​ ​

    You also have the right to:

    Revoke the consent you have provided: If the processing has its legal basis in the consent, it has the right to revoke it. Revocation may be requested in the manner indicated above for exercising your rights.

    Lodge a claim: You can address any concerns to the Data Protection Officer (dpd@fremap.es), and you are also entitled to file a complaint with the Spanish Data Protection Authority (www.aepd.es).​

  • Of yourself when you request in writing to exercise your right to protection of personal data (access, rectification, deletion, objection, limitation of processing, portability and right not to be subject to automated individual decisions.

Management of Security Breaches

  • FREMAP, MUTUA COLLABORADORA CON LA SEGURIDAD SOCIAL Nº 61, with registered office at Carretera de Pozuelo número 61, 28222 Majadahonda (Madrid). Contact us by post at the address indicated or by email at derechos_arco@fremap.es.

    The Data Protection Officer is the person responsible for safeguarding your privacy in our company. If you need to contact them, you can do so at dpd@fremap.es or by sending a letter to the previous address, including the reference “Data Protection Officer.”

  • The personal data that will be processed to manage the security incident detected will be identification data, name, surname, DNI/NIE , contact details, address, telephone number and email address for professionals and professional or employment data as a job or position held by the company.

  • To manage security breaches that may occur in the company.

  • Your data will be kept for the time necessary to manage the incident detected and in any case, during the limitation periods for any actions that may arise against the Mutual Society.

  • Because the processing is necessary to meet the legal obligations of the Mutual Society (article 6.1.c) of Regulation (EU) 2016/679 on General Data Protection).

  • You have the obligation to provide the information required to resolve the incident, since otherwise it could not be resolved properly and comply with the legal obligations imposed on the Mutual Society.

  • Your data may be communicated to the Spanish Data Protection Agency (AEPD) in compliance with obligations legally attributed by the Data Protection Data and, if the security incident could have involved a high risk for third party rights and freedoms, the incident and the information relating to it will be reported to the data subjects.

    To security forces and bodies. Courts and Tribunals in the event of criminal or administrative offences.

    We will not make any international transfer of data to third countries or to international organizations.

  • Right of access: Right to obtain confirmation as to whether FREMAP, MUTUA COLLABORATING WITH SOCIAL SECURITY NUMBER 61 is processing personal data that concern you or not and, in this case, to access them.

    Right of rectification: Right to request modification or rectification of your data if they are inaccurate.

    Right of erasure: Right to request that your data be deleted or deleted by illicit data processing, due to the disappearance of the purpose that motivated the processing or collection, when you revoke your consent or object to it being processed or when they must be deleted in compliance with a legal obligation.

    Right of opposition: The right to object at any time for reasons related to your particular situation, to personal data that concern you being processed based on a public interest or a legitimate interest of the data controller or a third party.

    Right of limitation of the processing: The right to obtain the limitation of processing of your data, if you contest its accuracy, if the processing is unlawful, if personal data is no longer required for the purposes of processing or if you have exercised your right to object to processing your data.

    Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly used format and to read it in a mechanical way and to transfer it to another controller, provided that it is technically possible.

    The right not to be subject to individual automated decisions: Right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you. 


    ​The aforementioned rights may be exercised by sending a written communication to FREMAP las follows:
    • In person: At any of FREMAP's offices or hospitals, showing your original National Identity Card or equivalent identification document.
    • By e-mail: By sending the application signed by digital
      certificate to the mailbox at derechos_arco@fremap.es

    ​Furthermore, you have the right to:

    Revoke the consent you have provided: If the processing has its legal basis in the consent, it has the right to revoke it. Revocation may be requested in the manner indicated above for exercising your rights.

    Lodge a claim: You can address any concerns to the Data Protection Officer (dpd@fremap.es), and you are also entitled to file a complaint with the Spanish Data Protection Authority (www.aepd.es).

Compliance Channel

  • FREMAP, Mutual Society Collaborating with the Social Security Institute No. 61, with registered office at Carretera de Pozuelo nº 61, 28222, Majadahonda (MADRID).

    The Data Protection Officer is the person responsible for safeguarding your privacy in our company. If you need to contact her, you can do so at dpd@fremap.es, or by sending a letter to the previous address, including the reference “Data Protection Area.”

  • Identification data (name and surname), contact details (postal or e-mail address and telephone number) and those listed in the communication received in the FREMAP Compliance Channel, or obtained in the investigations carried out, if you are the person reporting and, if not, when you are expressly mentioned as a person affected by the facts or a witness to the facts reported, whether as FREMAP employees or third parties. 

    In case of anonymous communication, if you are the person reporting, your personal data will not be processed as in this case FREMAP does not record any information about the reporting person.

  • To manage the communications received through the FREMAP Compliance Channel, in accordance with the established procedure and the provisions of current legislation, within the framework of the Crime Prevention Plan implemented by FREMAP. Accordingly, your data will be processed in order to act on the communications received in the Compliance Channel, to open and process the corresponding investigation file, and to initiate or attend to the necessary complaint processes.

  • Your personal data will be kept for the time necessary to decide whether to open an investigation into the reported facts and will be destroyed within a maximum period of three months if it is not agreed to open an investigation file.  If it is necessary to initiate an investigation file, data will be stored for the time necessary to determine any potential liability and to deal with any complaint processes that may be filed or that need to be dealt with. Under no circumstances may the retention of the data exceed a period of ten years, in accordance with the provisions of article 26 of Spanish Law 2/2023 of 20 February on the protection of persons who report breaches of the law and the fight against corruption (Register of information). 
  • We are entitled to process your personal data under article 6(1)(c) of the General Personal Data Protection Regulation (EU) 2016/679, as processing is necessary for the fulfilment of obligations under Spanish Law 2/2023 of 20 February on the protection of persons who report breaches of the law and the fight against corruption.

  • Knowledge of your personal data facilitates the investigation of the reported facts, however, you are under no obligation to provide your data. 

  • Data will not be communicated to third parties except in those cases in which it is necessary to comply with a legal obligation or to make it available to competent Public Administrations, Courts and Tribunals at the request or in defence of judicial or administrative proceedings and to Security Forces and Bodies in the event of civil, criminal or administrative offences. 

    International transfers of personal data will not be carried out, unless legally required.

    • Right of access: Right to obtain confirmation as to whether FREMAP, MUTUA COLLABORATING WITH SOCIAL SECURITY NUMBER 61 is processing personal data that concern you or not and, in this case, to access them.​
    • Right of rectification: Right to request modification or rectification of your data if they are inaccurate.
    • Right of erasure: Right to request that your data be deleted or deleted by illicit data processing, due to the disappearance of the purpose that motivated the processing or collection, when you revoke your consent or object to it being processed or when they must be deleted in compliance with a legal obligation.
    • Right of opposition: The right to object at any time for reasons related to your particular situation, to personal data that concern you being processed based on a public interest or a legitimate interest of the data controller or a third party.
    • Right of limitation of the processing: The right to obtain the limitation of processing of your data, if you contest its accuracy, if the processing is unlawful, if personal data is no longer required for the purposes of processing or if you have exercised your right to object to processing your data.
    • Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly used format and to read it in a mechanical way and to transfer it to another controller, provided that it is technically possible.
    • The right not to be subject to individual automated decisions: Right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.
    ​The aforementioned rights may be exercised by sending a written communication to FREMAP las follows:
    • In person: At any of FREMAP's offices or hospitals, showing your original National Identity Card or equivalent identification document.
    • By e-mail: By sending the application signed by digital
      certificate to the mailbox at derechos_arco@fremap.es
    ​ ​You also have the right to:
    • Revoke the consent you have provided: If the processing has its legal basis in the consent, it has the right to revoke it. Revocation may be requested in the manner indicated above for exercising your rights.
    • Lodge a claim: You can address any concerns to the Data Protection Officer (dpd@fremap.es), and you are also entitled to file a complaint with the Spanish Data Protection Authority (www.aepd.es).
  • From yourself when you provide them to us when submitting the communication. They may also originate from the communication made by third parties when expressly mentioned.​

Prevention and Control SARS-CoV-2

  • FREMAP, Mutual Society Collaborating with the Social Security Institute No. 61, with registered office at Carretera de Pozuelo nº 61, 28222, Majadahonda (MADRID).

    The Data Protection Officer is the person responsible for safeguarding your privacy in our company. If you need to contact her, you can do so at dpd@fremap.es, or by sending a letter to the previous address, including the reference “Data Protection Area.”

  • Your identification details (name and surname) and your health data (body temperature, illnesses or disorders that may be symptoms of infection with SARS-CoV-2 And serological or test results that are prescribed or provided and allow us to determine whether the disease has contracted and is in a period of contagion).

  • For the prevention and control of SARS-CoV-2 infection, in accordance with the recommendations of the Health Authorities; Health protection for people who carry out their duties or provide services at the centre; And compliance with Occupational Risk Prevention obligations.

  • The data collected will be recorded in the Clinical History and kept indefinitely in the same, taking into account the healthcare purpose of History.

  • We are entitled to process your personal data because we are allowed by Article 6,1 e) of Regulation (EU) 2016/679, General Protection Of Personal Data, as it is necessary to process it in order to comply with general public health interests, in relation to article 9,2 h) of that Regulation.

    If you provide services with the Mutual Society, the processing is necessary to comply with obligations related to the health and safety of workers , the processing of your data is legitimised in Articles 6,1 (c) and 9,2 (b) of Regulation (EU) 2016/679, General Data Protection.

  • Knowledge of your health status is necessary to take the appropriate measures to prevent and control SARS-CoV-2 infection, so you must provide the information that allows you to know your clinical situation, collaborating with the prevention and control of the pandemic.

  • No data will be communicated to third parties except in cases where it is necessary to comply with a legal obligation. In this regard, your data may be transferred to the Public Health Services and the Health Authorities and Services with responsibilities in the area of Occupational Risk Prevention.

    International transfers of personal data will not be carried out, unless legally required.

    • Right of access: Right to obtain confirmation as to whether FREMAP, MUTUA COLLABORATING WITH SOCIAL SECURITY NUMBER 61 is processing personal data that concern you or not and, in this case, to access them.
    • Right of rectification: Right to request modification or rectification of your data if they are inaccurate.
    • Right of erasure: Right to request that your data be deleted or deleted by illicit data processing, due to the disappearance of the purpose that motivated the processing or collection, when you revoke your consent or object to it being processed or when they must be deleted in compliance with a legal obligation.
    • Right of opposition: The right to object at any time for reasons related to your particular situation, to personal data that concern you being processed based on a public interest or a legitimate interest of the data controller or a third party.
    • Right of limitation of the processing: The right to obtain the limitation of processing of your data, if you contest its accuracy, if the processing is unlawful, if personal data is no longer required for the purposes of processing or if you have exercised your right to object to processing your data.
    • Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly used format and to read it in a mechanical way and to transfer it to another controller, provided that it is technically possible.
    • The right not to be subject to individual automated decisions: Right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.
    ​The aforementioned rights may be exercised by sending a written communication to FREMAP las follows:
    • In person: At any of FREMAP's offices or hospitals, showing your original National Identity Card or equivalent identification document.
    • By e-mail: By sending the application signed by digital
      certificate to the mailbox at derechos_arco@fremap.es
    ​ ​You also have the right to:
    • Revoke the consent you have provided: If the processing has its legal basis in the consent, it has the right to revoke it. Revocation may be requested in the manner indicated above for exercising your rights.
    • Lodge a claim: You can address any concerns to the Data Protection Officer (dpd@fremap.es), and you are also entitled to file a complaint with the Spanish Data Protection Authority (www.aepd.es).
  • By you when you communicate them to us by phone or in person at a FREMAP centre.

COVID-19 vaccination

  • The Data Controller is the Ministry of Health (www.mscbs.go.es). FREMAP Mutual Society Collaborating with the Social Security Institute No. 61, with registered office at Carretera de Pozuelo nº 61, 28222, Majadahonda (MADRID), will process your data as Data Processor.

    If you wish to contact the FREMAP Data Protection Officer, you can do so by writing to dpd@fremap.es, or by sending a letter to the previous address, including the reference “Data Protection Area.”

  • Your identification details (name, surname and ID), contact details (postal or email address and telephone number), as well as your health details (vaccination date and possible adverse reactions after the vaccination).

  • Your data will be processed by the Data Controller (Ministry of Health) to be able to inject the drug against COVID-19, collaborating with the Public Health Services in the Coronavirus vaccination campaign in Spain. Accordingly, your data will be processed to verify that you are a company worker associated with the Mutual Society or a self-employed worker who is a member and can carry out the vaccination, as well as monitor possible adverse reactions, recording these circumstances for subsequent communication to the competent Health Authorities.

  • Your data will be kept for the time necessary to carry out the healthcare provided to the Mutual Society by the Health Authorities, and to determine the possible responsibilities that may arise from this purpose and the processing of the data.

  • We are entitled to process your personal data as it is necessary to fulfil a mission carried out in the essential public interest in the field of Health Public (article 6,1 c) and Article 9,2 g) of Regulation (EU) 2016/679, General Data Protection), having in It is a situation of the pandemic that has been crossed, and being the general objective of the COVID-19 Vaccination in Spain, it reduces morbidity and mortality caused by this Disease, protecting the most vulnerable groups by means of Vaccination against COVID-19.

  • Vaccination is voluntary, you are not obliged to provide your data. If you do not provide your data, we cannot verify whether you belong to the group protected by FREMAP and proceed to carry out the vaccination against COVID-19.

  • Your data will be communicated to the Regional Health Departments, which are dependent on the Ministry of Health, registering in the computer system set up by the Departments the information relating to the vaccination and, where applicable, to serious adverse reactions that you report. No other personal data communications, such as international transfers, will be made, except for legal obligations.

  • Data Protection rights must be exercised before the Data Controller, which is the Ministry of Health, which is the body responsible for collecting data until the end of the health crisis. You can contact the Ministry of Health to exercise the following rights:

    • Right of access: Right to obtain confirmation as to whether or not personal data concerning you are being processed and, in this case, to access them.
    • Right of rectification: Right to request modification or rectification of your data if they are inaccurate.
    • Right of erasure: Right to request that your data be deleted or deleted by illicit data processing, due to the disappearance of the purpose that motivated the processing or collection, when you revoke your consent or object to it being processed or when they must be deleted in compliance with a legal obligation.
    • Right of opposition: Right to object at any time for reasons related to your particular situation, to personal data that concern you being processed.
    • Right to restrict processing: The right to restrict the processing of your data, if you contest its accuracy, if it is being processed unlawfully, if your personal data is no longer needed for the purpose it was originally being processed for, or if you have exercised your right to object to the processing of your data.
    • Right of portability of the data: The right to receive the personal data that concerns you in a structured, commonly used format and to read it in a mechanical way and to transfer it to another controller, provided that it is technically possible.
    • The right not to be subject to individual automated decisions: Right to object to decisions based solely on the automated processing of personal data, including the creation of profiles, when this decision may legally or significantly affect you.

    You can exercise these rights, by completing the form published by the Ministry of Health on its website

    Or, you can request it in person, through in-person healthcare offices of the Ministry of Health

    In addition, you have the right:

    • Lodge a claim: You can address any concerns to the Data Protection Officer (dpd@fremap.es), and you are also entitled to file a complaint with the Spanish Data Protection Authority (www.aepd.es).​
  • Of yourself, when you provide us at our centres, we also collected data from the employer company associated with FREMAP or advice that provides services To the worker's or self-employed worker, and the TGSS and other Social Security Organisations, when they provide the Mutual Society with the personal data necessary to comply with the legal obligations assigned.

Prevention Channel


Digital Pact for the Protection of People

Decorative image, FREMAP filing cabinets  

The DIGITAL COMPACT FOR THE PROTECTION OF PEOPLE promotes privacy as an asset for public and private organisations.

Among the principles set out, it is designed to promote transparency so that citizens know what data are being collected and what are used for, Promote gender equality and the protection of children and people in vulnerable situations, or ensure that technologies avoid perpetuating biases or increasing Existing inequalities, avoiding algorithmic discrimination on the basis of race, origin, belief, religion or sex, among others.

FREMAP has signed up for the DIGITAL Pact, committing to implement the principles and recommendations set out therein, as well as to disseminate Among its employees and users, the Priority channel for requesting the urgent removal of sexual and violent content on the Internet, as well as other resources And tools to help raise awareness of the value of privacy and the importance of personal data processing.

Information about PDF documents: In order to correctly view PDF files, you must have the program installed Acrobat Reader This link opens in a new window installed on your computer.

​​​​​​
​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​