Get to Know Us

Data Protection

Page content

In accordance with its Mission, Vision and Values, FREMAP is committed to maintaining and improving its management model based on continuous improvement and innovation, the key factors of which are excellence in service and excellence in management, within the framework of legislation in force.

This Policy establishes the principles that govern the actions of FREMAP, containing the framework that must prevail in the company regarding personal data protection.

The purpose of the Policy is to guarantee compliance with Regulation (EU) 2016/679, General Data Protection Regulation, as well as the Organic Law on Personal Data Protection in Spain, along with all other applicable legislation. In particular, the objective of the Data Protection Policy is to guarantee the right to data protection for all individuals who deal with FREMAP, ensuring that the right of honour and privacy is respected when processing personal information needed to perform its activities.

Scope of the Privacy Policy

The Policy is applicable to all those who provide services with FREMAP and to third parties who deal with the company in some other way, through service provision agreements or collaboration agreements, covering the scope of all the company's processes and resources.

Principles of action

The Principles pursuant to personal data processing.

  • Principle of legality, loyalty and transparency. Personal data shall be processed lawfully and fairly in accordance with applicable legislation, whereby all data subjects must be informed of the circumstances relating to the processing of their information. In cases where it is mandatory due to applicable legislation, the consent of data subjects must be given before their information is processed.
  • Principle of purpose limitation. Personal data will be collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with those purposes.
  • Principle of data minimisation. Only personal information that is strictly necessary and adequate for the purposes for which it was collected will be processed.
  • Principle of accuracy. Personal data must be accurate and kept up to date. Otherwise, such information must be deleted or amended.
  • Principle of limitation of data retention period. Personal data will not be kept beyond the period necessary for the purposes for which it was collected, unless legally required.
  • Principle of integrity and confidentiality. Personal data will be processed in such a way that ensures its appropriate security, adopting technical and organisational measures that protect it against unauthorised or unlawful processing and against accidental loss, destruction or damage. Furthermore, the personal data collected and processed by FREMAP must be conserved with maximum confidentiality, and cannot be used for any other purposes than those that justified and allowed for its collection, without the possibility for such data to be communicated or transferred to third parties outside of the cases permitted by applicable legislation.

Legal grounds for processing personal data.

FREMAP will only process personal data when at least one of the following circumstances arises:

  • The data subject has consented to the processing of his/her personal data for specific purposes.
  • Processing is necessary for the execution of a contract in which the data subject is a party, or, at the data subject's request, to apply pre-contractual measures.
  • The processing is necessary for compliance with a legal obligation.
  • The processing is required to protect the vital interests of the data subject or another individual.
  • Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
  • Processing is necessary for the purposes of the legitimate interests pursued by FREMAP or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

Consent of the data subject.

When the processing of personal data by FREMAP is based on the data subject's consent, this must be given in a clear affirmative act that reflects the data subject's free, specific, informed and unambiguous will to accept the processing of personal data that concerns him/her, with a declaration in writing, including through digital means, or a verbal declaration. Consent must be given for all processing activities carried out with the data or with the same purposes. When there are multiple purposes to the consent, consent must be given for all of them. FREMAP will be responsible for demonstrating that the data subject provided his/her consent through any means of legally admissible evidence. The interested party will have the right to withdraw his/her consent at any time.

When the processing affects special data categories, particularly those relating to health, genetics or biometrics, and is based on the data subject's consent, this must be given explicitly, through a written declaration signed by the data subject.

Data subjects' rights.

Data transparency and communication to data subjects. The processing of personal data will be transparent in relation to the data subject, providing him/her with information on the processing of their data concisely, transparently, intelligibly and easily accessible, in clear, simple language. When personal data is acquired on a data subject, at the time of acquisition, FREMAP will provide him/her with the following information:

  • The identity of FREMAP as the party responsible for processing the data, and its contact details.
  • Contact details for the Data Protection Officer.
  • Reasons for processing the data.
  • Legal base of the treatment.
  • Recipients of the data.
  • The rights of the affected persons.

In the event that the data is not obtained from the data subject, but instead as a result of a lawful transfer, or from publicly accessible sources, FREMAP will inform the data subjects of said circumstances, and the source of the data.

Rights of access, rectification, deletion, opposition, portability, limitation of processing and not being subject to automated individual decisions. FREMAP will enable data subjects to be able to exercise their rights, establishing the internal procedures required to do so for this purpose.

Data treatment by third parties.

Prior to contracting any service provider who accesses or can access personal data held by FREMAP, and during the term of the contractual relationship, measures must be adopted to ensure that the data processing by the processor is carried out in accordance with applicable regulations and the relationship is formalised through a contract. This contract will contain the obligations bestowed upon the processor by applicable regulations.

Security breaches or loss of personal data.

When FREMAP becomes aware of an incident that entails the accidental or unlawful destruction, loss or alteration of personal data, or the unauthorised communication or access to said data represents a high risk to the rights and freedoms of the data subjects, it must, without undue delay and, if possible, within 72 hours of becoming aware of it, report the security breach to the Spanish Data Protection Agency. Cases where it is unlikely that the security breach of personal data represents a risk to the rights and freedoms of individuals will be exempt. If such notification is not possible within 72 hours, the reasons for the delay will be indicated, and information may be provided in phases without any further undue delay.

Furthermore, if the security breach could entail a high risk to the rights and freedoms of data subjects, FREMAP will communicate said breach to personal data to each data subject, allowing them to take the necessary precautions.

Said incidents must be documented, and measures will be taken to rectify and alleviate the potential negative effects on data subjects, following the internal protocols established for this purpose.

Prevention and Control

Proactive responsibility.

FREMAP will keep a Record of processing activities, which will contain detailed information on each data processing action under the framework of its activity. The Record of activities will be constantly kept up to date

Likewise, FREMAP will conduct an Assessment of the risk level that the company is exposed to in order to determine the technical and organisational measures that should be applied, ensuring privacy by default and by design. When the risk analysis conducted reveals that a kind of data processing entails a high risk to the rights and freedoms of individuals, before the processing takes place, FREMAP will perform an assessment of the impact of the processing operations on the protection of personal data. FREMAP will check whether such processing still complies with the Impact Assessment, and, in any case, will review this when there is a change in the risk level of the processing.

The functions of the Data Protection Officer.

The Data Protection Officer will be responsible for controlling and overseeing the provisions of this Policy, with the following duties legally in place:

  • a) to inform and advise FREMAP or the processor and the employees who carry out processing of their obligations pursuant to this Regulation and to other Union or Member State data protection provisions.
  • b) to monitor compliance with this Regulation, with other Union or Member State data protection provisions and with the policies of the controller or processor in relation to the protection of personal data, including the assignment of responsibilities, awareness-raising and training of staff involved in processing operations, and the related audits.
  • c) to provide advice where requested as regards the data protection impact assessment and monitor its performance.
  • d) cooperating with the Spanish Data Protection Authority.
  • e) to act as the contact point for the Spanish Data Protection Agency on issues relating to processing, including the prior consultation referred to data processing, and to consult, where appropriate, with regard to any other matter.

In the performance of his or her tasks, the data protection officer shall have due regard to the risk associated with processing operations, taking into account the nature, scope, context and purposes of processing.

Implementation and Dissemination

The Data Protection Policy must be known by all employees, as well as those who collaborate with FREMAP. It must be communicated to the whole organisation, and must be available in the channels accessible by all employees and other stakeholders.

This Policy is understood as implemented and maintained from today, with the full commitment of Management.

Majadahonda, 22 May 2018

Additional information on processing personal data

Provisions and healthcare

  • FREMAP, MUTUA COLABORADORA CON LA SEGURIDAD SOCIAL No. 61, with registered office at Carretera de Pozuelo No. 61, 28220 Majadahonda (Madrid). Contact us by post at the address indicated, or sending an email to the address derechos_arco@fremap.es.

    The Data Protection Officer is the person responsible for safeguarding your privacy in our company. If you want to contact him or her, you can do so at dpd@fremap.es or by writing to the aforementioned address, including the reference 'Data Protection Officer'.

  • If you receive Social Security benefits and go to our administrative or healthcare centres:

    Full name, national ID number or passport, address and email address, telephone number and signature, family information, age, gender, date of birth, employment details, bank details, health details related to the healthcare provision and financial information, along with other details needed to verify the origin of such information.

    If you do not receive Social Security benefits and we attend to you in one of our centres:

    Full name, national ID number or passport, address and email address, telephone number, signature, age, gender, health information related to the healthcare provision and insurance details.

  • If you receive Social Security benefits and go to our administrative or healthcare centres:

    To collaborate with the protective actions of Social Security in terms of healthcare, and in managing economic provisions for professional contingencies, in the preventive activity, in professional recovery where relevant and in financial provisions for temporary disability derived from common contingencies due to risk during pregnancy and risk during breastfeeding, for the cessation of business activity of self-employed workers, for looking after minors with cancer or other serious illnesses, and all other activities of Social Security legally attributed to them by Royal Legislative Decree 8/2015, of 30 October, which approves the Amended Text of the General Social Security Act and its implementing regulations, thus complying with all the purposes related to this collaboration.

    To draw up statistics and quality surveys, only if you provide your consent

    To inform your company, or any natural or legal person who performs administrative tasks on behalf of the company, of any information needed to comply with the legally-established obligations pursuant to Social Security, of the issuance of occupational accident reports with the corresponding leave, of reports on occupational accidents without leave, of any economic information required to recognise the right to the temporary disability allowance, and to report the start and end of the payout obligation of said provision, only if you provide your consent.

    To inform the Insurance Company responsible for the costs derived from the accident, whether by regulations or contractually, of any medical information or documentation regarding the injuries resulting from the accident beyond that included in regulations, only if you provide your consent, with the exclusive purpose of covering the costs incurred during your inpatient or outpatient healthcare.

    If you do not receive Social Security benefits and we see you in one of our healthcare centres, to provide emergency healthcare and manage it administratively.

  • If you receive Social Security benefits and visit one of our administrative or healthcare centres.

    We store the data for as long as we provide your healthcare, and manage the provisions derived from your condition as a beneficiary of protective action from Social Security, and for the storage periods establish by law, in accordance with the provisions of article 16.5 of Act 41/2002, of 14 November, on the basic regulations of patient autonomy and the rights and obligations regarding clinical information and documentation, and article 16 of Royal Decree 1993/1995, of 7 December, which approves the Regulation on the Collaboration of Mutual Companies with Social Security, unless different regional regulations prevail, and for the prescription periods of actions derived from the contingencies arisen.

    If you do not receive Social Security benefits and we attend to you in one of our centres:

    We will store the data for five years from the time of the healthcare provision in accordance with the provisions of article 16.5 of Act 41/2002, of 14 November, on the basic regulations of patient autonomy and the rights and obligations regarding clinical information and documentation, and article 16 of Royal Decree 1993/1995, of 7 December, which approves the Regulation on the Collaboration of Mutual Companies with Social Security, unless regional regulations stipulate a different period.

  • If you receive Social Security benefits and go to our administrative or healthcare centres:

    We are legally authorised to process health-related data by virtue of article 9.2.b) of Regulation (EU) 2016/679 on General Data Protection, whereby processing is necessary for the purposes of carrying out the obligations and exercising specific rights in the field of social security and social protection, and by virtue of your consent in cases where this is required to communicate medical information and documentation to Insurance Companies regarding injuries resulting from the accident beyond the stipulations of regulations, with the exclusive objective of covering the costs incurred during your inpatient or outpatient healthcare, under the scope of the provisions of article 9.2 a) of said Regulation.

    We are also legally authorised to process the rest of your data by virtue of article 6.1.c) of said Regulation, and in our obligation to comply with Royal Decree 8/2015, of 30 October, which approves the amended text of the General Social Security Act and Royal Decree 1993/1995, of 7 December, in the Collaboration of Mutual Companies with Social Security.

    Furthermore, if you provide your consent under the scope of article 6.1.a) of said Regulation, we will be authorised to inform your company on any information required for it to meet the legal obligations, statistics and quality surveys they carry out.

    If you do not receive Social Security benefits and visit our healthcare or administrative centres to receive healthcare, we will be authorised to process data related to your health by virtue of article 9.2.c) of Regulation (EU) 2016/679 on General Data Protection, given that the processing is needed to protect your vital interests.

  • If you receive Social Security benefits and go to our administrative or healthcare centres:

    You are obliged to provide your data so that we can provide you with healthcare and financial provisions. Refusal to provide such data impedes access to the financial and healthcare provisions that you have the right to access, on the basis of Social Security legislation.

    If you do not receive Social Security benefits and we see you in our healthcare centres:

    You are obliged to provide your data so that we can provide you with the healthcare required, as refusal to do so will prevent us from being able to provide this healthcare.

  • If you receive Social Security benefits and go to our administrative or healthcare centres:

    To the Ministry of Employment and Social Security, and Authorities and Entities that comprise Social Security in compliance with the regulations on Social Security (Royal Decree 8/2015, of 30 October, which approves the Amended Text of the General Social Security Act, and Royal Decree 1993/1995, of 7 December, on the Collaboration of Mutual Companies with Social Security), and will also be transferred or disclosed to recipients by virtue of legal obligations.

    Furthermore, if you provide your consent, your details may be transferred to your company in order for it to comply with legally-established obligations regarding Social Security (Royal Decree 8/2015, of 30 October, which approves the Amended Text of the General Social Security Act, and Royal Decree 1993/1995, of 7 December, on the Collaboration of Mutual Companies with Social Security)

    We will not make any international transfers of data to third countries or international organisations.

    If you do not receive Social Security benefits and we attend to you in one of our centres:

    To the corresponding public health service.

    We will not make any international transfers of data to third countries or international organisations.

  • Right of access: The right to obtain confirmation on whether FREMAP, MUTUA COLABORADORA DE LA SEGURIDAD SOCIAL NO. 61 is processing personal details that concern you, and, if so, the right to access such data.

    Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.

    Right of erasure: The right to request that your details be erased or deleted due to the unlawful processing of data, the disappearance of the purpose that gave rise to its processing or collection, when you revoke your consent or oppose to the data processing, or when they must be deleted in compliance with a legal obligation.

    Right of opposition: The right to oppose, at any time, for reasons related to your particular situation, to personal data concerning you to be processed based on a public interest or a legitimate interest of the data processing controller or a third party.

    Right of limitation of the processing: The right to obtain the limitation of the data processing, if you contest its accuracy, if the processing is unlawful, if your personal data is no longer required for processing purposes, or if you have exercised your right to oppose to the data processing.

    Right of portability of the data: The right to receive the personal data held on you in a structured format, in common use and machine readable, and to transfer them to another controller, provided this is technically possible.

    The right not to be subject to individual automated decisions: The right to oppose to being the subject of decisions based on the automated processing of personal data, including the elaboration of profiles, when this decision can affect you legally or significantly.

    To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

    • identification data,
    • a copy of your National Identity Card (DNI) or another official document that confirms your identity
    • the claim specifying the request,
    • address for notification purposes,
    • date, and requester's signature.

    If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

    The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

    Similarly, you may also contact the Data Protection Officer, by:

    Furthermore, you have the right to:

    revoke the consent given: If the legal grounds of the processing is your consent, you have the right to revoke this.

    file a claim: You can always contact the Data Protection Officer, and you also have the right to file a claim with the Spanish Data Protection Agency.

  • If you receive Social Security benefits and go to our administrative or healthcare centres:

    We acquire the data directly from you in our administrative and healthcare centres, and in admission locations and provision managers, or digitally when you provide your data in any of the forms.

    From the Social Security Fund, the National Social Security Institute and Public Health Services.

    From companies or labour consultants responsible for managing human resources, when said parties fill in the healthcare application form in cases of occupational accidents and other cases stipulated by law.

    If you do not receive Social Security benefits and we attend to you in one of our centres:

    From you, when you access our administrative and healthcare centres.

Companies and Professionals

  • FREMAP, MUTUA COLABORADORA CON LA SEGURIDAD SOCIAL No. 61, with registered office at Carretera de Pozuelo No. 61, 28220 Majadahonda (Madrid). Contact us by post at the address indicated, or sending an email to the address derechos_arco@fremap.es.

    The Data Protection Officer is the person responsible for safeguarding your privacy in our company. If you want to contact him or her, you can do so at dpd@fremap.es or by writing to the aforementioned address, including the reference 'Data Protection Officer'.

  • The personal data that will be processed during our activity consists in your identification, full name, DNI/NIE and contact details, and professional address, telephone number and email address.

    Please provide this information on data protection to the people in your company participating in the relationship with us (contact persons)

  • In the case of business or administrative relations with us, in your capacity as a representative of a company or individual businessperson, to maintain our administrative or contractual relationship.

    In the case of contact persons of provider organisation, associated company or sole entrepreneur associated, or authorised RED, its details will be discussed to maintain the relationship with the company or with the sole entrepreneur payable by who acts and to fulfill legal obligations and contractual.

  • The data will be stored for the time required to meet the purpose for which it was collected, to determine the possible liabilities and to attend to the claim against the company, which could occur at a future date.

    In any case, the data will need to be stored for the time needed for FREMAP to carry out any legal or administrative actions derived from the account audits and compliance stipulated in article 98.2 of Royal Legislative Decree 8/2015, of 30 October, which approves the Amended Text on the General Social Security Act.

    The provisions of Royal Decree 1993/1995, of 7 December, which approves the Regulation on the Collaboration of Mutual Companies, will be applicable, along with those of Article 1964 of the Civil Coe.

  • If you have a business or administrative relationship with us, in your quality as a representative of a company or individual businessperson, we are legally authorised by virtue of article 6.1 b) and c) of Regulation (EU) 2016/679 on General Data Protection, whereby this is needed to comply with legal and contractual obligations, and article 6.1 f), whereby the processing is needed to satisfy the legitimate interests of FREMAP.

    In the case of contact persons for a supplier company, an associated company or an individual associated businessperson, we are legally authorised by virtue of article 6.1 b), c) and f) of Regulation (EU) 2016/679 on General Data Protection, whereby this is necessary for the execution of a contract, application of pre-contractual measures at the request of the data subject, or to comply with legal obligations and legitimate interests.

  • You are obliged to provide your data or consent to the processing of your data as this is required to formalise and maintain the relationship with you or with the company you represent, or through which you are acting, as it would not be possible to attend to you correctly otherwise.

  • Your personal data are processed at our company. To the extent stipulated by Law, we can transfer your data to recipients external to the mutual company. These recipients can include service providers (which, in accordance with contracts in place, provide services including the processing of personal data) and public bodies, insofar that we are obliged to communicate such data by virtue of a legal obligation.

    We will not make any international transfers of data to third countries or international organisations.

  • Right of access: The right to obtain confirmation on whether FREMAP, MUTUA COLABORADORA DE LA SEGURIDAD SOCIAL NO. 61 is processing personal details that concern you, and, if so, the right to access such data.

    Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.

    Right of erasure: The right to request that your details be erased or deleted due to the unlawful processing of data, the disappearance of the purpose that gave rise to its processing or collection, when you revoke your consent or oppose to the data processing, or when they must be deleted in compliance with a legal obligation.

    Right of opposition: The right to oppose, at any time, for reasons related to your particular situation, to personal data concerning you to be processed based on a public interest or a legitimate interest of the data processing controller or a third party.

    Right of limitation of the processing: The right to obtain the limitation of the data processing, if you contest its accuracy, if the processing is unlawful, if your personal data is no longer required for processing purposes, or if you have exercised your right to oppose to the data processing.

    Right of portability of the data: The right to receive the personal data held on you in a structured format, in common use and machine readable, and to transfer them to another controller, provided this is technically possible.

    The right not to be subject to individual automated decisions: The right to oppose to being the subject of decisions based on the automated processing of personal data, including the elaboration of profiles, when this decision can affect you legally or significantly.

    To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

    • identification data,
    • a copy of your National Identity Card (DNI) or another official document that confirms your identity
    • the claim specifying the request,
    • address for notification purposes,
    • date, and requester's signature.

    If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

    The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

    Similarly, you may also contact the Data Protection Officer, by:

    Furthermore, you have the right to:

    revoke the consent given: If the legal grounds of the processing is your consent, you have the right to revoke this.

    file a claim: You can always contact the Data Protection Officer, and you also have the right to file a claim with the Spanish Data Protection Agency.

  • If you have a business relationship with us, directly from you when you provide your information before entering into a contract. If you have an administrative relationship with us, in your capacity as representative of a company, when you fill in the association application form.

    If you have an administrative relationship with us, in your capacity as an individual businessperson, from Social Security when you register with the Special Scheme for Self-Employed Workers.

    If you are the contact person for a provider company, mutual company or individual businessperson, the data is provided by the company you represent or are acting through. If you is authorised mutual society or freelance VENTURE network associated with the Mutual Society, its details provides them to us the General Treasury of the Social Security.

Job candidates

  • FREMAP, MUTUA COLABORADORA CON LA SEGURIDAD SOCIAL No. 61, with registered office at Carretera de Pozuelo No. 61, 28220 Majadahonda (Madrid). Contact us by post at the address indicated, or sending an email to the address derechos_arco@fremap.es.

    The Data Protection Officer is the person responsible for safeguarding your privacy in our company. If you want to contact him or her, you can do so at dpd@fremap.es or by writing to the aforementioned address, including the reference 'Data Protection Officer'.

  • Identification and contract data, personal characteristics, academic and professional data, image and employment details.

  • The main purpose is the management of staff selection processes and the provision of work positions.

    Furthermore, for video surveillance and access control in facilities for security purposes.

  • The data will be stored for the time needed to comply with the purpose for which it was collected and to determine the potential liabilities that may be derived from said purpose and from the processing of data, for as long as the tax subject does not exercise his/her right of removal

  • The data processing needed to execute a contract to which the data subject is a party, or, at the request of the latter, for pre-contractual measures (article 6.1.b) of Regulation (EU) 2016/679, on General Data Protection).

    The data processing is required to comply with a legal obligation applicable to the data processing controller. (article 6.1.c) of Regulation (EU) 2016/679 on General Data Protection): Royal Legislative Decree 2/2015, of 23 October, which approves the amended text of the Law on the Statute of Workers' Rights.

    In relation to the special data categories (health), where relevant, the processing required to comply with obligations and exercise rights in the field of occupational law, security and social protection (article 9.2.b) of Regulation (EU) 2016/679 on General Data Protection).

  • You are obliged to provide your data as it is required to manage candidacies and develop the corresponding selection process. If you do not provide your data, we will not be able to manage your participation in the selection processes.

  • Your data will not be transferred to third parties, other than transportation companies, travel agencies and hotel establishments, for trips made during the selection processes in which you participate and which are necessary.

    We will not make any international data transfers to third countries or international organisations

  • Right of access: The right to obtain confirmation on whether FREMAP, MUTUA COLABORADORA DE LA SEGURIDAD SOCIAL NO. 61 is processing personal details that concern you, and, if so, the right to access such data.

    Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.

    Right of erasure: The right to request that your details be erased or deleted due to the unlawful processing of data, the disappearance of the purpose that gave rise to its processing or collection, when you revoke your consent or oppose to the data processing, or when they must be deleted in compliance with a legal obligation.

    Right of opposition: The right to oppose, at any time, for reasons related to your particular situation, to personal data concerning you to be processed based on a public interest or a legitimate interest of the data processing controller or a third party.

    Right of limitation of the processing: The right to obtain the limitation of the data processing, if you contest its accuracy, if the processing is unlawful, if your personal data is no longer required for processing purposes, or if you have exercised your right to oppose to the data processing.

    Right of portability of the data: The right to receive the personal data held on you in a structured format, in common use and machine readable, and to transfer them to another controller, provided this is technically possible.

    The right not to be subject to individual automated decisions: The right to oppose to being the subject of decisions based on the automated processing of personal data, including the elaboration of profiles, when this decision can affect you legally or significantly.

    To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

    • identification data,
    • a copy of your National Identity Card (DNI) or another official document that confirms your identity
    • the claim specifying the request,
    • address for notification purposes,
    • date, and requester's signature.

    If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

    The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

    Similarly, you may also contact the Data Protection Officer, by:

    Furthermore, you have the right to:

    revoke the consent given: If the legal grounds of the processing is your consent, you have the right to revoke this.

    file a claim: You can always contact the Data Protection Officer, and you also have the right to file a claim with the Spanish Data Protection Agency.

  • Directly from you when you send your CV to FREMAP, when you offer your candidacy through the website, or subsequently when you provide your data in the selection interview, psycho-technical tests, group dynamics or exams carried out, and from employment companies or job boards you may be subscribed to.

External workers and students in internships

  • FREMAP, MUTUA COLABORADORA CON LA SEGURIDAD SOCIAL No. 61, with registered office at Carretera de Pozuelo No. 61, 28220 Majadahonda (Madrid). Write to us at the indicated address, or email us on derechos_arco@fremap.es.

    The Data Protection Officer is the person in charge of safeguarding security in our company. If you want to contact him or her, you can do so at dpd@fremap.es or through referred letter to the previous address, including the Delegated Data protection ”reference “.

  • Identification and contact details, personal characteristics, academic and professional data, employment details, image and economic, financial and insurance details.

  • Your personal data is processed to manage the internship or services provided in the company.

  • Your details will be stored for the time needed to comply with the purpose for which they were collected, and, where relevant, to attend to the liabilities that may be derived from this purpose and data processing.

  • We are legally authorised to manage your data as it is needed to execute a contract and comply with legal obligations (article 6.1 b) and c) of Regulation 2016/679 on General Data Protection).

  • You are obliged to provide your data in order to manage the internship or service provisions and to comply with the contractual or collaborative relationship.

  • Your personal data will be disclosed to the educational centre you belong to, or to the company with which you have a labour or trade relationship.

    Furthermore, your data may be communicated to the occupational authority when this is requested in compliance with the obligations of the Mutual Company.

    We will not make any international transfers of data to third countries or international organisations.

  • Right of access: The right to obtain confirmation on whether FREMAP, MUTUA COLABORADORA DE LA SEGURIDAD SOCIAL NO. 61 is processing personal details that concern you, and, if so, the right to access such data.

    Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.

    Right of erasure: The right to request that your details be erased or deleted due to the unlawful processing of data, the disappearance of the purpose that gave rise to its processing or collection, when you revoke your consent or oppose to the data processing, or when they must be deleted in compliance with a legal obligation.

    Right of opposition: The right to oppose, at any time, for reasons related to your particular situation, to personal data concerning you to be processed based on a public interest or a legitimate interest of the data processing controller or a third party.

    Right of limitation of the processing: The right to obtain the limitation of the data processing, if you contest its accuracy, if the processing is unlawful, if your personal data is no longer required for processing purposes, or if you have exercised your right to oppose to the data processing.

    Right of portability of the data: The right to receive the personal data held on you in a structured format, in common use and machine readable, and to transfer them to another controller, provided this is technically possible.

    The right not to be subject to individual automated decisions: The right to oppose to being the subject of decisions based on the automated processing of personal data, including the elaboration of profiles, when this decision can affect you legally or significantly.

    To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

    • identification data,
    • a copy of your National Identity Card (DNI) or another official document that confirms your identity
    • the claim specifying the request,
    • address for notification purposes,
    • date, and requester's signature.

    If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

    The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

    Similarly, you may also contact the Data Protection Officer, by:

    Furthermore, you have the right to:

    revoke the consent given: If the legal grounds of the processing is your consent, you have the right to revoke this.

    file a claim: You can always contact the Data Protection Officer, and you also have the right to file a claim with the Spanish Data Protection Agency.

  • If you are a student taking an internship, your details are provided to us by the educational centre you are part of.

    If you are an external worker providing services to FREMAP, your data is provided to us by the company with which you have a labour or trade relationship, a service provider to FREMAP.

Governing and participation bodies

  • FREMAP, MUTUA COLABORADORA CON LA SEGURIDAD SOCIAL No. 61, with registered office at Carretera de Pozuelo No. 61, 28220 Majadahonda (Madrid). Write to us at the indicated address, or email us on derechos_arco@fremap.es.

    The Data Protection Officer is the person in charge of safeguarding security in our company. If you want to contact him or her, you can do so at dpd@fremap.es or through referred letter to the previous address, including the Delegated Data protection ”reference “.

  • The personal details that will be processed to manage the governing and participation bodies are your identification details (full name, DNI/NIE), contact details (address, telephone number and email address) and professional details.

  • Your details will be processed for the administrative management of governing and administration bodies of the Mutual Company.

  • The data will be stored for the time required to meet the purpose for which it was collected, to determine the possible liabilities and to attend to the claim against the company, which could occur at a future date.

    In any case, the data will need to be stored for the time needed for FREMAP to carry out any legal or administrative actions derived from the account audits and compliance stipulated in article 98.2 of Royal Legislative Decree 8/2015, of 30 October, which approves the Amended Text on the General Social Security Act.

    The provisions of Royal Decree 1993/1995, of 7 December, which approves the Regulation on the Collaboration of Mutual Companies, will be applicable, along with those of Article 1964 of the Civil Coe.

  • Our legal ground for processing your data is based on compliance with legal obligations attributed to the Mutual Company, stipulated in article 6.1 c) of Regulation (EU) 2016/679 on General Data Protection.

  • You are obliged to provide your data as it is required for the administrative management of governing and administration bodies of the Mutual Company. Otherwise, your participation in governing and participation bodies of the Mutual Company would not be possible.

  • Personal data processing also takes place in our company. To the extent provided by law, we can transfer your data to recipients external to the Mutual Company. These recipients can include service providers (which, in accordance with contracts in place, provide services including the processing of personal data) and public bodies, insofar that we are obliged to communicate such data by virtue of a legal obligation.

    We will not make any international transfers of data to third countries or international organisations.

  • Right of access: The right to obtain confirmation on whether FREMAP, MUTUA COLABORADORA DE LA SEGURIDAD SOCIAL NO. 61 is processing personal details that concern you, and, if so, the right to access such data.

    Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.

    Right of erasure: The right to request that your details be erased or deleted due to the unlawful processing of data, the disappearance of the purpose that gave rise to its processing or collection, when you revoke your consent or oppose to the data processing, or when they must be deleted in compliance with a legal obligation.

    Right of opposition: The right to oppose, at any time, for reasons related to your particular situation, to personal data concerning you to be processed based on a public interest or a legitimate interest of the data processing controller or a third party.

    Right of limitation of the processing: The right to obtain the limitation of the data processing, if you contest its accuracy, if the processing is unlawful, if your personal data is no longer required for processing purposes, or if you have exercised your right to oppose to the data processing.

    Right of portability of the data: The right to receive the personal data held on you in a structured format, in common use and machine readable, and to transfer them to another controller, provided this is technically possible.

    The right not to be subject to individual automated decisions: The right to oppose to being the subject of decisions based on the automated processing of personal data, including the elaboration of profiles, when this decision can affect you legally or significantly.

    To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

    • identification data,
    • a copy of your National Identity Card (DNI) or another official document that confirms your identity
    • the claim specifying the request,
    • address for notification purposes,
    • date, and requester's signature.

    If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

    The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

    Similarly, you may also contact the Data Protection Officer, by:

    Furthermore, you have the right to:

    revoke the consent given: If the legal grounds of the processing is your consent, you have the right to revoke this.

    file a claim: You can always contact the Data Protection Officer, and you also have the right to file a claim with the Spanish Data Protection Agency.

  • You provide your details yourself when you apply to form part of a governing and participation body of the Mutual Company.

Institutional Activities, Workshops and Events

  • FREMAP, MUTUA COLABORADORA CON LA SEGURIDAD SOCIAL No. 61, with registered office at Carretera de Pozuelo No. 61, 28220 Majadahonda (Madrid). Write to us at the indicated address, or email us on derechos_arco@fremap.es.

    The Data Protection Officer is the person in charge of safeguarding security in our company. If you want to contact him or her, you can do so at dpd@fremap.es or through referred letter to the previous address, including the Delegated Data protection ”reference “.

  • Identification and contact details, as well as academic and professional information.

    Similarly, can proceed to the images capture and recording and voice of the people that attend events, meeting, courses or seminars organised by FREMAP.

  • Your details will be used to manage and organise institutional activities, workshops and events held in relation to the activities of the Mutual Company.

  • Your data will be stored for the time required to meet the purpose for which it was collected, to determine the possible liabilities and to attend to the claim against the company, which could occur at a future date.

  • The legal basis for the processing of your data is your consent, in accordance with the provisions in Article 6.1 a) and Article 9.2 a) of the General Data Protection Regulation (EU) 2016/679, which is why your data will only be processed if you have expressly given your consent for this.

  • You are obliged to provide your details in order to properly manage your enrolment in institutional activities, workshops and events organised by FREMAP. If you do not provide this data, you will not be able to participate.

  • Personal data processing also takes place in our company. To the extent permitted by law, and if you provide your consent, we can communicate your data to recipients external to the Mutual Company. These recipients can include service providers (which, in accordance with contracts in place, provide services including the processing of personal data) and public bodies, insofar that we are obliged to communicate such data by virtue of a legal obligation, or third parties interested in finding out about the activities of FREMAP, through institutional documentation, web applications and social networks.

  • Right of access: The right to obtain confirmation on whether FREMAP, MUTUA COLABORADORA DE LA SEGURIDAD SOCIAL NO. 61 is processing personal details that concern you, and, if so, the right to access such data.

    Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.

    Right of erasure: The right to request that your details be erased or deleted due to the unlawful processing of data, the disappearance of the purpose that gave rise to its processing or collection, when you revoke your consent or oppose to the data processing, or when they must be deleted in compliance with a legal obligation.

    Right of opposition: The right to oppose, at any time, for reasons related to your particular situation, to personal data concerning you to be processed based on a public interest or a legitimate interest of the data processing controller or a third party.

    Right of limitation of the processing: The right to obtain the limitation of the data processing, if you contest its accuracy, if the processing is unlawful, if your personal data is no longer required for processing purposes, or if you have exercised your right to oppose to the data processing.

    Right of portability of the data: The right to receive the personal data held on you in a structured format, in common use and machine readable, and to transfer them to another controller, provided this is technically possible.

    The right not to be subject to individual automated decisions: The right to oppose to being the subject of decisions based on the automated processing of personal data, including the elaboration of profiles, when this decision can affect you legally or significantly.

    To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

    • identification data,
    • a copy of your National Identity Card (DNI) or another official document that confirms your identity
    • the claim specifying the request,
    • address for notification purposes,
    • date, and requester's signature.

    If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

    The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

    Similarly, you may also contact the Data Protection Officer, by:

    Furthermore, you have the right to:

    Revoke the consent you have provided: If the legal grounds of the data processing is your consent, you have the right to revoke this.

    Lodge a claim: You can always contact the Data Protection Officer, and you also have the right to file a claim with the Spanish Data Protection Agency.

  • Directly from you, when you voluntarily participate in activities, workshops and events organised by FREMAP.

Claim management

  • FREMAP, MUTUA COLABORADORA CON LA SEGURIDAD SOCIAL No. 61, with registered office at Carretera de Pozuelo No. 61, 28220 Majadahonda (Madrid). Write to us at the indicated address, or email us on derechos_arco@fremap.es.

    The Data Protection Officer is the person in charge of safeguarding security in our company. If you want to contact him or her, you can do so at dpd@fremap.es or through referred letter to the previous address, including the Delegated Data protection ”reference “.

  • If you file a claim or a complaint, we will process your identification and contact details, full name, National ID No. or passport, address, email address, telephone number, signature and data pertaining to the complaint or claim in question.

  • Your personal data will be used to attend to and properly manage your complaint or claim.

  • If your claim or complaint is related with our collaboration with the protective action of Social Security, we will store the data for as long as we provide the healthcare and manage the provisions derived from your condition as a recipient of Social Security protective action, and, in any case, for the statutes of limitation of actions that may be incurred against the Mutual Company.

  • If you receive Social Security benefits and we attend to you in our healthcare or administrative centres, we are legally authorised by virtue of article 9.2.b) and f) of Regulation (EU) 2016/679 on General Data Protection, given that it is necessary for compliance with obligations and exercising specific rights in the area of social security and protection, and we are authorised to process the rest of your data by virtue of article 6.1.c) of said Regulation, as we are obliged to comply with Royal Decree 8/2015, of 30 October, which approves the amended text of the General Social Security Act and Royal Decree 1993/1995, of 7 December, on the Collaboration of Mutual Companies with Social Security.

  • You are obliged to provide your data when filing your claim or complaint, as failure to do so prevents us from being able to process it.

  • The Ministry of Employment and Social Security and Authorities and Entities that comprise Social Security to correctly control the performance of our collaboration with said Authorities, in compliance with Social Security regulations, Royal Decree 8/2015, of 30 October, which approves the amended text of the General Social Security Act, and Royal Decree 1993/1995, of 7 December, on the Collaboration of Mutual Companies with Social Security, and the data will be transferred or disclosed to any recipients that must receive them by virtue of a legal obligation.

    We will not make any international transfers of data to third countries or international organisations.

  • Right of access: The right to obtain confirmation on whether FREMAP, MUTUA COLABORADORA DE LA SEGURIDAD SOCIAL NO. 61 is processing personal details that concern you, and, if so, the right to access such data.

    Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.

    Right of erasure: The right to request that your details be erased or deleted due to the unlawful processing of data, the disappearance of the purpose that gave rise to its processing or collection, when you revoke your consent or oppose to the data processing, or when they must be deleted in compliance with a legal obligation.

    Right of opposition: The right to oppose, at any time, for reasons related to your particular situation, to personal data concerning you to be processed based on a public interest or a legitimate interest of the data processing controller or a third party.

    Right of limitation of the processing: The right to obtain the limitation of the data processing, if you contest its accuracy, if the processing is unlawful, if your personal data is no longer required for processing purposes, or if you have exercised your right to oppose to the data processing.

    Right of portability of the data: The right to receive the personal data held on you in a structured format, in common use and machine readable, and to transfer them to another controller, provided this is technically possible.

    The right not to be subject to individual automated decisions: The right to oppose to being the subject of decisions based on the automated processing of personal data, including the elaboration of profiles, when this decision can affect you legally or significantly.

    To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

    • identification data,
    • a copy of your National Identity Card (DNI) or another official document that confirms your identity
    • the claim specifying the request,
    • address for notification purposes,
    • date, and requester's signature.

    If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

    The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

    Similarly, you may also contact the Data Protection Officer, by:

    Furthermore, you have the right to:

    Revoke the consent you have provided: If the legal grounds of the data processing is your consent, you have the right to revoke this.

    Lodge a claim: You can always contact the Data Protection Officer, and you also have the right to file a claim with the Spanish Data Protection Agency.

  • Directly from you when you come to any of our administrative and healthcare centres and file your claim or complaint.

Security and Video Surveillance

  • FREMAP, MUTUA COLABORADORA CON LA SEGURIDAD SOCIAL No. 61, with registered office at Carretera de Pozuelo No. 61, 28220 Majadahonda (Madrid). Write to us at the indicated address, or email us on derechos_arco@fremap.es.

    The Data Protection Officer is the person in charge of safeguarding security in our company. If you want to contact him or her, you can do so at dpd@fremap.es or through referred letter to the previous address, including the Delegated Data protection ”reference “.

  • If you visit our administrative or healthcare centres and we record your image or collect your data at reception or at an access control point, the data of your image, full name, National ID No. and organisation or company you belong to will be processed.

  • To ensure the safety of people, goods and facilities through video surveillance and visit controls.

  • In the case of capturing and recording your images through video cameras, the data will be eliminated one month later by deleting the images, except for recordings related to criminal or administrative infractions regarding public safety, an ongoing police investigation or an open legal or administrative procedure. If your data is collected at reception or at the access control point to our facilities, the data will be deleted one month following the collection.

  • Our legal basis for processing your identification details is based on our legitimate interest stipulated in article 6.1.f) of Regulation (EU) 2016/679 on General Data Protection, to carry out image processing through cameras or video cameras or to control physical access with a view to preserve the safety of people, goods and facilities, given that said interest does not prevail over interests or rights and fundamental freedoms.

  • You are obliged to provide your data because we must protect people, goods and facilities. If you do not provide this data, this impedes your access to our centres for security reasons.

  • To security forces and bodies. Courts and Tribunals in the case of committing criminal or administrative infractions in compliance with Organic Law 4/1997, of 4 August, on the use of video cameras by security forces or bodies in public places.

    We will not make any international transfers of data to third countries or international organisations.

  • Right of access: The right to obtain confirmation on whether FREMAP, MUTUA COLABORADORA DE LA SEGURIDAD SOCIAL NO. 61 is processing personal details that concern you, and, if so, the right to access such data.

    Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.

    Right of erasure: The right to request that your details be erased or deleted due to the unlawful processing of data, the disappearance of the purpose that gave rise to its processing or collection, when you revoke your consent or oppose to the data processing, or when they must be deleted in compliance with a legal obligation.

    Right of opposition: The right to oppose, at any time, for reasons related to your particular situation, to personal data concerning you to be processed based on a public interest or a legitimate interest of the data processing controller or a third party.

    Right of limitation of the processing: The right to obtain the limitation of the data processing, if you contest its accuracy, if the processing is unlawful, if your personal data is no longer required for processing purposes, or if you have exercised your right to oppose to the data processing.

    Right of portability of the data: The right to receive the personal data held on you in a structured format, in common use and machine readable, and to transfer them to another controller, provided this is technically possible.

    The right not to be subject to individual automated decisions: The right to oppose to being the subject of decisions based on the automated processing of personal data, including the elaboration of profiles, when this decision can affect you legally or significantly.

    To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

    • identification data,
    • a copy of your National Identity Card (DNI) or another official document that confirms your identity
    • the claim specifying the request,
    • address for notification purposes,
    • date, and requester's signature.

    If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

    The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

    Similarly, you may also contact the Data Protection Officer, by:

    Furthermore, you have the right to:

    Revoke the consent you have provided: If the legal grounds of the data processing is your consent, you have the right to revoke this.

    Lodge a claim: You can always contact the Data Protection Officer, and you also have the right to file a claim with the Spanish Data Protection Agency.

  • Directly from you when you come to our administrative or healthcare centres and your image is recorded or your data is collected at reception or at an access control point.

Management of Security Breaches

  • FREMAP, MUTUA COLABORADORA CON LA SEGURIDAD SOCIAL No. 61, with registered office at Carretera de Pozuelo No. 61, 28220 Majadahonda (Madrid). Write to us at the indicated address, or email us on derechos_arco@fremap.es.

    The Data Protection Officer is the person in charge of safeguarding security in our company. If you want to contact him or her, you can do so at dpd@fremap.es or through referred letter to the previous address, including the Delegated Data protection ”reference “.

  • The personal data that will be processed for managing a detected security incident will be your identification, full name, DNI/NIE, contact details, address, telephone number and professional email address and professional or employment data, such as your position or role within the company.

  • To manage security breaches that may occur in the company.

  • Your details will be stored for as long as needed to manage the detected incident and, in any case, for the statutes of limitation of actions that may be incurred against the Mutual Company.

  • Because the data processing is needed to meet the Mutual Company's legal obligations (article 6.1.c) of Regulation (EU) 2016/679 on General Data Protection).

  • You are obliged to provide the information required for the resolution of the incident, as otherwise it would not be possible to resolve it properly or comply with legal obligations attributed to the Mutual Company.

  • Your data may be communicated to the Spanish Data Protection Agency in compliance with obligations legally attributed by Data Protection regulations, and, if the security incident could represent a high risk to the rights and freedoms of third parties, the implications and the information related thereto will be notified to the data subjects.

    To security forces and bodies. Courts and Tribunals in the case of criminal or administrative infractions.

    We will not make any international transfers of data to third countries or international organisations.

  • Right of access: The right to obtain confirmation on whether FREMAP, MUTUA COLABORADORA DE LA SEGURIDAD SOCIAL NO. 61 is processing personal details that concern you, and, if so, the right to access such data.

    Right of rectification: The right to request the modification or amendment of your details if they are inaccurate.

    Right of erasure: The right to request that your details be erased or deleted due to the unlawful processing of data, the disappearance of the purpose that gave rise to its processing or collection, when you revoke your consent or oppose to the data processing, or when they must be deleted in compliance with a legal obligation.

    Right of opposition: The right to oppose, at any time, for reasons related to your particular situation, to personal data concerning you to be processed based on a public interest or a legitimate interest of the data processing controller or a third party.

    Right of limitation of the processing: The right to obtain the limitation of the data processing, if you contest its accuracy, if the processing is unlawful, if your personal data is no longer required for processing purposes, or if you have exercised your right to oppose to the data processing.

    Right of portability of the data: The right to receive the personal data held on you in a structured format, in common use and machine readable, and to transfer them to another controller, provided this is technically possible.

    The right not to be subject to individual automated decisions: The right to oppose to being the subject of decisions based on the automated processing of personal data, including the elaboration of profiles, when this decision can affect you legally or significantly.

    To exercise the rights indicated herein, you will need to send a written communication to FREMAP, containing:

    • identification data,
    • a copy of your National Identity Card (DNI) or another official document that confirms your identity
    • the claim specifying the request,
    • address for notification purposes,
    • date, and requester's signature.

    If you are exercising rights through a representative, the request will need to include the express authorisation and copy of the ID of the representative and the person being represented.

    The communication can be presented in any of our centres or hospitals, or you can write to FREMAP by:

    Similarly, you may also contact the Data Protection Officer, by:

    Furthermore, you have the right to:

    Revoke the consent you have provided: If the legal grounds of the data processing is your consent, you have the right to revoke this.

    Lodge a claim: You can always contact the Data Protection Officer, and you also have the right to file a claim with the Spanish Data Protection Agency.

  • Directly by you, your company or the entity you work for or collaborate with, and from the Social Security Fund.

​​

Information about PDF documents: In order to display PDF files correctly, you need to have installed Acrobat Reader This link opens in a new window installed on your computer.

​​​​​