Privacy Policy

Data controller

Identifying details: FUNDACIÓ PUIGVERT (the PROVIDER)

CIF (Tax ID Code): G08294779

Postal address: C/ Cartagena, 340-350 – 08025 Barcelona

Data Protection Officer: 

The FUNDACIÓ PUIGVERT, as the party responsible for the website, in accordance with the provisions of Regulation (EU) 2016/679 of 27 April 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and the free movement of such data, Organic Law 3/2018 of 5 December on the protection of personal data and guarantee of digital rights and other current legislation on the protection of personal data, as well as Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSICE), informs you that it has implemented the necessary technical and organisational security measures to guarantee and protect the confidentiality, integrity and availability of the data entered.

Purpose of processing

Your personal details shall only be used for the following purposes:

  • To carry out the necessary business and administrative procedures with the website users;
  • To submit sales and advertising communications by e-mail, fax, SMS, MMS, social communities or any other electronic or physical means, in the event that the user has expressly consented to the sending of business communications by electronic means;
  • To respond to queries and/or provide information the user requests; 
  • To provide the services and/or products hired or subscribed to by the user; 
  • To use your details to contact you, both electronically and non-electronically, to get your feedback on the service provided; and 
  • To notify you of changes, important developments in the privacy policy, legal notice or cookie policy. 
  • Profiling and usability analyses will be performed.
  • The data of customers and/or suppliers will be processed, within the contractual relationship that binds them to the responsible party, in compliance with the administrative, tax, accounting and labour obligations under current legislation.

Furthermore, the information provided by customers and patients shall be used for the following purposes:

  • To ensure the registration and monitoring of the medical treatment provided at the centre;
  • To ensure the continuity of care between the different healthcare and social services;
  • To provide the necessary information for the correct billing of the services rendered;
  • To fill in their medical history at the centre;
  • To implement the mechanisms for coordinating and sharing medical records to be developed;
  • The purposes related to training and teaching, research, human resources, dissemination of general corporate issues and those related to complaints and claims.

You may withdraw your consent at any time by sending a letter with the subject line "Unsubscribe" to 

In accordance with Law 34/2002 of 11 July on information society services and electronic commerce (LSSICE), the FUNDACIÓ PUIGVERT does not engage in spam practices; thus, it does not send commercial e-mails that have not been previously requested or authorised by the user. Therefore, the user may cancel their express consent to receiving our communications with every such communication they receive from the PROVIDER.

We will not process your personal data for any other purpose than those described above, except by operation of law or by court order.

Your data will be kept for the duration of the business and/or care relationship with us or until you exercise your right to cancel and object to or restrict processing. However, we will keep certain personal identification and traffic data for a maximum period of 2 years, in the event we are required to do so by the courts or in order to initiate internal proceedings owing to improper use of the website.

Regarding your patient data, the latter will be kept in accordance with the healthcare legislation in force at any given time, at present Law 21/2001 on the rights to information concerning health, patient autonomy and clinical documentation, which foresees a period of fifteen years from the date of discharge from each care process with regard to relevant documentation and a period of five years for other documentation.

You will not be subject to decisions based on automated processing that have an impact on your data.

Legitimacy of the processing

The legal grounds for processing the data is the consent you give to carry out the purposes described above, which will be requested at the time of ticking the appropriate box when your data is being collected.

Failure to provide the personal data requested or to accept this data protection policy involves the impossibility to subscribe, register or receive information about the Provider's products and services.

In cases where there is a prior contractual relationship between the parties, the legitimacy for complying with administrative, tax, accounting and labour obligations under current legislation will be the prior existence of a business relationship between the parties. 

As to the processing of specially protected personal data, this is legitimised by your consent or, where applicable, by Article 9.2.h) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.


Any communication sent shall be included in the PROVIDER's information systems. By accepting these conditions, terms and policies, the user expressly consents to the PROVIDER performing the following activities and/or actions, unless otherwise stated by the user: 

  • The sending of sales and/or promotional communications by any enabled means informing users of the activities, services, promotions, advertising, news, offers and other information on the services and products related to the PROVIDER's activity. 
  • In the event that the user has given their express consent to the sending of commercial communications by electronic means when subscribing to the newsletter, the sending of such communications by electronic means informing users of the activities, services, promotions, advertising, news, offers and other information on the PROVIDER's services and products equal or similar to those that were initially hired or of interest to the user. 
  • The retention of data for the periods foreseen in the applicable provisions. 

The information provided to the Fundació Puigvert may be forwarded in whole or in part to official public and private bodies which, for legal reasons or for reasons of material requirement, may have to access the data for the correct provision of the medical healthcare that is the actual purpose of this data processing.

We also inform you that we participate in the Shared Medical History of Catalonia. Thus, the data of the patients to whom care is provided by CatSalut will be integrated into this system, in accordance with the legal requirements and following the guidelines of the Health Department of the Generalitat de Catalunya (Regional Government of Catalonia). If you wish to receive more information or to exercise your right to access, rectification, objection, deletion, restriction or portability recognised in the data protection regulations, please contact the Customer Service Technical Office.

Official means of communication

The user is informed that the means the company has enabled to communicate with customers and other interested parties are the corporate telephone, mobile phones and e-mail. 

If you send personal information through a means of communication other than those mentioned in this section, the PROVIDER shall be exempt from liability with regard to the security measures provided by the means in question.

Addressees of assignments or transfers

The FUNDACIÓ PUIGVERT does not carry out any transfer or communication of data inside or outside the EU. The PROVIDER will only provide information to law enforcement agencies under a court order or pursuant to a legal regulation. The information provided will be the data required and available to the PROVIDER at that time, which may block or cancel your account, if there are indications that you may have committed a criminal offence.

The information you provide both through this website and via the application will be hosted on FUNDACIÓ PUIGVERT's servers, which are hired to the company that provides the website hosting service. The processing of the entity's data is regulated by a data processor agreement between the provider and this company.


As a user/interested party, you may request the exercise of the following rights from the FUNDACIÓ PUIGVERT by submitting a letter to the postal address of the heading or by sending an e-mail to with the following subject line: "DATA PROTECTION: RIGHTS OF THE INTERESTED PARTIES" and attaching a photocopy of your ID card or any equivalent means, as provided by law. 


  • Right to access: allows data subjects to know and obtain information about their personal data subject to processing.
  • Right to rectify or delete: allows data subjects to correct errors and modify data that is inaccurate or incomplete.
  • Right to cancel: allows data that proves to be inadequate or excessive to be deleted.
  • Right to object: the data subject's right not to have their personal data processed or to have the processing of such data stopped.
  • Restriction of processing: entails the marking of the personal data stored, with the aim of restricting future processing.
  • Data portability: provision of the processed data to the data subject, so that they can transfer it to another data controller without hindrance.
  • Right not to be subject to automated individual decisions (including profiling): the right not to be subject to a decision based on automated processing that has an impact or significantly affects you.

As a user, you have the right to withdraw your consent at any time. The withdrawal of consent will not affect the lawfulness of the processing carried out prior to such withdrawal.

You also have the right to file a complaint with the supervisory authority (Spanish Data Protection Agency or Catalan Data Protection Authority) if you consider that your rights regarding the protection of your data may have been infringed, without having obtained a satisfactory response from the Fundació Puigvert to your requests.

Additional information


We obtain the minimum information required by means of a registration form. In this form, you will provide the following information: e-mail, name and surname.

If you sign up for the service via our website, we will ask you to provide us with information about yourself, including your name, contact details and credit or debit card information.

Through this Privacy Policy, we inform you that the photographs that are posted on the website are the property of the FUNDACIÓ PUIGVERT, including those of minors, for whose collection we have obtained the prior consent of parents, guardians or legal representatives by means of tools and/or legally suitable forms.


We inform you that the FUNDACIÓ PUIGVERT can be present in social media. The processing of data of people who become followers on social media (and/or establish a link or connection via social media) of the official pages of the FUNDACIÓ PUIGVERT shall be governed by this section, as well as by those conditions of use, privacy policies and access regulations that belong to the social media that is applicable in each case and have been previously accepted by the user.

The FUNDACIÓ PUIGVERT will process your data with the purposes of properly managing your presence on the social media, informing you of the PROVIDER's activities, products or services, as well as for any other purpose permitted by social media regulations.

You are not allowed to post content:

  • That is allegedly unlawful according to national, regional or international regulations or that performs or promotes activities that are allegedly unlawful or contravene the principles of good faith;
  • That violates the fundamental rights of individuals, lacks online courtesy, bothers or could generate negative opinions in our users or third parties and whichever contents the FUNDACIÓ PUIGVERT considers inappropriate;
  • And, in general, that contravenes the principles of legality, honesty, responsibility, protection of human dignity, minors, public order and privacy, as well as consumer protection and intellectual and industrial property rights.

Likewise, the FUNDACIÓ PUIGVERT reserves the right to withdraw, without prior notice, from the website or the corporate social media those contents that are considered inappropriate. 

The communications sent via social media will be incorporated into a file that is the property of the FUNDACIÓ PUIGVERT, hence being able to send users interesting information. 

In any case, if you send personal information through the social media, the FUNDACIÓ PUIGVERT will be exempted from responsibility as to the security measures applicable to the respective platform, whereas the user who wants to know them must refer to the specific terms and conditions of the corresponding network.


The data you provide will be processed in a confidential manner. The PROVIDER has adopted all technical and organisational measures and all necessary protection levels to ensure security in data processing and avoid its alteration, loss, theft, processing or unauthorised access, in accordance with the state of technology and the nature of the data stored. It is also guaranteed that the processing and recording in files, programmes, systems or equipment, premises and centres comply with the requirements and conditions of integrity and security established in applicable regulations.


In the event of any contradiction or discrepancy in the construction of any of the versions provided in languages other than Spanish or Catalan, the Spanish or Catalan versions of this Policy shall prevail and shall have equal value.


In the event that the user subscribes to the blog, we inform you that the data provided will be processed to manage your subscription to the information blog with notice of updates and will be retained for as long as there is a mutual interest in maintaining the purpose of processing. When the said purpose is no longer deemed necessary, it will be deleted with appropriate security measures to ensure data pseudonymisation or total data destruction. The data will not be communicated to third parties, except as required by law.


The FUNDACIÓ PUIGVERT reserves the right to amend this policy in order to adapt it to new legislation or case law. 


The consent given, both for processing and transferring data of the interested parties, is revocable at any time, if the FUNDACIÓ PUIGVERT is notified according to the terms established in this Policy for exercising the rights. This revocation shall in no case be retroactive.


The relations between the FUNDACIÓ PUIGVERT and the users of its online services, which are available on this website, are subject to the Spanish legislation and jurisdiction, to which the parties expressly submit themselves, whereas the Courts and Tribunals of Barcelona shall be competent for the resolution of any conflict arising from or related to its use.