In accordance with the regulations for the protection of personal data, and in accordance with the provisions of articles 13 and 14 of EU Regulation 2016/679, General Data Protection Regulation, through this Privacy Policy, the User is informed of the following:
Who is responsible for the processing of personal data?
Identification data of the person responsible:
Company name: WEIGAND CLINIC
Company name: Christian Weigand
NIF: X0186176Z
NO. Collegiate: CU3259867
Address: C/ Juan Bravo 49 Duplicate 28006 Madrid (Spain)
What data is processed?
CONTACTS FROM THE WEBSITE OR EMAIL
The person responsible will process the identification and contact data that the user provides when contacting the Controller by email or telephone, as well as other data that the user includes in our contact form, or when contacting via WhatsApp. In addition, it may process the IP, operating system or browser used by the user, and even the duration of the visit, anonymously.
Thus, the data will be processed for the following purposes:
- Respond to queries, requests or requests.
- Register him and register him as a User.
- Manage the requested service, answer requests, or process requests.
- Information by electronic means, which relates to an application.
- Carry out analysis and improvements on the Web, on the services of CHRISTIAN WEIGAND
- Commercial information by electronic means, provided there is express authorization.
Our contact form has the * symbol in the required fields. If these fields are not provided, it will not be possible for us to respond to the request and therefore, the form will not be allowed to be sent.
Data processing is based on the acceptance and consent of the interested party.
SOCIAL NETWORKS CONTACTS
The personal data available in the RRSS profiles, as well as those that the user provides to the Controller when contacting him through this means, will be processed for the purpose of:
- Respond to queries, requests or requests.
- Manage the requested service, respond to the request, or process a request.
- Establish a user-responsible relationship, and create a community of followers.
In this case, the treatment is based on the acceptance of a contractual relationship in the corresponding social network environment and in accordance with its Privacy policies, so it is recommended that the user consult them.
CHRISTIAN WEIGAND will only be able to consult or delete the data in a restricted way by having a specific profile. These will be processed for as long as the user allows through the different interactions that each RRSS allows. Any rectification of data or restriction of information or publications must be made by the user through the configuration of their profile on the social network itself.
CLIENTS AND SUPPLIERS
We will process the identification, contact and billing data, as well as all customer/supplier data strictly necessary for the correct development of the contractual relationship, for the following purposes:
- Preparation of the budget and monitoring it through communications between the parties
- If you request our services, or if you provide services to CHRISTIAN WEIGAND, we will process personal information for the purposes of completing and administering the relevant transactions (for example, by sending invoices and arranging payments or delivering the product or provision of the service), and correctly manage the requested product or service.
- Information by electronic means, for the correct development of the contractual relationship or that may be related to the product/service that is the subject of it, based on the legitimate interest of the person responsible.
- Invoicing and declaration of appropriate taxes. The bank details will be used for the execution of the requested service, such as payment/collection of a product/service.
- Control and recovery procedures.
The legal basis is the execution or development of a contractual relationship, or failing that, consent when contacting us or offering us products. If you do not provide any of the data necessary for the correct development of the contract, we will not be able to proceed with the provision of the requested service.
JOBSEEKERS
CHRISTIAN WEIGAND will collect data that candidates send through their job board or to the email address enabled for this purpose. It will process the identification and contact, academic and professional data that the candidate includes when registering and completing their profile and/or in their resume for the following purposes:
- Organization of selection processes for hiring employees.
- Appointment for job interviews and evaluation of candidatures.
The legal basis for the processing described is the unequivocal consent of the candidate when sending their resume or registering on the employment portal by checking the checkbox of acceptance of this policy.
Our job board has the * symbol in the required fields. If these fields are not provided, or you do not check the privacy policy acceptance checkbox, the candidate will not be allowed to register.
After one year from receipt of a curriculum vitae, CHRISTIAN WEIGAND will proceed to its secure destruction.
Do we include personal data of third parties?
No, as a general rule we only process the data provided to us by the owners. If data from third parties is provided, said persons must be informed and request their consent in advance, or else CHRISTIAN WEIGAND will be exempt from any liability for non-compliance with this requirement.
And data on minors?
We do not process data of children under 14 years of age. Therefore, please refrain from providing them if you are not of that age or, where appropriate, from providing data from third parties who do not have the aforementioned age. CHRISTIAN WEIGAND disclaims any responsibility for failure to comply with this provision.
Will we communicate by electronic means?
If the user has previously given their express consent to do so, we will send commercial communications to the email address provided. The Controller will store the email in the database. The purposes of this specific treatment consist of:
- Manage the requested service.
- Information by electronic means, which relates to the application.
- Commercial or event information by electronic means, provided there is express authorization.
- Inform about new activities, products and services
What security measures do we apply?
We have adopted an optimal level of protection of the Personal Data that we handle, and we have installed all the means and technical measures at our disposal according to the state of technology to prevent the loss, misuse, alteration, unauthorized access and theft of the Data. Personal.
To which recipients will personal data be communicated?
Personal data will not be transferred to third parties, except under legal obligation. Specifically, they will be communicated to the State Tax Administration Agency and to banks and financial entities for collection of the service provided or product acquired, as well as to those responsible for the processing necessary for the execution of the agreement.
Personal data may be communicated to those responsible for the processing necessary for the provision of the service, who will have signed a service provision contract that requires them to maintain the same level of privacy as that of the person responsible.
Any international data transfer when using American applications will adhere to the Privacy Shield agreement, which guarantees that American software companies comply with European data protection policies regarding privacy.
What Rights do you have?
The data protection regulations recognize the user a series of rights, which CHRISTIAN WEIGAND, as responsible, has the obligation to satisfy:
- To know if your data is being processed or not.
- To access the personal data subject to processing.
- To request rectification of data if they are inaccurate.
- To request the deletion of the data if it is no longer necessary for the purposes for which it was collected or if the consent granted is withdrawn.
- To request the limitation of data processing, in some cases, in which case they will only be kept in accordance with current regulations.
- To the portability of the data, which will be provided in a structured, commonly used or machine-readable format; or they may be sent to the new designated manager. It is only valid in certain cases.
- To file a claim with the Spanish Data Protection Agency or competent control authority.
- To revoke consent for any treatment for which you have consented, at any time.
To facilitate the process, and comply with the principle of data accuracy, if any data is modified, the Controller appreciates the communication of said modification.
To exercise the aforementioned rights, the user can request a form from the person responsible, or use those prepared by the Spanish Data Protection Agency or third parties. These forms must be signed electronically or be accompanied by a photocopy of your DNI; If there is representation, a copy of the user's ID must be attached, or they must sign it with their electronic signature. The forms can be submitted in person, sent by letter or by email to the address of the Controller at the beginning of this text.
Depending on the right exercised, it will take a maximum of one month to respond from receipt of the request, and two months if the issue is very complex, in which case the user will be notified.
Do we process cookies?
The Website uses Cookies, if you wish to obtain more information, you can do so by accessing our Cookies Policy.
How long will we keep personal data?
Personal data will be maintained as long as the user remains linked to the person responsible and there is a mutual interest between the parties. In some cases, personal information will be processed to comply with applicable laws and regulations. For example, to respond to a request made by a regulatory body or to defend a legal action. We may also process personal information in the course of carrying out our business activities, for example, when conducting audits or for financial, accounting or archival purposes.
The data processed will be maintained as long as the legal periods do not expire, if there is a legal obligation to maintain, or if there is no such legal period, until the interested party requests its deletion or revokes the consent granted or, where applicable, one year has elapsed from the last communication with the interested party.
For each treatment or type of data, we provide you with a specific retention period, which you can consult in the following table:
| Treatment | Document | Conservation |
| Customers | Bills | 10 years |
| Forms and coupons | 15 years | |
| Contracts | 5 years | |
| Human Resources | Payrolls, TC1, TC2, etc. | 10 years |
| Resumes | Until the end of the selection process and 1 more year with the consent of the interested party | |
| Dismissal compensation documents. Contracts. Temporary worker data. | 4 years | |
| Worker's file. | Up to 5 years after discharge. | |
| Marketing | Databases or web visitors. | While the treatment lasts. |
| Suppliers | Bills | 10 years |
| Contracts | 5 years | |
| Access control and video surveillance | Visitor List | 30 days |
| Videos | 30 days blockade 3 years destruction | |
| Accounting | Books and accounting documents. Partner and board of directors agreements, company statutes, minutes, board of directors regulations and delegated committees. Financial statements, audit reports. Records and documents related to grants | 6 years |
| Fiscal | Carrying out the administration of the company, rights and obligations related to the payment of taxes. Administration of dividend payments and tax withholdings. | 10 years |
| Security and health | Workers' Medical Records | 5 years |
| Insurance | Insurance policies | 6 years (general rule) 2 years (damages) 5 years (personal) 10 years (life) |
| Shopping | Registration of all deliveries of goods or provision of services, intra-community acquisitions, imports and exports for VAT purposes. | 5 years |
| Legal | Intellectual and Industrial Property Documents. Contracts and agreements. | 5 years |
| Permits, licenses, certificates | 6 years from the expiration date. 10 years (criminal prescription) | |
| Confidentiality and non-compete agreements | Duration of the obligation or confidentiality | |
| LOPD | Personal data of employees stored on networks, computers and communications equipment used by them, access controls and internal management/administration systems | 5 years |
