This Privacy Policy of Ziving Inca. describes the practices of the association in relation to compliance with Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as the General Data Protection Regulation).

Below, we provide you with all the necessary information regarding our Privacy Policy:

1.- Who is the Data Controller of your data?

2.- For what purpose do we process your personal data?

3.- What is the legitimation or legitimate basis for the processing of your data?

4.- How long do we keep your data?

5.- To whom is your data transferred?

6.- What rights do you have when you provide us with your data?

7.- What happens if we make changes to the Privacy Policy?

8.- What security measures are applied?

2.- PERSON RESPONSIBLE FOR PROCESSING PERSONAL DATA.

The person responsible for the processing of personal data is:

GENESTRA ORTODONCIA S.L., CIF B57674772, with address at Av.D'alcúdia 6-1, 07300, Inca, Palma de Mallorca, telephone; 971506155, email; lopd@ziving.com is responsible for the processing of the user's data and informs that these data will be processed for the purposes detailed below.

The data controller undertakes to process the personal data of users in accordance with the provisions of Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and on the basis of Law 34/2002 on Information Society Services and Electronic Commerce (LSSICE).

3.- PURPOSE OF THE PROCESSING OF PERSONAL DATA.

 The purposes for which we will process your personal data will be as follows, depending on the reason for which the data in question is collected:

Type of treatment	Purpose of processing
Contact us	Your personal data will be processed solely and exclusively for the purpose of dealing with your request, doubt or query through the same means by which the query is made. Data categoriesThe following information may be provided by the applicant: name and surname, e-mail address, telephone number and any other information provided by the applicant for information.
Make an appointment	Your personal data will be processed solely and exclusively to be able to give you an appointment to meet your needs, through the same means by which the request is made. Data categoriesName and surname, e-mail address, telephone number and any other information provided by the person requesting the appointment.
Curriculum Vitae (CV)	Your personal data will be processed solely and exclusively for the purpose of taking your profile into account in selection processes for vacant or newly created positions that may arise from time to time. Data categoriesThe following information will be provided: name and surname, DNI/NIE, address, e-mail address, telephone number, and any other information provided by the candidate for future recruitment processes.
Provision of oral-dental services	Your personal data will be processed solely and exclusively for the purpose of providing the oral-dental services that you require at any given time. Likewise, they may also be used to send you commercial communications related to the services contracted. Data categoriesThe information you provide to us will include your name and surname, ID card number, address, e-mail address, telephone number, details of your oral and dental health, and any other information necessary for the provision of services.

4.- LEGITIMATE BASIS FOR THE LAWFULNESS OF THE PROCESSING OF PERSONAL DATA.

Below, we indicate the basis that legitimises GENESTRA ORTODONCIA S.L. for each processing of your data:

Data processing	Legitimate basis for processing
Contact us form	Unambiguous consent as a result of contact or consultation made by the data subject. (Article 6.1.a of the GDPR).
Make an appointment	Unambiguous consent as a consequence of requesting an appointment with our clinic. (Article 6.1.a of the GDPR).
Curriculum Vitae (CV)	Unambiguous consent as a consequence of submitting your CV for future selection processes. (Article 6.1.a of the GDPR).
Provision of oral-dental services	Express consent given by the client in order to be able to provide the contracted/requested oral-dental services. (Article 6.1.a of the RGPD).

The user is obliged to guarantee that the personal data provided to the data controller are truthful and is responsible for communicating any changes thereto.

The consent given by the user is considered free, specific, informed and unequivocal, since after reading this Privacy Policy the user is fully informed about our conditions for processing the user's personal data.

5.- DATA RETENTION TIME.

The retention period for the data according to the processing will be as follows:

Data processing	Data retention time
Contact us form	The data will only be retained for the purpose of the relationship and the exchange of information, initiated by the enquiry. After the consultation has ended, the data will be deleted.
Make an appointment	The data will be kept solely for the purpose of granting the appointment and resolving any queries that the client may have. Once the appointment has been made, and depending on whether any oral-dental treatment is necessary, the data will either be kept for the duration of the services provided or, if no treatment is necessary, the data in question will be deleted.
Curriculum Vitae (CV)	The data will only be kept for future selection processes or vacancies, for a period of 2 years, after which it will be deleted, unless you wish to keep it. This wish must be expressly specified.
Provision of oral-dental services	The data will be kept for the time strictly necessary for the correct provision of the oral-dental services commissioned by the client.

6.- TRANSFER OF DATA.

In general, the user's personal data will not be disclosed under any circumstances, unless required by law.

7.- USERS' RIGHTS

The user may at any time, under the terms established in current legislation, exercise the rights of access, rectification or deletion of data, request that the processing be limited, oppose the processing, request the portability of their data, as well as revoke the consent given, rights recognised in the aforementioned Regulation (EU).

Regardless of the purpose or the lawful basis on which we hold your data, you have the right to:

• Request access to your personal data that we are processing, to be informed about the purpose of the processing, the recipients of this data, the transfer, the storage period, the origin of the information if it has not been obtained directly by the user, the existence of computerised decisions, etc. (Right of access).
• Request the rectification of inaccurate or incomplete personal data held by the data controller. It must be justified which data are referred to and their correction, providing supporting documentation of the requested rectification. (Right of rectification).
• It will be possible to oppose the processing of personal data or cessation thereof, provided that their consent is not required, when the files are used for advertising purposes, etc. (Right to object).
• Request that delete your personal data collected through your express consent, which are no longer necessary for the purpose for which they were provided, or where we no longer have the legitimacy to do so. (Right to erasure and right to be forgotten).
• Request the controller to provide personal data in a structured and clear format to another controller. (Right to data portability).

These rights can be exercised by the user by contacting GENESTRA ORTODONCIA S.L., at the address of its registered office indicated above; by sending an e-mail to the following address; lopd@ziving.com or to the following postal address: Av.D'alcúdia 6-1, 07300, Inca, Palma de Mallorca.

In order to effectively exercise these rights, users must prove their identity by providing their name and surname, a photocopy of their ID card or equivalent identification document proving their identity, a petition specifying the request, an address for notification purposes, and the date and signature of the applicant.

Likewise, the user may lodge a complaint with the Spanish Data Protection Agency (competent supervisory authority in this matter), especially when he/she has not obtained satisfaction in the exercise of his/her rights, by writing to the same, C/ Jorge Juan, nº 6, 28001 - Madrid, or via the website: https://www.agpd.es

8.- MODIFICATIONS TO THE PRIVACY POLICY. 

This Privacy Policy may undergo some modifications over time, in order to adapt it to changes that occur on our website, as well as legislative or jurisprudential changes, so we recommend that you review these changes in case you want to unsubscribe from any service or functionality.

9.- SECURITY MEASURES.

The personal information collected from registered users is stored by the company, which assumes the appropriate technical, organisational and security measures to guarantee the confidentiality and integrity of the information in accordance with the provisions of the legislation.