Grupo Recoletas is committed to respecting the privacy of users and the protection and security of their personal data. For this reason, users are informed of the way in which the Grupo Recoletas entities listed on www.gruporecoletas.com (section "our centres") collect, process and protect the personal data provided to them through their websites.

The user should carefully read this privacy policy, which has been drafted in a clear and simple manner to facilitate its understanding, and freely and voluntarily determine whether he/she wishes to provide his/her personal data to Grupo Recoletas entities.

Likewise, the user guarantees that he/she is of legal age and that the data provided are true, accurate, complete and up to date, and shall be liable for any direct or indirect damage or harm that may be caused as a result of non-compliance with this obligation. In the event that the data provided belong to a third party, the user guarantees that he/she has informed said third party of the aspects contained in this document and obtained his/her authorisation to provide his/her data to Grupo Recoletas entities for the aforementioned purposes.

1. Scope of Application and Responsibility

This privacy policy applies to all personal data collected by the Recoletas Group entities listed at www.gruporecoletas,com section "our centres", through their online platforms.

These companies have jointly determined the purposes and means of processing the user's personal data and have signed an agreement regulating the functions and responsibilities required of them in compliance with the applicable data protection regulations.

For any question related to this privacy policy, the user may contact the data protection officer of Grupo Recoletas, whose contact details are as follows:

• E-mail: dpo@gruporecoletas.com
• Postal address: Grupo Recoletas, C/Constitución 8 1º 47001 - Valladolid for the attention of the Data Protection Delegate.

2. Purposes of processing and legal basis

The Recoletas Group entities will process the user's data automatically for the following specific purposes:

• Resolution of queries made via e-mail info@gruporecoletas.com
• Management of appointments through the forms provided for this purpose.
• Sending communications requested by you on the forms provided for this purpose about our services, or through our newsletter.

Said processing will always be carried out with the prior consent of the user by means of the acceptance of this privacy policy.

3. Communication of data

The user is informed that their personal data may be communicated to the Recoletas Group entities identified at www.gruporecoletas.com (in the section on our centres) to which the personal data may be communicated), undertaking to process such personal data solely and exclusively for the purposes indicated above.

4. Processors

The processing of user data may be carried out by a suitable service provider contracted by the Recoletas Group entities. This service provider will only process the data for the purposes set out above and according to your precise instructions, in strict compliance with the legal regulations on personal data protection, information security and other applicable regulations. Under no circumstances will our data processors or service providers process your data for other purposes or communicate them to third parties.

5. International data transfers

Grupo Recoletas entities will process user data entirely within the territory of the European Union, and therefore no international transfer of data is foreseen.

6. Conservation period

The Recoletas Group entities will keep the personal data of users only for the time necessary to carry out the purposes for which they were collected, as well as the legally established retention periods, in the following terms:

• Resolution of queries made via e-mail info@gruporecoletas.com: 5 years after your reply
• Appointment management through the forms provided for this purpose: 5 years after application.
• Sending of communications requested by you on the forms provided for this purpose about our services, or through our newsletter: 5 years after your request.

7. Users' rights

Users may, at any time and free of charge, exercise their rights of access, rectification or deletion, opposition, limitation and portability of their data, through the means established in section 1 of this policy.

In any case, users are informed that, should they consider that Grupo Recoletas entities have infringed, or may have infringed, the rights recognised by the applicable data protection regulations, they may file a complaint with the Supervisory Authority, the Spanish Data Protection Agency, through its website www,agpd.es

8. Revocation of consent

The user's acceptance that their data may be processed or transferred shall always be revocable, without retroactive effects. To revoke said consent, users may contact the Data Protection Delegate through the channels established in section 1 of this policy.

9. Necessity of the data requested

The data collected by Grupo Recoletas entities in the different forms on its web pages are necessary to fulfil the purposes expressed.

Therefore, if the user does not provide them, the Recoletas Group entities will not be able to deal with the request.

10. Automated Decisions

Grupo Recoletas entities may draw up user profiles, which will allow the adoption of automated decisions based on the information entered by users in the various forms in order to send you the commercial communications requested by you that are tailored to your characteristics. In these cases, the user will have the right to obtain human intervention in the decision, to express their point of view and to challenge the decision taken by the Recoletas Group entities.

11. Measures for the protection of personal data

The Recoletas Group entities employ appropriate technical and organisational measures to ensure a level of security appropriate to the risk presented by the processing of data, in particular as a result of the accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or processed, or the unauthorised communication of or access to such data.

12. Data protection in the different means of contact

In accordance with current legislation on the Protection of Personal Data, the interested party is informed that the data provided by the interested party or those of his or her guardian by any of the following means:

• Phone any of our hospitals or centres to make an appointment
• Send your CV through the section "work with us".
• Sending e-mails via the "contact" section

They will be processed by RECOLETAS GROUP as data controller and the present privacy policy will be applied to them in terms of purposes, communication of data, exercise of rights...