Skip to content

Privacy

Information for patients

Privacy policy

How data is used when you browse this website, contact CISME, submit a job application or access patient services.

Data controller and contact details

CISME is the controller for the personal data it processes as part of its healthcare and administrative activities.

Data controller
CISME CLÍNICA DE ESPECIALIDADES MÉDICAS, S.L.
Tax identification number (CIF)
B-80074818
Registered address
Calle Maches Gómez, 2, 28820 Coslada (Madrid)
Privacy contact email
lopd@clinicacisme.com

Data Protection Officer

You can also contact the Data Protection Officer about data protection matters.

Data Protection Officer
PLURAL ASESORES SL
Address
Av. Constitución 35-37, 3.º

Data that may be processed

The Nutrition information form collects your name, email address and reason for enquiring and sends them to the team at info@cismehealthspan.com through Supabase and Brevo; email is managed in Google Workspace. It may send you an automatic acknowledgement and administrative responses about insurers or programmes, without performing an automated clinical assessment. Do not include reports, diagnoses or sensitive health data. To limit abuse and duplicate requests, only cryptographic hashes and technical status records are retained, expiring after 48 hours and cleared when new requests are processed; this record does not contain your name, email address or message in plain text. Your enquiry remains in the team's inbox so that they can respond, in accordance with the retention criteria below. This website does not create accounts or medical records. The guide can be downloaded without registration or subscription, and submitting an enquiry does not subscribe you to advertising.

The call, email and WhatsApp buttons open your chosen channel. The information you provide is used to respond to your enquiry or request. Do not send reports, identity documents or other clinical information through a general contact channel; the team will tell you which channel to use if they need it.

Online booking and the patient portal are provided through their respective platforms. Before entering information, read the terms and privacy information displayed there.

The server that allows access to the site can process technical connection data, such as the IP address, date and resource requested, to serve the pages and maintain security.

Purposes and legal bases for processing

Information enquiries and appointment requests are handled to respond to your request, take steps before the healthcare relationship begins where appropriate, and manage the services requested. Health information is processed as part of healthcare provision, with the safeguards required for health data.

Clinical documentation, billing and other obligations are managed in accordance with applicable law. The security and technical operation of the website are based on the legitimate interest in protecting the service.

An enquiry, an appointment or downloading the guide does not subscribe you to marketing communications. This website does not offer newsletter subscriptions.

Data retention

Data is retained for as long as necessary for the relevant purpose and for the periods required by applicable law.

Retention periods may differ for clinical, administrative, accounting or enquiry-related records.

Recipients

Data may be disclosed where necessary to provide or manage services or to meet a legal obligation.

  • Insurance companies and mutual insurers.
  • Laboratories and suppliers needed to provide the service.
  • Public bodies, authorities or other recipients provided for by law.

Rights and complaints

Where applicable, individuals may request access to, rectification or erasure of their data, object to processing, request restriction of processing or data portability, and withdraw consent previously given.

Requests can be sent to CISME's address or privacy contact email. Complaints may also be submitted to the Agencia Española de Protección de Datos (Spanish Data Protection Agency).

Services and external pages

Links to NaturalSoft, WhatsApp, Google Maps, social media and editorial sources open external services. Each destination provides information about its data processing, providers and, where applicable, international data transfers.

Data provided to CISME through these channels is processed for the purpose of your request. CISME may use providers acting on its behalf, subject to the required contractual safeguards.

Job applications · Work with us

Data controller: CISME CLÍNICA DE ESPECIALIDADES MÉDICAS, S.L. Applications are sent to the authorised Human Resources team. Your information and PDF are transmitted through CISME's form service so that the team can assess your application and contact you. The file is processed temporarily and is neither published nor stored in a download folder on the website.

When you apply, CISME will process your name, contact details, profession, experience and CV information to assess your application and contact you about it. The legal basis is taking pre-contractual steps at your request. Provide only relevant professional information; health data, a photograph and an identity document are not required.

The authorised Human Resources team manages applications. They are used for recruitment, not for patient administration or marketing communications. Access must be limited to authorised staff involved in recruitment and the providers needed to manage email, subject to the applicable safeguards.

Data will be retained while the application is assessed and for any period needed to meet legal obligations or liabilities. After the process ends, it will not automatically be added to a candidate pool. If you express interest in future opportunities, CISME must inform you of the terms and retention period and obtain the appropriate authorisation before retaining your CV for that purpose. Indicating this interest does not authorise indefinite retention.

Where present, link origin parameters (source, medium and campaign) are included in the application to identify the originating campaign. Direct submission uses technical references and cryptographic hashes from the last 24 hours to limit abuse and prevent duplicates. Expired entries are cleared when new applications are processed; this record does not contain the CV, name, message or email address in plain text. Using this form does not install advertising pixels or tracking cookies.

Where applicable, you can request access, rectification, erasure, restriction of processing or data portability, object to processing and withdraw your consent by writing to lopd@clinicacisme.com. You can also contact the Data Protection Officer and lodge a complaint with the AEPD using the contact details in this policy.

Assessment requests · CISME Dental

Data controller: CISME CLÍNICA DE ESPECIALIDADES MÉDICAS, S.L. The implant campaign form collects your name, phone number and acceptance of the privacy terms so that the Dental team can contact you and manage your assessment request. The legal basis is your consent, which you may withdraw. The request does not confirm an appointment or subscribe you to advertising. No health data or documents are requested.

The data is sent to dental@clinicacisme.com through CISME's hosting and email service. The authorised Dental team uses it to respond to your request, in accordance with the retention criteria in this policy. No account is created, and form data is not stored in a website database.

To prevent abuse and duplicates, references and cryptographic hashes of the phone number, connection and request are retained for 24 hours and cleared when new requests are processed. This technical record does not contain the name or phone number in plain text. Only the source of the link is identified: the homepage, email or direct access, without adding advertising cookies.

You can withdraw your consent and exercise the applicable rights by writing to lopd@clinicacisme.com. See this policy for the Data Protection Officer's contact details and information on complaints to the AEPD. The alternative WhatsApp link opens that external service and lets you decide whether to send a message.