Dr. Lizón's privacy and patient data protection policy

In accordance with Regulation (EU) 2016/679 of 27 April 2016 and the LOPD-GDD 3/2018 of 5 December, we hereby inform you about the processing of your personal data.

Who is the controller of your personal data?

Company Name: OVICOT SERVICIOS MEDICOS SLP

DNI: B-54454343

Postal Address: C/ Girasol, 11A. Denia 03700 Valencia

Telephone number:

Contact Email: joselizon@doctorlizon.com

OVICOT SERVICIOS MEDICOS SLP is a professional limited company belonging to Dr. José Francisco Lizón Aguilar, member of the Official College of Doctors of Valencia – Spain (ICOMV) with the speciality of Orthopaedic Surgery and Traumatology (You can verify this information on the College’s website by entering your membership number in the search engine).

Registered in the Mercantile
Register of Alicante, Volume 3.420, folio 111, page A-119568.
Registered in the Register of Professional Societies of the Illustrious College of Doctors of Alicante.

For what purposes will we process your personal data?

Your personal data and information will be used for the purpose of managing an appointment with Dr. Lizón in any of the modalities available at any time on the platform, to give content to the consultation based on the health information provided, to manage your clinical course together with the tests provided or recommended, to document the medical treatments prescribed and all the administrative management derived (billing and collection of the consultations carried out), as well as to maintain the necessary doctor-patient communications for the monitoring of the proposed treatments and the evolution of the pathology.

For how long will we keep your personal data?

Your personal data will be kept for the duration of the healthcare relationship and once this has ended, we will keep them duly blocked and secure on the basis of the legal retention periods determined by national and/or regional health regulations, but you should bear in mind that they may be kept for as long as it is considered favourable for the patient, always under medical criteria.

What is the legitimacy for the processing of your personal data?

The processing of your personal data is primarily legitimate under Article 6(1)(b) of the GDPR as the processing is necessary for the performance of a healthcare contract to which the data subject is a party.

At the same time, the processing of your data corresponding to special categories of data (mainly health) is legitimate in accordance with Article 9(2)(h) of the GDPR as the processing is necessary for the purposes of preventive medicine, medical diagnosis, the provision of health care or treatment, or the management of health care systems and services.

Similarly, and in accordance with Article 6.1 c) of the GDPR, the processing is also necessary for compliance with a legal obligation applicable to the data controller, namely the obligation under health regulations to open, maintain and preserve your clinical records in relation to the following laws:

Law 41/2002, of 14 November, the basic law regulating patient autonomy and rights and obligations regarding clinical information and documentation.
Law 1/2003, of 28 January, of the Generalitat, on Patient Rights and Information of the Valencian Community.

You should take into account other possible more exceptional grounds for legitimisation that may arise, such as that established in Article 6.1 d) of the GDPR for those cases in which the processing is necessary to protect the vital interests of the data subject (communications to emergency services, to anaesthesiologists, to your general practitioner to inform about treatment following an operation if necessary) or will occur in accordance with Article 6.1 e) of the GDPR if the processing is necessary to protect the vital interests of the data subject (communications to emergency services, to anaesthesiologists, to your general practitioner to inform about treatment following an operation if necessary) or will occur in accordance with Article 6. 1 e) of the GDPR if such processing is necessary for the performance of a task carried out in the public interest in the field of public health because we are requested to do so by the competent authority.

Finally, we can only process certain data if you give us your express consent, which we will request on a case-by-case basis for each specific purpose.

Is there an obligation to provide such personal data?

This is a necessary requirement, in order to formalise the relationship and provide the care services.

What are the consequences of not doing so?

Inability to provide the requested service.

Will we pass on your personal data?

Your data will not be disclosed except as required by law.

What rights do you have when you provide us with your personal data?

Initially, you have the following rights conferred by the data protection regulations:
access, rectification, cancellation, opposition, portability and limitation of your personal data, but depending on the basis that legitimises their processing they may be limited as specified in the regulation itself.

If they are processed on the basis of a contractual or pre-contractual relationship, the right of objection is limited.
If they are processed on the basis of a legal obligation, the right to object, the right of cancellation and the right of portability are limited.
If they are processed in the vital interest of the data subject, the right of portability and the right to object are limited.
If they are processed in the public interest, the right of erasure and portability are limited.

Data processing operations that you have authorised us to carry out on the basis of your consent may be withdrawn at any time and without cause on written request.

Any data subject may lodge a complaint with the competent Data Protection Control Authority, especially when they have not obtained satisfaction in the exercise of their rights and the way to contact it would be to write to the Spanish Personal Data Protection Agency at C/ Jorge Juan n.º 6, 28001 Madrid or through its electronic headquarters at www.agpd.es.

The models for requesting the exercise of your rights can be found in the Privacy Policies / rights section of our website, you may also request them in writing to the address of the data controller and you may also obtain them from the electronic headquarters of the Supervisory Authority at www.agpd.es and they must be sent to the postal or electronic address of the data controller.