PRIVACY AND DATA PROTECTION POLICY

I. Scope of the Policy

The website www.evanhub.com (hereinafter, “Website” or “Site”, interchangeably) informs the individuals who use it (hereinafter, interchangeably, “Users”) or those intending to use it, of this Privacy and Personal Data Protection Policy (hereinafter, “Privacy Policy” or “Policy(ies)”).

This Policy is part of the Terms and Conditions of Use of the Website (hereinafter, “Terms and Conditions”) and, consequently, the User declares being aware of the Terms and Conditions of the Website (available at https://evanhub.com/terminos-y-condiciones).

In accordance with the above, reading the Terms and Conditions will allow Users to understand how SERVICIOS MÉDICOS E INVERSIONES LOS ALERCES SPA (hereinafter, “Evanhub”, “The Owner” or the “Responsible Party”) collects, processes, and protects their Personal Data.

Access, use, and staying on this Website signify the express acceptance of this Privacy Policy, which is subject to Law No. 19.628 on the Protection of Personal Data.

Additionally, in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, regarding the protection of natural persons with respect to the processing of personal data, repealing Directive 95/46/EC (hereinafter, “GDPR”), Law 34/2002, of 11 July, on services of the information society and electronic commerce (hereinafter, “LSSI-CE”), and Organic Law 3/2018 on Personal Data Protection and guarantee of digital rights, both Spanish regulations, Evanhub guarantees the protection and confidentiality of any type of personal data provided by its clients, in accordance with GDPR provisions.

This Evanhub Policy is based on the principle of proactive responsibility, according to which the Data Controller is responsible for compliance with the regulatory and case law framework and is able to demonstrate it to the relevant supervisory authorities.

The data provided will be processed under the terms established in the GDPR; in this regard, the Controller has adopted the legally required levels of protection and has implemented all technical measures at its disposal to prevent loss, misuse, alteration, or unauthorized access by third parties, as outlined below. However, Users must be aware that security measures on the Internet are not infallible.

II. Principles applicable to the processing of personal data

The processing of Users’ Personal Data shall comply with the following principles:

a. Principle of lawfulness, fairness, and transparency: Users’ consent will be required at all times, after being informed of the purposes for which personal data is collected.

b. Principle of purpose limitation: Personal data will only be collected for specific, explicit, and legitimate purposes, as informed to the User.

c. Principle of data minimization: Only the strictly necessary personal data will be collected in relation to the purposes for which it is processed.

d. Principle of accuracy: Personal data must be accurate and always kept up to date, in full accordance with the data received from the User.

e. Principle of storage limitation: Personal data will only be kept in a form that allows identification of the User for as long as necessary for the purposes of processing.

f. Principle of integrity and confidentiality: Personal data will be processed in a manner that ensures its security and confidentiality.

g. Principle of proactive responsibility: The Controller must ensure that the previous principles are respected.

III. What personal data do we process and where does it come from?

The personal data obtained by Evanhub through forms and other elements on the Website will be incorporated and processed in Evanhub’s database in order to facilitate, expedite, and fulfill the commitments established between Evanhub and Users; maintain the relationship established through the forms filled by Users; or attend to requests or inquiries from Users, among others.

In particular, Users’ data will be obtained by Evanhub through the following mechanisms:

Automatic data collection mechanisms: Cookies.

Manual data collection mechanisms: Filling out forms.

On the occasion of their relationship with us, the following categories of personal data may be processed:

  • Identification and contact data of patients or their representatives (including signature, image, ID card) and any other administrative data.
  • Health-related data included in the patient’s medical history.
  • Personal characteristics, social or socio-health circumstances.
  • Transactional data (payments, income, transfers, amounts owed).

The data may come from the interested party (patient) or, if applicable, from their legal or voluntary representative and/or healthcare personnel. In the case of the contact form on our website, data will come exclusively from what is described in the form.

The categories of personal data processed on this Website are considered “sensitive” data, and therefore express consent from the User is required to proceed with the use of this Website. Such consent is granted once the User accepts the Terms and Conditions and/or this Privacy Policy, by simply accessing the Website and/or using it.

IV. Data Controller:

Who are we?

SERVICIOS MÉDICOS E INVERSIONES LOS ALERCES SPA RUT: N°76.448.033-3 Address: Calle Badajoz Nº100, office 1422, Las Condes, Metropolitan Region Email: contacto@evanhub.com

In order to comply with the principles established in this instrument and applicable regulations, the Data Controller has appointed a Data Delegate (hereinafter, “Data Delegate” or “Delegate”), who will manage and safeguard the registry, database, or data bank according to the express written instructions of the Data Controller; they can be contacted at: contacto@evanhub.com

V. Purpose of processing:

What will we use your data for?

Service provision: Your personal data is processed to provide the service you require, as well as to administratively manage it, for example:

  • Remind you of your appointments;
  • Attend any communication reported by the User;
  • Handle any incident or complaint filed by the User;
  • Conduct surveys to know your opinion on the service received, which will only be used to improve and develop our services;
  • Provision of the User’s intranet service: if the User registers on the portal, personal data may be processed to manage access to the tool and its use;
  • Handling information requests: of any kind, including commercial, complaints, suggestions, claims, exercise of data protection rights, etc.; in such cases, data will be processed to manage and process the request;
  • Compliance with legal obligations: it may be necessary to process personal data to comply with relevant legal requirements, e.g., data protection, tax, health legislation;
  • Formalization and execution of the service: Users’ personal data is processed to manage their relationship with Evanhub;
  • Sending commercial communications: always with prior consent.

In accordance with the activities indicated in the Terms and Conditions, relating to the processing of User data due to the use of the Website, Evanhub recognizes that personal data will be used exclusively for the purposes for which it was collected, unless it comes from publicly accessible sources and/or is not confidential. Sensitive data cannot be processed unless authorized by law, with the User’s consent, or if necessary to determine or provide relevant health benefits.

Users may withdraw consent at any time, and such withdrawal will not affect the use of the Website. However, if consent is withdrawn and any issues are detected in processing data entered on the Website, the User must contact the Data Delegate to report the situation and ensure a resolution is provided as quickly as possible.

Whenever the User must provide data via forms to make inquiries, request information, or for matters related to Website content, they will be informed of the necessity to complete such forms, as they are essential for proper operation.

The collected data will be processed for the specified purposes and never in a manner incompatible with them. Please note that processing data for scientific or statistical research purposes is not considered incompatible with the initial purpose. In all cases, we process your data to assist you with the same quality of care, regardless of the communication channel used (website, in person, phone, or online).