1. Responsible

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, General Data Protection (hereinafter, GDPR) and the Organic Law and guarantee of digital rights 3/2018, of 5 December, on Data Protection and guarantee of digital rights (hereinafter, LOPDGDD), we inform you of the following.

The Data Controller of the personal data is;

RESIDENCIA SAN RAFAEL S. L, Cif. B04268793 Address. Urb. Torre del Campo s / n 04114 Nijar (Almería) Tel. 950 52 58 10 Email. informacion@rsanrafael.com

For any question, the user, resident, family member or legal guardian can contact the data protection delegate by email to the following address dpd@almeriacalidad.com 

2. Data collected and where it comes from

We collect and process your personal information on a general basis in order to manage our relationship with you. 

This personal data includes:

Work placement data

  • Identification data: name and surname, ID number, address (postal or e-mail), telephone number (landline or mobile), signature.
  • Academic data: education.

Origin. The data comes from the person concerned.

Employee data

  • Identification data: name and surname, Dni/ Nif/ Nie/ Passport, address (postal or electronic), telephone number (landline or mobile), signature, digital signature, social security account number, photographs.
  • Personal characteristics: marital status, date and place of birth, sex, nationality, gender.
  • Academic data: education, qualifications, level of studies.
  • Professional data: professional experience, seniority, salary.
  • Bank details: bank account number.
  • Body temperature.

Origin. The data comes from the person concerned.

CV data

  • Identification data: name and surname, Dni/ Nif/ Nie/ Passport, address (postal or electronic), telephone number (mobile), signature, photographs.
  • Personal characteristics: marital status, date and place of birth, sex, nationality, gender.
  • Academic data: education, qualifications, level of studies.
  • Professional data: professional experience.

Origin. The data originates from the data subject.

Video surveillance

  • Identifying data: image management.

Origin. The data come from persons accessing or attempting to access the facilities.

Residents' data

  • Identifying data of residents, relatives or legal guardians: name and surname, ID card number, address (postal or electronic), telephone number (landline or mobile), signature, Social Security number.
  • Identifying data of the prescribing doctor: name and surname(s), Dni/ Nif/ Nie, registration number.
  • Personal characteristics: date and place of birth, age, marital status, nationality, gender.
  • Health data: medical history, medical history, allergies, medical prescription.
  • Financial data: bank account number.

Origin. The data may come from the data subject or, where appropriate, from the parent or legal representative.

3. How do we collect your information?

We collect your personal information by different means. You will always be informed at the time of collection by means of informative clauses about the data controller, the purpose and legal basis of the processing, the recipients of the data and the period of conservation of your information, as well as the way in which you can exercise your rights regarding data protection.

Derived from the purpose of the service we provide you with, of which you will have been duly informed and, where appropriate, you will have been asked to give your consent for one or more specific purposes.

Through our website we collect personal information when you make an enquiry.

In addition, our facilities have a video surveillance system whose function is to ensure the security of persons and property, so that your image may be recorded simply by accessing them.

4. Responsibility of the user

By providing us with their data through electronic channels, the user guarantees that they are over 14 years of age and that the data provided to RESIDENCIA SAN RAFAEL S. L are true, accurate, complete and updated. To this effect, the user confirms that he/she is responsible for the veracity of the data provided and that he/she will keep said information suitably updated so that it corresponds to his/her real situation, being responsible for any false or inaccurate data that he/she may provide, as well as for any damages, direct or indirect, that may arise.

5. Purpose of processing

The collection and processing of the user's personal data is for the following purposes, depending on the specific case:

Work experience data

  • Data management in the relationship with students who carry out work placements.

Employee data

  • Data management in the employment relationship with employees.
  • Temperature in order to prevent the spread of Covid-19 infection.

CV data

  • Human resources, personnel selection.

Video surveillance

  • Management of images in order to guarantee the security of goods, facilities and people.

Residents' data

  • Management of the personal data of the residents of the centre, socio-health care, as well as carrying out the formalities derived from the provision of care.
  • Necessary to be able to continue providing the communication service.
  • Contact, resolve incidents, manage queries associated with the service or any other similar situation in relation to the services offered by RESIDENCIA SAN RAFAEL S. L.

6. Conservation period

The data will be kept for the time necessary to comply with the purpose for which they were collected, for the years necessary to comply with the legal obligations and to determine the possible liabilities that may arise. They will be blocked and, if necessary, limited, and may be made available to the competent authorities.

In the event that you wish to join our staff and apply for one of our jobs, the data provided from your CV will become part of our employment exchange and will be kept for the duration of the selection process and for a maximum of 2 years or until you exercise your right of deletion.

The recordings from the security cameras will be kept for one month from their capture, unless there are circumstances that require them to be kept beyond that time in order to deal with possible incidents or liabilities.

In any case, and as a general rule, we will keep your personal information as long as there is a contractual relationship that binds us or you do not exercise your right of deletion and/or limitation of processing, in which case, the information will be blocked without being used beyond its conservation, as long as it may be necessary for the exercise or defence of claims or any type of liability that may arise that needs to be attended to.

7. Legitimation

RESIDENCIA SAN RAFAEL S. L is legitimised to process personal data for one or more specific purposes in accordance with the RGPD:

Article 6.1.a) RGPD, the data subject gave his or her consent to the processing of his or her personal data for one or more specific purposes.

  • Unambiguous consent on the basis of preferences and purposes.
  • Based on the consent given by the data subject by signing or accepting the relevant forms. If you are a user of our website, by ticking the box on the contact form, you authorise us to send you the necessary communications to respond to your query or request for information.

Article 6.1.b) GDPR, the processing is necessary for the performance of a contract to which the data subject is a party or for the implementation at the request of the data subject of pre-contractual measures.

Article 6.1.c) GDPR, the processing is necessary for compliance with a legal obligation applicable to the controller. "Real Decreto Legislativo 2/2015, de 23 de octubre, por el que se aprueba el texto refundido de la Ley del Estatuto de los Trabajadores" (Royal Legislative Decree 2/2015, of 23 October, approving the revised text of the Workers' Statute Law).

Article 6.1.f) GDPR, legitimate interest of the data controller to ensure the security of goods, installations and persons (video surveillance).

Article 6.1.f) RGPD, legitimate interest to respond to queries and complaints that you make to us and to manage the collection of amounts owed.

8. Accuracy of the data

All information provided by the user through the Portal services must be truthful. For these purposes, the user guarantees the authenticity of all the data that he communicates as a result of the completion of the forms necessary for the subscription of the Services. Likewise, it will be the user's responsibility to keep all the information provided to RESIDENCIA SAN RAFAEL S. L permanently updated so that it responds, at all times, to the real situation of the user. In any case, the user will be solely responsible for any false or inaccurate statements made and for the damages caused to RESIDENCIA SAN RAFAEL S. L.

9. Recipients

Employee data will be disclosed to the tax authorities, banks, savings banks, insurance companies, social security authorities, occupational health and safety agencies, employment agencies and data protection agencies.

The identification data (not health data) of residents may be passed on to the agency for tax purposes when requesting an invoice.

In the event that it becomes necessary as a result of an incident recorded by our security cameras, your images may be communicated to the State Security Forces and Corps, in accordance with the provisions of the Law.

They will only be transferred in the cases necessary for the development, control and fulfilment of the purposes expressed, in the cases provided for by law.

There are no international transfers of your data to countries outside the European Economic Area (EEA).

Likewise, your personal information will be at the disposal of the Public Administrations, Judges and Courts, for the attention of possible responsibilities arising from the processing.

10. Users' rights

We inform you that you can exercise your rights of access (to request access to personal data and certain information about the processing, purposes, category of data processed and recipients, among other aspects), rectification (rectification of inaccurate data), deletion (deletion of the same when, among other reasons, these are no longer necessary for the purposes for which they were collected), opposition (you have the right to object to the processing of your data, at any time, for reasons related to your particular situation), limitation of the treatment (limitation of your personal data, these being only treated for the exercise or defense of claims, revocation of consent (revoke the consent given at any time) and portability of the data (to receive personal data in a structured, commonly used and machine-readable format, and to transmit them to another data controller without being prevented from doing so by the data controller to whom they were provided, in the legal cases provided for this purpose) by enclosing a copy of your ID card or equivalent identification document at Urb. Torre del Campo s/n, 04114 Nijar (Almería). When you have not obtained satisfaction in the exercise of your rights, you have the right to file a complaint with the Spanish Data Protection Agency, whose contact details are as follows: C/ Jorge Juan, 6 - 28001 Madrid Telephones: 901 10 00 99/ 912 66 35 17.

11. Security measures

Finally, RESIDENCIA SAN RAFAEL S. L, will adopt in its information system the reasonably reliable and effective physical, technical and organisational measures, in compliance with the principle of proactive responsibility, in order to guarantee the security and confidentiality of the data stored, thus avoiding their alteration, loss, unauthorised processing or access and theft.

In addition, all staff with access to personal data have been trained and are aware of their obligations in relation to the processing of their personal data.

In the case of the contracts we sign with our suppliers, we include clauses requiring them to maintain the duty of secrecy with respect to the personal data to which they have had access by virtue of the order placed, as well as to implement the necessary technical and organisational security measures to guarantee the permanent confidentiality, integrity, availability and resilience of the systems and services for the processing of personal data.

All these security measures are regularly reviewed to ensure their adequacy and effectiveness. However, absolute security cannot be guaranteed and no security system is impenetrable. Therefore, in the event that any information processed and under our control is compromised as a result of a security breach, we will take appropriate steps to investigate the incident, notify the Supervisory Authority and, where appropriate, those users who may have been affected so that they can take appropriate action.

We inform you that the www.rsanrafael.com and www.rsanrafael.es websites do not adhere to any code of conduct, whether its own or that of third parties. In the future, this adherence may be modified by RESIDENCIA SAN RAFAEL S. L without express written communication with its users.

This Privacy Policy may be modified in strict compliance with possible legislative changes that may occur, as well as with the guidelines issued by the Spanish Data Protection Agency.

Last revision (1.0) made on 4 February 2022