1. INTRODUCTION
The ophthalmological specialty clinic safeguards the personal data of its patients, staff and any other person who voluntarily provides information about themselves during the provision of their services. The current policy outlines the principles and guidelines that govern the processing of personal information in our clinic.
We are keenly aware of the importance of privacy and prioritize protecting personal information in our clinic, we take all necessary precautions to ensure that the information we collect is treated with the utmost care and security. We follow strict guidelines regarding the protection of personal data and comply with all applicable laws and regulations. Our patients and staff can feel safe in knowing that we are storing reliable and trustworthy information for them, which is important to us.
2. SCOPE
The Eye Specialty Clinic policy is applicable to all employees, contractors, and third parties who have access to personal data.
3. DEFINITIONS
At the clinic, we understand the importance of data protection and use the following definitions to ensure proper information management:
- Personal Data: Any information relating to an identified or identifiable natural person, such as name, identification number, location data, email address, health information, etc.
- Sensitive data: Personal information that reveals racial or ethnic origin, political opinions, religious or philosophical convictions, trade union membership, and data related to a person’s health or sex life.
- Data controller: The entity that determines the purposes and means of the processing of personal data.
- Data processor: The entity that processes personal data on behalf of the data controller.
4. COLLECTION AND USE OF PERSONAL DATA
The Eye Specialty Clinic collects personal information in a lawful, fair, and transparent manner. The data is collected for specific, explicit and legal purposes, such as:
- Provide eye health services.
- Manage medical appointments and treatments.
- Comply with legal and regulatory obligations.
- Facilitate communication with patients.
- Improve the quality of the services offered.
5. PRINCIPLES OF PROCESSING PERSONAL DATA
The Ophthalmological Speciality Clinic guarantees compliance with the following principles in the processing of personal data:
- Lawfulness: Personal data is collected and processed in accordance with and in accordance with the data processing law.
- Purpose: Personal data is collected for specific and legitimate purposes and will not be processed in a manner that does not fit those purposes.
- Proportionality: Only personal data that is necessary and relevant for the specific purposes for which it is processed is collected.
- Transparency: People are clearly and understandably informed about the collection and use of their personal data for their in-clinic processing and internal management. (Format for handling personal and commercial data – patients )
- Confidentiality: Personal data is treated with the utmost confidentiality and is rigorously protected against unauthorized access, as well as loss or improper disclosure. We adopt advanced security measures to ensure that information is effectively safeguarded at all times.
6. PROTECTION OF PERSONAL DATA
The Ophthalmological Specialties Clinic adopts the appropriate technical and organizational measures to protect personal data against unauthorized access, loss, modification or deletion. This includes, but is not limited to:
Access control over personal data is limited.
Use of encryption technologies where appropriate.
Secure storage of physical and digital data.
Provide training to employees on data protection practices.
7. RIGHTS OF DATA SUBJECTS
The owner of the personal data has the following rights:
- Right of access: To know the personal data of themselves and obtain them when required with their due comparison of identity.
- Right of rectification: Request the correction of said personal data by modifying what they consider relevant.
- Right to erasure: Request the deletion of personal data when it is no longer necessary for the purposes for which it was collected.
- Right to object: To object to the processing of your personal data in certain cases.
- Right to portability: Request the transfer of your data to another service provider.
8. DISCLOSURE OF PERSONAL DATA
The Ophthalmological Specialties Clinic will not share personal data with third parties, except in the following cases:
- When the owner of the data has given their explicit consent.
- When disclosure is necessary to comply with legal or regulatory obligations.
- When necessary to protect the vital interests of the data subject or another person.
- When required for the provision of medical services with other health professionals.
- When the authorities require the use of this information, it is to rule on the status of a verdict.
9. RETENTION OF PERSONAL DATA
The data will be kept in accordance with the purpose of the processing, complying with the legal or contractual obligation, and once this purpose and the established terms have been fulfilled, the data will be deleted.
In the specific case of our patients’ data, the information will be kept for at least 15 years from their last care, in accordance with the provisions of the Colombian regulation in force (Resolution 839 of 2017).
Regarding the use of advertising media, the patient previously fills out a consent that allows it to be used indefinitely; it will only be cancelled if it is revoked and is made by means of a request sent to the comercial@ceomedellin.com email and will become effective once it is officially received by the Clinic.
10. POLICY UPDATE
This policy may be updated from time to time to reflect changes in our personal data processing practices or applicable laws. Any changes will be communicated through our usual communication channels.
11. CONTACT
If you have any questions about the applicability of this policy, you can contact the legal department at notificacionesjuridicas@ceomedellin.com.