Data protection policy

This Data Protection Policy is adapted specifically to the website of ASISA GROUP (www.grupoasisa.com), as well as to applications and other services which the data subject may use through the aforementioned website (collectively referred to as “Services”). For this purpose, and under the conditions set out under the Data Protection Policy, ASISA GROUP shall be able to communicate your personal data to other companies in the Group, when this is necessary for the provision of these Services.

This Data Protection Policy may be amended by ASISA GROUP, upon previous communication to the data subject via the website or by other means so that they are made aware and can continue to use our Services. If the data subject continues to use our Services after having received notification of the aforementioned amendments, this will entail that he or she agrees to the same, unless express consent is necessary.

The data controller to whom the data subject may provide his or her personal data on the website (www.grupoasisa.com) will be the company ASISA, ASISTENCIA SANITARIA INTERPROVINCIAL S.A.U. (ASISA), with registered offices at calle Juan Ignacio Luca de Tena, 12, 28027, Madrid.

For the proper management of the processing of your personal data, ASISA GROUP has assigned a Data Protection Officer who can be addressed to resolve any issue concerning your data, contact via DPO@grupoasisa.com.

At ASISA GROUP we may process the data subject's personal data for the following purposes:

1. Contact: to manage any data subject's data who contact ASISA GROUP via forms that the website offers the user. Similarly, your data will be processed in order to manage enquiries or any kind of suggestion or request you send us through the channels provided for this purpose on our website.

2. Advertising our products and services: ASISA GROUP may send you, by post or email, SMS or other electronic communication, advertising of a general nature or adapted to your personal characteristics, related to the Group's own services.

3. Profiled using external sources: ASISA GROUP may prepare profiles based on information provided by third parties through marketing research and statistical and segmentation techniques and procedures that allow for the offer of services tailored to your characteristics and needs. Such acceptance shall in no case entail automatic decision-making.

4. Other channels: ASISA GROUP may also contact the data subject and collect their details via other channels such as by telephone, email, ASISA GROUP'S apps or social networks, in which case they will be informed of the purposes for which their data will be processed, and where appropriate, their consent will be duly obtained for each one of these channels.

The processed data comes from:

• Data provided by the data subject, through completion of the forms prepared for this purpose and from their dealings with ASISA GROUP.
• Data deriving from the service provision: indirectly, when deriving from the service provision itself and from maintaining this activity. This category includes browsing data via the website.
• The management, maintenance and development of the relationship between the data subject and ASISA GROUP.
• Data obtained from marketing research in which you have accepted to participate and have given consent to be used.

According to the service, the processed data falls into the following types:

• Identifying data (e.g. name, surnames, identity document, postal address, email, phone number).
• Socio-economic data (e.g. economic, financial and insurance data).
• Marketing data (e.g. interests as regards products or services).
• Socio-economic data (e.g. economic, financial and insurance data).

The processing of “Contact” related data, or data related to other communication channels on the website or which may be installed on the site and put at your disposal, is based on the maintenance of your request and where applicable, for the provision of the requested services.

The processing of professional data for the purposes of working with ASISA GROUP, is based on the voluntary cross-reference of this data and its storage, in accordance with legitimate interests.

The sending of advertising material and marketing of are own or similar products to those contracted by the user, is based on the legitimate interest of ASISA GROUP, as long as they register. In all other cases, such as when the advertising is from third parties, the processing of data will be based on consent that must necessarily be requested through ASISA GROUP.

einsurance or Coinsurance companies for the purpose of holding, processing or managing, where appropriate, the benefits contained in any of the policies contracted from one or more branches or companies of the ASISA GROUP.

Personal data will be kept for as long as necessary for the provision of the service or as long as the data subject does not withdraw their consent. The data will subsequently be deleted in accordance with the provisions of the data protection regulations, which entails its blocking, being available only at the request of Judges and Courts, Ombudsman, Public Prosecutor's Office or the competent Public Administrations during the prescription period of the actions that may derive and, once this has elapsed, will proceed to its complete elimination.

Any data subject has the right to obtain confirmation as to whether or not ASISA GROUP is processing personal data concerning them.

In the same way, as provided for in the General Data Protection Regulations, you may exercise the following rights:

• To access your data in order to be aware of the processing of the data subject's personal data as carried out by ASISA GROUP.
• To request the rectification or deletion of your data when the data subject considers it to be inaccurate, and when it is being processed by ASISA GROUP or even to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which they were collected.
• To request the limitation of the processing of your data in cases where regulations thereby grant it. In these cases, ASISA Group will keep the data which is subject to the limitation in order to exercise or defend claims as provided for under the General Data Protection Regulations.
• To oppose to the processing of your data in certain circumstances and for reasons related to your particular situation, in which case, ASISA GROUP would stop processing except for compelling legal grounds or in order to exercise or defend potential claims.

Similarly, the data subject has the right, at any time, to oppose the sending of advertising material by electronic means by ASISA GROUP, and to withdraw their consent, without this affecting the legality of the processing based before having given said consent.

Likewise, the data subject, may exercise the aforementioned rights, through written application to ASISA, ASISTENCIA SANITARIA INTERPROVINCIAL S.A.U and the mailing address calle Juan Ignacio Luca de Tena number 12, 28027, Madrid, or by sending an email to the DPO@grupoasisa.com, indicating in both cases "Data Protection".

Finally, the data subject may file a complaint with the Spanish Data Protection Agency, particularly when they have not obtained satisfaction in the exercise of their rights.