Privacy Policy    

In compliance with Law 1581 of 2012, Decree 1377 of 2013, and other applicable regulations, we inform you that the commercial companies listed below are considered Data Controllers for the processing of personal data. To this end, each company has established an Information Processing Policy, which sets forth the parameters for managing the data contained in the entity’s databases and data repositories. You may access these policies through the direct links provided at the bottom of each institution.

These policies establish the purposes for which your personal data is processed, including but not limited to the following:

  1. Preserve and maintain clinical and medical data.
  2. Store the data contained in the patient's medical record to fulfill medical and hospital services.
  3. Obtain essential data for medical, clinical, and epidemiological research, as well as for identifying clinical, scientific, and technological advancements.
  4. Provide information about educational campaigns and special programs related to health promotion and prevention.
  5. Maintain communication with the data subjects regarding the clinic’s activities.
  6. Comply with legal and contractual obligations for purposes of control, supervision, audits, and projects carried out by the company.
  7. Evaluate the quality of services provided by the Health Service Provider Institution.
  8. Carry out the corporate purpose of the Health Service Provider Institution in accordance with its bylaws.
  9. Process data provided by the patient’s respective Health Promoting Entity (EPS) for the supervision of services rendered.
  10. Provide general user support.
  11. Manage complaints, reports, claims, and suggestions.
  12. Carry out collection activities, payment processing, inquiries, verifications, control, and authorization of payment methods, and manage accounts receivable in general.
  13. Transfer data to the respective Data Processors for the purpose of conducting audits, reviews, and providing complementary health services.
  14. Transfer data to the respective Data Processors for the technological management of the digital platform through which personal data is collected (Patient Portal or Whistleblowing Channel). The data processor will be in a European Union country (Spain, Germany, or another). This repository involves international data transfer; however, it is guaranteed that the necessary security mechanisms are in place to maintain the confidentiality of the data being processed.

You have the right to: a) Access, update, and rectify your personal data, b) Request proof of the authorization granted, c) Be informed, upon request, about the use that has been made of your personal data, d) Submit complaints to the Superintendence of Industry and Commerce for violations of the law, e) Revoke the authorization and/or request the deletion of the data , f) Access your personal data that has been subject to processing free of charge. If you wish to carry out any of these actions, we invite you to consult the Personal Data Processing Policy of each of the following institutions to learn about the procedure you must follow.

NOTE REGARDING THE NATURE OF TECHNOLOGICAL PLATFORMS

The listed Companies inform you that the "Patient Portal" platform includes a Master Patient File located in Spain, which connects the data stored in each health center in Colombia. This portal serves as a data viewing window for the medical records that are stored and properly safeguarded at the clinic where the patient was treated; it is not a data storage tool. Meanwhile, the Whistleblowing Channel, used for complaints related to our Code of Conduct and Ethics, is an information repository whose central hub is in Germany. From there, the complaint is forwarded to the health center mentioned in the report to be investigated and responded to directly by the involved clinic. In both cases, the data controller remains exclusively the Company where the health services were provided and to whom the data subject granted the corresponding authorizations.

correspondientes:

Sociedad Link to consult policy Contact information
Clínica Imbanaco S.A.S. https://www.imbanaco.com/es_CO/politica-de-tratamiento-de-datos-personalesThis link opens in a popup window
Centro Oncológico de Antioquia S.A.S.

https://www.coa.com.co/politica-de-proteccion-de-datos/This link opens in a popup window

Clínica del Prado S.A.S.

https://clinicadelprado.com.co/wp-content/uploads/2023/08/M-SIR-002-MANUAL-DE-TRATAMIENTO-DE-DATOS-PERSONALES.pdfThis link opens in a popup window

Inversiones Médicas de Antioquia S.A. Clínica Las Vegas https://www.clinicalasvegas.com/wp-content/uploads/2024/04/02.-Politicas-de-tratamiento-y-proteccion-de-datos-personales-de-Inversiones-Medicas-de-Antioquia-S.A-Ed1.pdfThis link opens in a popup window
Clínica Oftalmológica de Antioquia S.A.S. Clofán

https://drive.google.com/file/d/1DdSzm5q08MmGq4-VWAZ0oraBNy4hCvdk/viewThis link opens in a popup window

Oftalmoservicios S.A.S https://oftalmoservicios.co/This link opens in a popup window
Cedimed S.A.S.

https://cedimed.com.co/wp-content/uploads/2023/05/1.-MANUAL-DE-POLITICAS-DE-TRATAMIENTO-Y-PROTECCION-DE-DATOS-PERSONALES.pdfThis link opens in a popup window

Clínica Medellín S.A.S. https://www.clinicamedellin.com/institucion/politica-de-proteccion-de-datos-personales/This link opens in a popup window
Clínica de la Mujer S.A.S. https://cdn.prod.website-files.com/63bee2fc0edd9b341d184046/
This link opens in a popup window
66298a81ff4e05f6601ffde8_
This link opens in a popup window
MANUAL%20DE%20POLI%CC%81TICAS
%20DE%20TRATAMIENTO%20DE%20DATOS
%20PERSONALES.pdfThis link opens in a popup window