Privacy Policy
1. General Information
Through this Privacy Policy, AP ASSESSORS, SCP (hereinafter "AP ASSESSORS" or "the Entity") informs all users accessing the forms or the website https://sanitasbcn.com about the processing of their personal data.
AP ASSESSORS complies with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018Data Controller of the collected personal data.
2. Data Controller
- Company name: AP ASSESSORS, SCP
- Tax ID (NIF): J65541336
- Registered address: Calle Madrazo, 72, 08006, Barcelona, Catalonia, Spain
- Data Protection Officer (DPO): [email protected]
3. Purposes, Legal Basis, and Types of Data Processed
| Purpose | Data Types | Legal Basis |
|---|---|---|
| Handling inquiries or requests | Identification and contact information | Consent – Art. 6.1(a) GDPR |
| Sending commercial communications | Identification and contact information | Consent – Art. 6.1(a) GDPR |
| Preparing insurance quotations | Identification and contact information | Consent – Art. 6.1(a) GDPR |
| Contracting private health insurance | Identification data, health information, passport, card data and/or IBAN | Consent – Art. 6.1(a) and 9.2(a); Contract – Art. 6.1(b) GDPR |
3bis. Processing of Special Categories of Data (Health, Payment and Passport)
In specific cases, AP ASSESSORS may collect and process sensitive personal data, including:
- Health information (e.g., responses to medical questionnaires)
- Credit or debit card data: card number and expiry date (excluding CVV)
- IBAN or bank account number (when necessary for refunds or payment setup)
- Passport copy or identification document (if required by the insurance provider)
This data is collected exclusively to manage the contracting of private health insurance offered by Sanitas, and handled securely and lawfully.
Security measures applied:
- Encryption during data transmission and storage
- Access restricted to authorized personnel only
- Automatic deletion of sensitive data within 14 days of submission
Legal basis:
- Article 6.1(a) GDPR – User's explicit consent
- Article 6.1(b) GDPR – Execution of contract or pre-contractual measures
- Article 9.2(a) GDPR – Explicit consent for processing special category data
The user may exercise their rights of access, rectification, deletion, restriction, objection, or withdraw consent by writing to [email protected].
4. Recipients
As a general rule, personal data will not be disclosed to third parties unless legally required.
5. International Transfers
No international data transfers are carried out.
6. Data Retention Periods
| Data Type | Retention Period |
|---|---|
| Inquiries or requests | Until the request is handled |
| Commercial communications | Until consent is withdrawn |
| Quotations | 1 month after submission |
| Health, passport, card data and/or IBAN | Automatically deleted after 14 days |
7. Data Subject Rights
According to Chapter III of the GDPR, users have the right to:
- Access their personal data
- Rectify inaccurate data
- Request deletion (right to be forgotten)
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent at any time
- Lodge a complaint with the Spanish Data Protection Agency (AEPD)
To exercise these rights, please contact us at: [email protected]
8. Security Measures
AP ASSESSORS has implemented appropriate technical and organizational security measures to protect personal data from unauthorized access, loss, or alteration, taking into account the nature of the data and the current state of technology.
- Encryption of sensitive fields
- Access restricted by user roles and 2FA authentication
- Regular deletion of sensitive entries
- Secure (HTTPS) site communication
However, users should be aware that no online system is completely secure.
9. Minors
If any products or services are intended for minors under 14 years of age, parental or guardian consent will be required. AP ASSESSORS is not responsible for data submitted by minors without such consent.
10. Applicable Law
Any dispute arising from the use of this website will be governed by Spanish law and subject to the jurisdiction of the courts of Barcelona.
