logo

Privacy Policy Doctormid

Aviso de Privacidad Integral September, 24,2020

In compliance with the Federal Law for the Protection of Personal Data in Possession of Individuals (hereinafter, the "Law") and its Regulations, we present the Integral Privacy Notice (hereinafter, the "Notice") which is addressed to the User(s) (hereinafter, the "Holder") of the services provided by Doctormid (hereinafter, the "Holder"), indistinctly "Doctormid" or "Responsible") by means of a digital platform (the "Platform"), accessible by mobile devices through computer applications, by desktop computers and through Internet browsers (hereinafter, the "Service"), as well as to people who access and provide information through the https Internet domain: //www. doctormid.com in the United Mexican States ("Mexico").

The information collected (hereinafter referred to as "Personal Data") may be collected at the time the "Holder" expressly consents to this "Notice".

Likewise, the "Holder" is informed that all "Personal Data" will be administered in accordance with the principles of legality, consent, information, quality, purpose, loyalty, proportionality and responsibility contained in the Federal Law on the Protection of Personal Data in the Possession of Individuals.

In that sense, the "Holder" will be at all times responsible for the "Personal Data" provided to the Platform.

I. Definitions

In addition to the terms defined throughout this "Notice", the terms appearing with the first letter capitalized within this Notice shall have the meanings assigned to them below:

"Notice" - Refers to the present Integral Privacy Notice, whether it is issued in a physical or electronic document or in any other format generated by the person in charge, which is made available to the Owner, prior to the processing of his/her personal data in order to comply with the principle of information.

"Database" - It is the ordered set of personal data referring to an identified or identifiable person.

"Medical Centers" - It corresponds to the type of user, which is a hospital, clinic or health center where the specialist diagnoses and treats people with health problems. In general, any place where activities are carried out in the field of health, medical or paramedical services.

"Cookies" - Data files that are stored on the hard drive of a users computer or electronic communications device when browsing a specific website, which allows the exchange of status information between that site and the users browser. Status information may reveal means of session identification, authentication, or user preferences, as well as any data stored by the browser regarding the website.

"Personal Data" - Any information concerning an identified or identifiable natural person.

"Sensitive Personal Data" - Those "Personal Data" that affect the most intimate sphere of its "Holder", or whose undue use may give rise to discrimination or entail a serious risk for it. In particular, those that may reveal aspects such as racial or ethnic origin, present and future health status, genetic information, religious, philosophical and moral beliefs, union membership, political opinions or sexual preference are considered sensitive.

"ARCO" Rights - The rights that the "Data Subject" has against the "Controller", in relation to his/her "Personal Data", which include the following: the right to access his/her "Personal Data" and the details of the processing thereof, as well as to rectify them in case they are inaccurate or to cancel them when he/she considers they are excessive or unnecessary for the purposes that justified their collection or to oppose to the "Processing" of the same for specific purposes. In this respect, Section XI of this "Notice" will be expanded upon.

"Dissociation" - This is the procedure by which the "Personal Data" may not be associated to the "Data Subject" nor allow, due to its structure, content or degree of disaggregation, the identification of the same.

"Manager" - The individual or corporation that alone or jointly with others treats "Personal Data" on behalf of the "Controller".

"Health Specialists" - Corresponds to the type of user who is a professional using the "Website", which is a doctor, dentist, psychologist, physiotherapist, nurse, nutritionist, therapist or other person not mentioned above, who carries out activities in the field of health services and provides health, medical or paramedical services.

"Guidelines" - Privacy Notice Guidelines published in the Federal Official Gazette on January 17, 2013.

"Patient"- Corresponds to the type of user that accesses the "Doctormid" platform to schedule appointments with "Health Specialists" or to ask questions.

"Regulation" - The Regulation of the Federal Law of Protection of Personal Data in Possession of Individuals.

"Responsible Person" - A private individual or corporation that carries out the treatment of "Personal Data", namely "Doctormid".

"Third Party" - The individual or corporation, national or foreign, other than the owner or the "Responsible Party" of the "Personal Data".

"Holder" - The individual to whom the "Personal Data" correspond.

"Treatment" - The obtaining, use, disclosure or storage of "Personal Data", by any means. The use includes any action to access, handle, use, transfer or dispose of the "Personal Data".

"Transfer" - Any communication of "Personal Data" made to a person other than the "Controller" or "Manager" of the "Processing".

II. Responsible for the Information.

For purposes of the "Notice", as well as for all legal purposes, the "Responsible Party" will be Doctormid, with address at Av. las Palmas 4571-C, Las Palmas, 22106 Tijuana, Baja California, who will carry out the "Treatment" of the "Personal Data".

The "Controller" may be assisted by one or more "Officers", who will act in the name and on behalf of the "Controller", to provide a more efficient "Processing" of the "Personal Data". The "Persons in Charge" will be informed of the due treatment that they must give to the "Personal Data".

III. Information that will be collected when you sign the Notice.

This "Notice" will be made available to the "Holder" at the time the "User" is registered in the "Platform" of "Doctormid". The "Holder" will provide this information, which is considered indispensable to be able to provide the service, when creating his/her account and expressly subscribing to this "Notice", as well as when modifying the information contained in his/her account. The "Personal Data" collected for the three categories of Users are:

In the case of "Patients"

  1. Name with surname.
  2. E-mail address.
  3. Cell phone number.

In the case of "Health Specialists"

  1. Name with surname;
  2. Specialty or specialties;
    1. Specialty fields;
  3. E-mail address.
  4. Cell phone number.

In the case of "Medical Centers"

  1. Name or company name;
  2. Name of the "Medical Center";
  3. E-mail address;
  4. Address;

In the absence of such information, the "Manager" will not be able to open an account for the "Holder" and, therefore, can not provide the Service consisting of the use of the Platform.

In addition to the information necessary for the creation of an account that allows the "Controller" to provide the Service, when creating or modifying the account the "Holder" will may provide the following "Personal Data", which will be optional:

In the case of "Patients":

  1. Profile Photograph Ailments;
  2. Clinical history;
  3. Age;
  4. Weight;
  5. Height;
  6. Date of birth.

By virtue of the fact that all the numbers are considered as "Sensitive Personal Data" they will receive the treatment indicated in section IV. "Sensitive Personal Data".

In the case of "Health Specialists:"

  1. Profile photography;
  2. Profile background photograph;
  3. Team and venue photos;
  4. Videos of the facilities;
  5. Treatment;
    1. Licensing;
    2. Teacher;
    3. Doctor;
    4. Teacher;
  6. Professional license;
  7. Academic background;
  8. Certificates;
  9. Experience and Achievements;
  10. Publications;
  11. Awards and Distinctions;
  12. Address of his office;
  13. Diseases Treated;
  14. Languages;
  15. Schedule.

By virtue of the fact that numbers 1, 12 and 15 are considered as "Sensitive Personal Data" they will receive the treatment indicated in section IV. "Sensitive Personal Data".

In the case of "Medical Centers"

  1. Profile photo;
  2. Team and venue photos;

We inform you that in our website and mobile application we use "Cookies", and other technologies through which it is possible to monitor your behavior as a "User" of the Internet, to provide you with a better service and user experience when navigating our website/platform, as well as to offer you new products and services based on your preferences.

The "Personal Data" we obtain from these tracking technologies are as follows:

(i) browsing time; (ii) time spent browsing our website; (iii) sections viewed; and, (iv) websites accessed prior to ours.

IV. Sensitive Personal Data.

Sensitive Personal Data" are considered those "Personal Data" that affect the most intimate sphere of its "Holder", or whose improper use may give rise to discrimination or entail a serious risk for the latter. In particular, those that may reveal aspects such as racial or ethnic origin, present and future health status, genetic information, religious, philosophical and moral beliefs, union membership, political opinions, sexual preference are considered sensitive.

By virtue of the foregoing, the "Holder" may, but shall not be obliged to, disclose the following sensitive data:

In the case of "Patients":

  1. Profile photograph Ailments;
  2. Medical history;
  3. Age;
  4. Weight;
  5. Height;
  6. Date of birth.

In the case of "Health Specialists"

  1. Profile photography;
  2. Languages;

V. Information to be collected when using the Inquiry or Appointment service.

Once the "Holder" has created his User account and has expressly accepted this "Notice", the Responsible Party may collect "Personal Data" similar or different to those provided during the creation or modification of the account. The following "Personal Data" may be collected by different means when the "Holder" uses the Service:

In the case of "Patients":

  1. Ailments;
  2. Medical History;
  3. Age;
  4. Weight;
  5. Height.

By virtue of the fact that the previous numbers are considered as "Sensitive Personal Data" they will receive the treatment indicated in section IV. Sensitive Data.

In the case of "Health Specialists Professional"

  1. certificate issued by the General Directorate of Professions of the Ministry of Public Education;
  2. Documents proving that they have studied the subjects corresponding to their work, experience and speciality.

VI. Primary and Indispensable Purposes of Treatment

The "Personal Data" collected by the "Responsible Party", whether in a personal, direct or indirect way, will be used for the following primary and indispensable purposes:

  1. To contact the "Users" through the "Platform", specifically the "Patients" with the "Health Specialists" and / or "Medical Centers".
  2. Inform the "Holder" regarding any inconvenience during the Service;
  3. Maintain the necessary information to communicate with Users and obtain feedback regarding any aspect of the service provided by the "Manager";
  4. Identification purposes of the "Holder" for the correct provision of the Service; and To contact the "Holder" in case there has been any violation of security occurred in any phase of the Treatment.

The fulfillment of the primary purposes of the Processing is necessary for the existence, maintenance and fulfillment of the legal relationship between the "Responsible Party" and the "Holder".

VII. Secondary Purposes of Treatment

The "Personal Data" collected by the "Responsible Party", whether in a personal, direct or indirect way, will be used for the following secondary purposes:

  1. Statistical and information purposes for the "Responsible Party".
  2. Marketing, promotional and commercial prospecting purposes.
  3. For sporadic and/or eventual contact with the User, in order to provide information related to the products and/or services offered by the "Responsible", as well as other products with advertising or commercial prospecting purposes.
If you do not wish your Personal Data to be processed for any or all of the secondary purposes, from this moment on you can inform us of this through the means provided in the Contact Section.

VIII. Transferences.

In the case of "Patients":

The "Responsible Party" may transfer the "Personal Data" of the "Patient", object of the present "Notice", with the previous express consent of the "Titleholder", to a "Health Specialist" with the purpose of providing the referred service in a satisfactory manner. The "Personal Data" will only be shared with the "Health Specialist" while the Service is being executed, which will consist of:

  1. E-mail address;
  2. Ailments;
  3. Clinical history;
  4. Age;
  5. Weight;
  6. Height.

In the case of "Health Specialists"

The "Responsible Party" may transfer the "Personal Data" of the "Health Specialist", object of this "Notice", with the previous express consent of the "Titleholder", to a "Patient" so that the "Patient" may contact the "Health Specialist". The "Personal Data" will only be shared with the "Patient" while the Service is being executed, which will consist of:

  1. Name and last name;
  2. Specialty;
  3. E-mail address.

In the case of "Medical Centers"

The "Responsible Party" may transfer the "Personal Data" of the "Medical Center", object of this "Notice", with the previous express consent of the "Holder", to a "Patient" so that the "Patient" can contact and, if necessary, know the location of the "Medical Center". The "Personal Data" will only be shared with the "Patient" while the Service is being executed, which will consist of:

  1. Name of the "Medical Center";
  2. E-mail address;
  3. Level;
  4. Address.

The "Transfers" described here are located in the case of exception provided for in Article 37, Section VII of the Law, since they are necessary for the provision of the Service performed by the "Manager" in favor of the "Owner", consisting of contacting the "Users" in the "Platform".

In order to comply with the purposes described above or other legally required ones, "Doctormid" may transfer its "Personal Data" to the companies that form part of the "Doctormid" corporate group, that is, to the "Responsible"s parent, controlling, subsidiary and affiliated companies.

In case the "Health Specialists" or the "Medical Centers" collect the "Personal Data" directly from the "Data Subject", they will do it as "Responsible Party" substituting only in this case, "Doctormid" as responsible for the "Personal Data". Therefore, both the "Health Specialists" and the "Medical Centers" must follow the dispositions of the Federal Law for the Protection of Personal Data in Possession of Individuals and inform the "Data Subject" that they are using the service of a "Third Party"; in this case "Doctormid", for appointment scheduling and that therefore, he/she could receive communication from "Doctormid", as a "Third Party", according to the "Transference" of "Personal Data".

Based on article 37 of the Law, we inform you that your consent will not be required to make Transfers to controlling companies, subsidiaries or affiliates, or to a parent company to any company of the same group of "Doctormid", since these companies are governed by the same privacy standards.

The purpose of Personal Data Transfers is to improve aspects related to the use of the Platform. If you do not wish your Personal Data to be transferred, you may, from this moment on, inform us of this through the means provided in the Contact Section, with the purpose of revoking your consent with respect to any Transfer.

Likewise, the "Personal Data" may be shared with affiliated or commercially related Third Parties, unaffiliated or non-commercially related Third Parties, or with any "Third Party" duly hired, or with any company with which the "Controller" has a commercial relationship, provided that the referred "Third Parties" have the due privacy controls, are aware of and subscribe to this "Notice" and only use the "Personal Data" for the fulfillment of the purposes referred to in this "Notice". For the purposes of consenting to the provisions of this paragraph, we make available to the "Holder" the following clause of acceptance or non-acceptance of Transfers to "Third Parties":

IX. Limitation on the Use or Disclosure of Your Personal Information.

The "Holder" can indicate to the "Manager" that he/she wishes to limit or stop receiving advertising messages, whether by fixed or cell phone, as well as by e-mail.

Likewise, the "Holder" may limit the purpose of the "Processing". For this purpose, the "Holder" must send a request to disable the secondary purposes, as well as the purposes that are not indispensable, the messages and/or the advertising mails to any of the contact means indicated in the Contact section.

For this purpose, the "Holder" must send a request with, at least, the following requirements:

  1. The full name of the "Holder";
  2. Address or other means to communicate the answer to your request;
  3. The official documents that prove the identity of the "Titleholder";
  4. A clear and precise description of whether you wish to limit or stop receiving advertising messages, whether by telephone or cell phone, as well as by e-mail.

On the other hand, you may also limit or stop receiving advertising messages through the registration of the "Titleholder" in the Public Registry of Consumers provided for in the Federal Consumer Protection Law, now the Public Registry to Avoid Advertising, and in the Public Registry of Users (REUS) in accordance with the Law for the Protection and Defense of Users of Financial Services, in terms of Article 111 of the "Regulations.

Once the request has been received, the "Responsible Party" will have a term of 20(twenty) days to respond to the "Holder" of the "Personal Data", which will be sent through the means of contact indicated by the "Holder" or, in its absence, to the e-mail address that is registered.

As for the Public Registry to Avoid Advertising, 1 (one) day after the registration is made, it will become effective 30 (thirty) calendar days after the date of its registration and, as for the Public Registry of Users, it will become effective 45 (forty-five) days after it is registered and has a validity of 2 (two) years, after which time it will be automatically cancelled.

X. Revocation of Consent.

The "Holder" has the right to revoke the "Consent" he/she has given for the performance of the "Processing", whether in relation to one or all of his/her "Personal Data". For such purpose, the "Data Subject" must send a request with, at least, the following requirements:

  1. The "Holders full name;
  2. Address or other means to communicate the answer to your request;
  3. The official documents that prove the identity of the Titleholder.
  4. A clear and precise description of the Personal Data with respect to which he/she will exercise the rights conferred by the Law;
  5. Any element or document that facilitates the location of the Personal Data in question.

Once the request has been received, the Controller will have a term of 20(twenty) days to respond to the Holder of the Personal Data, which will be sent through the means of contact indicated by the Holder or, in its absence, to the e-mail address that is registered.

The revocation of the consent related to Personal Data that is indispensable for the Controller to deliver a product and/or provide a service to the Holder will imply that the Controller will not be obliged to comply with it, since he/she is prevented from doing so.

XI. Exercise of ARCO Rights.

The "ARCO" Rights are an acronym that groups four rights that the "Holder" can exercise, in relation to his "Personal Data":

  1. Access to the "Personal Data" that are subject to "Treatment"; that is to say, to ask the "Responsible" to allow the "Holder" to know what data he/she has in his/her possession.
  2. To rectify any of the "Personal Data", subject to "Processing" and in possession of the "Controller", which were inaccurate, incomplete, erroneous and/or imprecise.
  3. To cancel any of the "Personal Data", in possession of the "Controller", that it legitimately considers that they are not being used to fulfill any of the purposes of the "Processing" and/or that they are being used in contravention of the "Law", the "Regulations" or any other applicable legal provision.
  4. To oppose the "Processing" carried out by the "Responsible Party", with a justified cause, provided that it may cause him/her some damage and/or harm, or that it is contrary to the "Law", the "Regulations" or any other applicable legal provision.

For such purpose, the "Holder" must send a request with, at least, the following requirements:

  1. The "Titleholders" full name;
  2. Address or other means to communicate the answer to your request;
  3. The official documents that prove the identity of the "Titleholder";
  4. A clear and precise description of the "Personal Data" with respect to which he/she will exercise the rights conferred by the "Law";
  5. Any element or document that facilitates the location of the "Personal Data" in question;
  6. The modality by which it wishes to obtain answer, that is, in electronic documents, in simple copies or by any means.

In case the "Holder" makes a request for rectification, the "Holder" must also indicate the modifications to be made and provide the documentation that supports his/her request.

In the event that the request is appropriate, the response shall be communicated within 15 (fifteen) days from the date the request was received. This period may be extended by a single notice for an equal period, as long as the extension is justified.

The "Person in charge" may deny the access to the personal data or carry out the rectification or cancellation or grant the opposition to the "Treatment" of the same, in the following cases:

  1. When the applicant is not the "Holder" of the "Personal Data", or the legal representative is not duly accredited to do so;
  2. When the "Personal Data" of the applicant is not found in its database;
  3. When the rights of a third party are infringed;
  4. When there is a legal impediment, or the resolution of a competent authority, which restricts access to the personal data, or does not allow their rectification, cancellation or opposition;
  5. When the rectification, cancellation or opposition has been previously made.

The refusal may be partial, in which case the "the person in charge" will carry out the access, rectification, cancellation or opposition required by the "Holder".

Not with standing the above, you will also have the right to request "Doctormid" to send you an ARCO Rights Form that can be easily filled in, in order to exercise any of the prerogatives foreseen here.

XII. Notification of Changes to the Notice.

The "Person in charge" may make modifications to this "Notice", provided that the applicable legal provisions are respected. When modifications are made to the "Notice", the "Responsible Party" will make available to the "Holder" the information about the modifications, as well as the new Privacy Notice by means of the following means and procedures:

  1. Through an e-mail to the account that the User has registered;
  2. By means of physical diffusion at the address of the "Responsible"; and/or
  3. Publishing it in the "Doctormid" web portal, or electronically.

The "the person in charge" reserves the right to change and update this "Notice". The "Holder" will be responsible for keeping his/her e-mail account updated and for making sure that notifications are received in a mailbox that is constantly checked. In case of not receiving a response from the "Titleholder" within seventy-two (72) hours, it will be understood that he/she accepts the changes that may be made to this "Notice".

We recommend that you periodically check the date of the last modification of this document.

XIII. Contact.

If you wish to obtain more information, solve a doubt, exercise your "ARCO" Rights and/or clarify any question about the exercise of any right over your Personal Data, you can communicate or go directly to the address indicated by the "Responsible". We will then provide you with the contact details:

  1. Address: Av. las Palmas 4571-C, Las Palmas, 22106 Tijuana, Baja, California.
  2. E-mail: Soporte@doctormid.com

XIV - Cookie Policy.

"Doctormid" uses several technologies to improve the efficiency of its website, including your browsing experience. These technologies include the use of third party cookies. Cookies are small amounts of information that are stored in the browser used by each user so that the server remembers certain information that it can later use.

This information allows us to identify you and save your personal preferences to provide you with a better browsing experience. We remind you that you can disable or adjust the use of cookies by following the procedures of the Internet browser you use.