Privacy Notice

I. Identity and address of the Responsible Party

The Sociedad de Beneficencia Española, A.C. (hereinafter "La Bene" or "the Hospital"), with address at Av. Venustiano Carranza #1090, Col. Tequisquiapan, C.P. 78250, San Luis Potosí, S.L.P., Mexico, is responsible for the processing of your personal data in accordance with the Federal Law on Protection of Personal Data Held by Private Parties and its Regulations.

II. Personal data we collect

For the purposes described in this Notice, we may collect the following personal data:

• Identification data: full name, date of birth, sex, CURP, RFC
• Contact data: address, phone number, email address
• Medical and health data: clinical history, diagnoses, laboratory and imaging studies, medications
• Financial data: medical expense insurance information, payment methods
• Emergency data: name and phone number of a family member or guardian

In the case of minors, data will be provided by the parent or legal guardian, who assumes responsibility for the accuracy of the information.

III. Sensitive personal data

The Hospital will collect sensitive personal data related to your health status, which requires your express consent. By providing your data and signing the informed consent form at the time of your care, you authorize its processing for the primary purposes described in this notice.

IV. Purposes of processing

Primary purposes (necessary for the legal relationship arising from medical care):

• Provide medical, hospital, diagnostic, and treatment services
• Prepare and maintain your clinical record in accordance with NOM-004-SSA3-2012
• Manage payments, billing, and agreements with insurers
• Comply with legal obligations and requirements of health authorities
• Ensure your safety during your hospital stay

Secondary purposes (you may object without affecting service provision):

• Sending information about promotions, health campaigns, and Hospital services
• Preparation of statistics and continuous improvement studies (anonymized data)
• Satisfaction surveys

If you do not wish your data to be used for secondary purposes, you may indicate this by sending an email to: contacto@labenesanluis.com.mx or visiting the Public Relations area.

V. Data transfers

Your personal data may be transferred without requiring your consent in the following cases:

• To health authorities (COFEPRIS, Secretaría de Salud) in compliance with legal obligations
• To treating physicians, specialists, and support services for continuity of care
• To medical expense insurance companies with which you have a policy, for coverage management
• To laboratories and diagnostic centers for the performance of studies

VI. ARCO Rights

You have the right to Access, Rectify, Cancel, or Object to the processing of your personal data (ARCO Rights). To exercise them, you must submit your request in writing or by email including:

• Full name and official identification
• Clear description of the right you wish to exercise
• Any document that facilitates the location of your data

Response deadline: 20 business days from receipt of the request.

VII. Security measures

The Hospital implements administrative, technical, and physical security measures to protect your personal data against damage, loss, alteration, destruction, or unauthorized use, in accordance with standards established by the INAI.

VIII. Use of cookies and tracking technologies

This website may use cookies to improve your browsing experience, analyze traffic, and personalize content. You can configure your browser to reject cookies; however, this could affect site functionality.

IX. Changes to the Privacy Notice

We reserve the right to make modifications to this Privacy Notice. Updates will be published on our website and, in the event of substantial changes to the processing of sensitive data, we will notify you through the means available to us.