Skip to content
Integra Cloud

Data protection

How does Integra Cloud asume the principles of Data Protection?

Although Integra Cloud works with large volumes of health information, it always does so in a protected manner. This data may include medical, genetic or biometric information and is used exclusively for research purposes, or for the diagnosis, treatment or prevention of health problems. This implies the need to comply with data protection regulations.

INCLIVA has a Data Protection Unit

This unit is in charge of supervising the compliance with the General Data Protection Regulation (GDPR) and that the work is based on standards that guarantee the data protection of the patients and the research and labor staff.

This unit is in permanent coordination with the Data Protection Delegation of the Generalitat Valenciana, which also covers the Clínico-Malvarrosa Health Department, and ensures that the Integra-Cloud project complies with the GDPR Regulation.

How is the Data Protection regulation applied?

The regulation includes many aspects that must be complied with by all entities that process personal data. One of the pillars of this regulation is article 5 of the GDPR, which defines the principles that any processing of personal data must comply with: lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation and integrity and confidentiality.

  • 01
    Lawfulness, fairness and transparency
    Integra Cloud involves processing data integrated into the public systems of the Generalitat Valenciana. The overall purpose of Integra Cloud is to support the Malvarrosa Clinical Health Department in performing its functions and to promote scientific research carried out by the Department, in order to fulfil the research function assigned to it by the General Health Law and the Biomedical Research Law. This is part of the Department’s role within the public health system.
  • 02
    Purpose limitation
    The data included in Integra Cloud has been collected to improve the provision of public services to citizens. Additionally, with the appropriate safeguards in place, the data could be used for scientific research, a purpose that is considered compatible under the European data protection regulation.
  • 03
    Data minimization
    The Integra Cloud project enables knowledge to be inferred from the minimum necessary set of health data, with the selection of relevant data limited to the set objectives.
  • 04
    Accuracy
    The technology developed by the Integra Cloud project is designed to specifically integrate the necessary data from the computer systems of the Valencian Community’s public health service, ensuring that the data is as reliable and accurate as the original data.
  • 05
    Limitation of the retention period
    As the Integra Cloud project is developed under public information use regulations, the retention period for the information it processes will be in accordance with applicable research regulations.
  • 06
    Integrity and confidentiality
    Data confidentiality and security are priorities for the Integra Cloud project. For this reason, information is stored on secure servers within a network environment that is permanently monitored and secured by the INCLIVA IT team. This is done in coordination with the technology and information security teams of the Valencian Regional Government and in accordance with the cybersecurity regulations of the National Security Scheme (ENS), with which INCLIVA complies as an organisation certified by the National Cryptological Centre (CCN).