Institutional response to adverse events: review of critical incidents reported in Spanish critical incident reporting system (SENSAR)