Ladies and gentlemen,
In accordance with the applicable provisions on the protection of personal data, in particular the Regulation of the European Parliament and Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repeal Directive 95/46 / EC (RODO) and the Act of 10 May 2018 on the protection of personal data (Journal of Laws of 2018, item 100), in order to ensure proper protection of personal data, the data subject should first of all provide information regarding the processing of personal data referred to in Article 13 or 14 RODO – depending on whether they were obtained directly from the data subject or from other sources.
In the light of the above, we provide the following information on the processing of personal data.
Information about processing of personal data
Data of personal information
The administrator of your personal data is Clinicforyou Ltd, Rajska 73, Tax ID: 8992691186, (hereinafter referred to as: Administrator).
Contact details of administrator of personal data information and inspector data protection
The administrator can be contacted by e-mail at info@clinicforyou.com or for using traditional mail to the address of the Administrator’s office: Clinicforyou Ltd, Rajska St. 73, 54-028 Wrocław, via the contact form on the website www.clinicforyou.com or by telephone on +48 604 454 212.
Data source
Your personal data may be processed on the basis of art. 6 paragraph. 1 point and GDPR, i.e. on the basis of consent to the processing of your personal data expressed voluntarily at the time of notification: via the contact form on the website www.clinicforyou.com to handle the sent question, personally, by online registration or traditional registration subscription to the newsletter phone.
The personal data provided by you may be processed on the basis of art. 6 paragraph. 1 point b GDPR, i.e. processing is necessary for the performance of the contract (providing medical or other services, including commercial services).
The range of processing data of personal information
For the purpose of arranging consultations, your data including the following information: name, surname, telephone number, e-mail address. At the time registration for consultation, in the clinic you personally give a gender, a PESEL or date birth (in the absence of a PESEL number) and place of residence. Before the surgery, you additionally personally give your telephone number to a loved one who needs to be notified in a specific situation.
All this data is also used to verify your identity before providing a benefit. Your personal data provided during registration at the office Administrator are processed on the basis of art. 9 paragraph. 2 point and GDPR to take
by the Administrator activities related to the provision of services.
Objectives processing and basis legal processing
Providing benefits health (diagnostics, prophylaxis, therapy) and management (e.g. financial issues payments for services, leading documentation medical, verification identity.
Keeping books accounting and tax settlements.
Your personal they can be processed in order to defense of rights and pursuing claims by the administrator data in connection with run by him activity.
Period storage data
Your personal data contained in the medical documentation of the Post in accordance with requirements of the provision of art. 29 of the Act of November 6, 2008 on Patient Rights and The Patient Rights Ombudsman will be kept for 20 years from the end of the year the calendar in which the last entry was made, except:
1) medical documentation in case of death of a patient due to damage body or poisoning, which is stored for 30 years, counting from the end of the calendar year in which death occurred;
2) x-ray images stored outside the medical documentation patients who are kept for 10 years from the end of the year the calendar in which the photograph was taken;
3) referrals for medical examinations or orders, which are kept by period:
a) 5 years from the end of the calendar year in which it was granted health care which is the subject of the referral or doctor’s order,
b) 2 years from the end of the calendar year in which it was issued referral – if the health service has not been given due to failure to report to the patient within the set time limit, unless the patient has received the referral;
After the periods listed in paragraph 1 entity granting health services destroys medical records in a way making it impossible to identify the patient who has been affected or can be released the patient, his statutory representative or the person authorized by the patient. Personal data that may be used to defend rights or pursue claims they will be processed until the expiration of the claims in accordance with provisions of the Act of 23 April 1964 Civil Code. Personal data, processed for accounting and accounting purposes public and tax obligations will be processed until expiry limitation periods for public-law obligations, i.e. in principle for a period of 5 years years from the end of the calendar year in which the tax obligation arose.
In addition, personal data may be stored by the Administrator for purposes prevention of fraud and fraud, as well as for statistical and archiving purposes for a period of 10 years.
Data receivers
The administrator informs that your personal data may be made available to third parties if such obligation results from legal provisions, including for example based on the provision of art. 26 of the Act of November 6, 2008 on Patient Rights and Patient’s Rights Ombudsman, including persons authorized by the patient, entities providing health services to ensure the continuity of benefits health and public authorities, including the Patient Rights Ombudsman, bodies of the medical professions’ self-government as well as national and provincial consultants, to the extent necessary to perform their tasks by these entities, in particular supervision and control.
Personal data may also be entrusted to third parties on the basis of an agreement on entrusting the processing of personal data only in accordance with the instructions Administrator, if it is necessary to achieve the purposes of data processing and provision of the Administrator’s services, entities providing accounting and accounting services, agencies marketing (provided that you consented to contact for purposes marketing).
Transmission data outside the EEA
Your personal data is not limited Agreements outside the European Economic Area.
The right of a person, which data apply
In relation to the processing of your personal data, you have the right down:
- access to your personal data,
- correct your personal data,
- removal of your personal data, provided that it is possible to highlight the provision of art. 17 GDPR, for example, personal data are no longer necessary for the purposes for which they were collected or otherwise processed, consented on the basis of which the Administrator processed personal data and there is no other basis for the legal processing of personal data.
- The right to delete data may be limited due to the superior duties of the Data Administrator.
- Requests from the Administrator to limit processing of your personal data. The right to limit the processing of data may be limited due to the superior responsibilities of the data controller, including but not limited to related to keeping medical records.
- object to the processing of your personal data,
- transfer of your personal data,
- lodge a complaint regarding the processing of personal data in the cases specified in art. 21 GDPR, to the supervisory body dealing with personal security, i.e. the President of the Office for Personal Data Protection, Stawki St.00-913 Warsaw.
Information about voluntary giving data
Providing personal data is a prerequisite for providing benefits due to legal requirements imposed on the Administrator, including the need to keep medical records. The refusal to provide data is the basis for refusal to provide a health service. Providing the data is also necessary to issue an invoice or invoice. Providing personal data for marketing purposes is voluntary, no consent to marketing communication is not a basis for refusing to provide a service health.
Information about making decision
Your personal data will not be used for automated purposes making decisions including profiling.