Privacy policy
In accordance with Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter ‘the TDC’), we inform you that:
Data Administrator
The administrator of your personal data is Krajmed Centrum Nowoczesnej Laryngologii Sp. z.o.o. with its registered office in Warsaw 02-739, Wałbrzyska 11 lok 55/56.
Data Protection Officer
In matters relating to the protection of personal data, you can contact the Data Protection Inspector in writing at [email protected] and at the above mentioned address.
Purposes and basics of processing
Your personal data is processed for the purpose of registration and handling at our facility, for the purpose of enabling and providing medical services, as well as for the Administrator’s statistical purposes, on the basis of Article 6(1)(a), (b) and Article 9(2)(a), (h) of the GDPR.
Data processing time
Your personal data, including medical records, will be kept for the period resulting from art. 29 section 1 of the Act of 6 November 2008 on Patient Rights and the Patient Ombudsman.
Do you have to provide your personal data?
The data is voluntary, but necessary for the performance of medical services by Krajmed Centrum Nowoczesnej Laryngologii Sp. z o.o. in accordance with relevant regulations. In case of failure to provide the data, there will be no possibility to use medical services.
Sharing data with third parties
Your personal data will not be made available to third parties, with the exception of institutions authorized by law and entities with which the controller has concluded a contract of entrustment, in order to perform the requested medical service.
Transfer of personal data to third countries
Your personal data may be transferred to recipients located in countries outside the European Economic Area, based on your consent and the relevant agreement between the Data Controller and the recipient containing standard data protection clauses adopted by the European Commission.
Automated processing, including profiling
Your personal data will not be processed automatically, including in the form of profiling, which may have legal effects on you or significantly affect you in a similar way.
Rights of the data subjects
You have the following rights in relation to the processing of personal data:
- access to your personal data,
- to correct your personal data,
- delete your personal data,
- limitations on the processing of your personal data,
- withdrawal of consent to the processing of personal data (withdrawal of consent does not affect the processing that was carried out before its withdrawal),
- to transfer your personal data,
- to object to the processing of their personal data,
- to lodge a complaint with the President of the Office for the Protection of Personal Data concerning the infringement of the provisions of the GDPR concerning the processing of personal data.