Information clause for patients of the „Sanvimed” Specialist Medical Centre”

 

Pursuant to Article 13(1)-(2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of personal data of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (Official Journal of the EU L 2016, No. 119) - hereinafter referred to as RODO - we inform you that:

Data Administrator:

The administrator of your personal data is „Szpital Zaborze” spółka z o.o. with its registered office in Zabrze, address: ul. Stanisława Moniuszki 78, 41-807 Zabrze, registered in the register of entrepreneurs kept by the District Court in Gliwice, X Economic Department of the National Court Register under the KRS number 00000221552, hereinafter referred to as. Administrator.

Data Protection Officer:

The controller has appointed a Data Protection Officer for matters relating to data protection and for the exercise of your rights:

• you are welcome to contact the responsible person in the registration department
• we inform you about the appointed Data Protection Officer
• we are indicating the contact details of the person acting as Information Security Administrator, whom you can contact regarding the protection of your personal data. Contact is also possible at the e-mail address: rodo@sanvimed.pl or in writing to the registered office address indicated in section 1 with the notation „Information Security Administrator”.

Data storage

Your personal data will be processed for:

• necessary for the performance of the medical act of which you are the beneficiary, on the basis of Article 6(1)(b) of the RODO;
• necessary to carry out the intended medical procedure based on you, on the basis of Article 6(1)(b) of the DPA.
• testing the level of patient satisfaction being the fulfilment of the Administrator's legitimate interest and determining the quality of service, as well as the level of patient satisfaction with the medical services we provide, on the basis of Article 6(1)(f) of the RODO;
• the possible investigation or defence of claims, as the exercise of our legitimate interest as a patient, on the basis of Article 6(1)(f) of the DPA;
• to offer you services as a fulfilment of our legitimate interest, including products and services provided by entities cooperating with us (partners) and to select them according to your needs, i.e. profiling for medical treatments, on the basis of Article 6(1)(f) of the RODO.

(Profiling is where we may assess some of your characteristics based on your personal data, used to analyse your requirements and preferences, and based on this, adjust your profiles in order to provide you with the best possible medical services.)Automated decision-making is necessary in order to perform effective medical activities to which you are a party.

Right to object.

You have the right to object to the processing of your personal data on the basis of which we will cease to process your data for the purposes set out in section 3, except where we demonstrate that we have legitimate grounds overriding your interests, rights and freedoms, in particular within the framework of our legitimate interest and where the data are necessary for the establishment, assertion or defence of claims.

Data retention period.

• in the case of your data processed for the purpose necessary for the performance of treatment to which you are a party, we inform you that it will be processed for the period during which claims relating to the treatment may arise under the provisions of the Civil Code and/or tax law, as well as for 5 years calculated from the end of the calendar year in which the tax liability arose.
• data processed for the purposes of our product suppliers, we process until you object to the processing for this purpose.

Sharing of personal data:

Your personal data may be shared with the following recipients:

• entities in our supply group and our partners with whom we collaborate by bundling medical products or services.
• Your data may also be accessed by our subcontractors (processors), such as, for example, medical laboratories, specialist medical practices, hospitals and other establishments providing necessary medical services for our needs, which have entered into the above-mentioned agreement, ensures an adequate level of protection of personal data, in accordance with Article 45 of the RODO;

Ownership of personal data

You, as the subject of the relevant personal data, have the right to:

• access to their data and receive a copy of their data;
• data portability;
• to object to the processing of data;
• rectification (amendment) of your data;
• erasure, restriction of data processing;
• to lodge a complaint with the supervisory authority, the President of the Office for Personal Data Protection.

Information about the voluntariness of the data:

Your provision of personal data is voluntary, but necessary to:

• provision of medical services
• preparing an offer of a possible range of medical services.
• preparing an offer for the possible use of medical equipment

We remain at your disposal!