Protection of personal data

Information on the processing of personal data for patients

Dear Patients,

Clinic+ Medical Group s.r.o., ID No.: 075 58 791, with registered office at Vršovická 1461/64, Vršovice, 101 00 Prague 10, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 303018, as the administrator of your personal data, hereby informs you about the manner and scope of processing of your personal data, including the scope of your rights related to the processing of your personal data by our clinics.

1. Legal basis

In our surgeries, we process personal data in accordance with European Union law, in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), and in accordance with the relevant national legislation, in particular Act No. 110/2019 Coll., on the processing of personal data, and Act No. 372/2011 Coll, Act No. 48/1997 Coll., on public health insurance, Act No. 563/1991 Coll., on accounting, Act No. 586/1992 Coll., on income taxes, Act No. 634/1992, on consumer protection.
The legal basis for processing your personal data is the fulfilment of our legal obligation and the fulfilment of our obligations under the health care contract on the basis of which we provide you with health care services.

2. Purposes of the processing of personal data

We collect and process your personal data only for the stated purpose, which is the provision of health services, reporting of covered health services, billing for non-covered health services, communication of health data to you and other authorized persons, organization of health services (ordering patients), reporting any adverse drug reactions or adverse events within the scope of the applicable legislation, reporting to the registers of certain diseases provided for by law, keeping records of our income and expenses, payments received and management as required by the tax and accounting regulations.

3. Duration of processing of personal data

We process your personal data contained in the medical records for the period of time specified by Decree No. 98/2012 Coll., on medical records. Personal data processed for other purposes are kept for the period specified by law or for as long as you are our patient (and subsequently for one year after you cease to be our patient) or until your consent is withdrawn.

4. Scope of personal data processing

We process your personal data to the extent necessary for the provision of health services and the reporting of health care, and the scope of the personal data collected is based on the applicable legislation. If we record your personal data in excess of the obligations imposed on us by law, we will always seek your prior written consent.

The data kept about you in the medical records include your identification data, contact data, data on examinations performed, diagnosis, treatment, prescribed medicines or medical devices, results of comprehensive and control examinations, ev. Your informed consent or disagreement with the proposed treatment, a list of persons authorised to inspect your medical records or a prohibition on providing information to specified persons.

5. Recipients of personal data

The recipient of your personal data may be, in accordance with the provisions of the legislation, in specific cases, in addition to you: the provider of health services, public authorities and persons authorised to inspect medical records under the Act on Health Services and Conditions of their Provision.

In addition to the controller, personal data may also be processed by processors for the purposes described above on the basis of personal data processing contracts concluded in accordance with the General Data Protection Regulation. The persons who have the possibility to become acquainted with your personal data are also legally bound to data protection and confidentiality obligations. Your personal data is not transferred abroad.

6. Your rights

You have the right to access your personal data. If you believe that your personal data is incorrect or inaccurate, you have the right to ask us to correct your personal data.

You also have the right to erasure of your personal data to the extent that you have voluntarily provided personal data, i.e. in the context of fulfilling your contractual obligations. It is therefore not an absolute right that would give you the possibility to request the erasure of your personal data at any time and in any situation. The right to erasure of personal data only applies to personal data that we process for purposes other than the provision of health services. We may not erase data that we hold about you for the purpose of providing health services (e.g. in medical records).

You have the right to restriction of processing, where we must mark your personal data for which processing has been restricted and we must not process it further for the duration of the restriction, except for storage. You may request that we provide your personal data to you for the purpose of transferring it to another data controller or that we provide it to the data controller ourselves. This right only applies to data that we process by automated means, based on your consent or a contract with you. We may only disclose data we hold about you for the purpose of providing health services (e.g. in medical records) to you and, under lawful conditions, to another health service provider or public authority.

If we process your personal data for the purposes of our legitimate interests or those of a third party, you have the right to object to such processing at any time. You may object directly to the data controller, who is Aleksei Alekaev. If you object, we will not be able to further process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests or rights and freedoms, or where the processing is necessary for the establishment, exercise or defence of legal claims.

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with the supervisory authority of your place of residence, place of employment or the place where the alleged violation occurred. In the Czech Republic, the supervisory authority is the Office for Personal Data Protection (Pplk. Sochora 27, 170 00 Prague 7).

Providing your personal data is a legal requirement and you as a patient are obliged to provide it, just as we have the right to request it from you. Failure to provide your personal data will mean that we will not be able to provide you with health services and this may result in damage to your health or direct risk to your life.

If you have any questions or submissions regarding the processing of your personal data, please contact
e-mail: info@clinic-plus.cz
or
Tel: 222 944 444