Privacy policy
We hereby take the liberty of informing you about the principles of personal data processing (hereinafter referred as the "Policies") describing the method of obtaining, using and further handling of personal data obtained in connection with the provision of health care, and also instructing you about the rights you have as subjects of personal data.
We do everything based on the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council, on the protection of persons in connection with the processing of personal data and on the free movement of such data, related standards, and in accordance with the relevant principles of personal data processing.
Who we are (Administrator identification):
Prague Body Clinic s. r. o.
ID number: 17936543
Registered office: Kotlaska 2414/5 a, 180 00 Prague 8 – Libeň
Office: Menclova 2538/2, 180 00 Prague 8 – Libeň
Email: info@praguebodyclinic.cz
(hereinafter referred to as "Administrator" or "Health Care Facility")
Scope of processing of personal data:
The medical facility processes your personal data to the extent necessary to fulfil the specific purpose of the processing, while always proceeding in accordance with applicable legal regulations and in accordance with the obligations of the Administrator.
A personal data protection officer has not been appointed.
What data do we process:
In particular, we process your identification and contact data and data on your state of health obtained in connection with the provision of a health service (i.e. data that is part of medical documentation according to § 53 of the Act on Health Services). As part of the provision of health care, photographic documentation of the affected areas may be taken. In particular, we process your identification and contact data and data on your state of health obtained in connection with the provision of a health service (i.e. data that is part of medical documentation according to § 53 of the Act on Health Services). As part of the provision of health care, photographic documentation of the affected areas may be taken.
For what purpose we process personal data:
The medical facility processes your personal data for the following purposes:
-
providing health care and recording the course of treatment,
-
• organization of the provision of health services (ordering patients),
-
communication about your state of health to you and other authorized persons,
-
collection of biological material,
-
issuance of an ePrescription, request form for examination or voucher for medical devices,
-
reporting adverse events,
-
billing of unpaid health services,
-
processing of mandatory agendas (regulations governing taxes and accounting, etc.),
-
on the basis of the consent given, then to send commercial messages regarding our services, when you can refuse the sending of commercial messages at any time. Thanks to cookies, we also use personal data to improve our services, including analysing user behaviour and marketing.
On which legal bases do we process data:
On which legal bases do we process data:
-
we fulfil our legal obligation in accordance with Article 6 paragraph 1 letter c) GDPR regulations, which are established by relevant legal regulations, in particular:
-
on Act No. 372/2011 Coll., on health services and conditions of their provision (Act on health services),
-
on Decree No. 98/2012 Coll., on medical documentation,
-
on Act No. 48/1997 Coll., on public health insurance,
-
by Act No. 258/2000 Coll. on the protection of public health,
-
Act No. 634/1992 on consumer protection,
-
-
we fulfil our statutory obligations (especially document archiving, bookkeeping, tax documents, etc.),
-
when ordering our services, we process personal data exclusively for the purpose of fulfilling the contract, i.e. for the purpose of providing services,
-
we have legitimate interests (e.g. ensuring the security of the network and information of IT systems, etc.),we have legitimate interests (e.g. ensuring the security of the network and information of IT systems, etc.),
-
you have given us your consent to process your personal data,
-
we protect your vital interests or the vital interests of another natural person.
How we obtain your personal data:
Your personal data is provided to us in particular:
-
Directly from you,
-
or from third parties (customer – i.e. the person who concluded a contract with us on your behalf
-
provision of services, or from other health service providers, in connection with care
-
Your health, or that of family members and people close to you),
-
through cookie files, when we process personal data based on your consent, which you can give by confirming on the web interface after you have been informed about the use of cookies.
To whom the data is transferred:
Your personal data is transferred by the Medical Device to other entities exclusively in accordance with binding legal regulations, in such a way as to ensure the maximum protection of your rights and your privacy, when:
-
We transfer your personal data to other providers of health services, in particular to medical facilities, health insurance companies and entities that are authorized to view your medical records in accordance with the Act on Health Services,
-
further, your personal data are transferred to public authorities, especially in connection with the protection of the rights and interests of the Administrator (Police of the Czech Republic, public prosecutor's office, courts, forensic experts),
-
since the Medical Facility is authorized to use personal data processors for its activities, they have access to your personal data, and these may be entities providing tax, accounting and IT services to the Medical Facility. These processors are obliged to meet the requirements of the Medical Facility to comply with the purpose of processing and technical and organizational security of personal data protection. By handing over personal data to other processors, a healthcare facility does not relieve itself of responsibility for the processing of personal data. If you are not satisfied with the way your data is processed, you have the opportunity to contact us with your objections.
Personal data is not transferred abroad.
How long we use the data:
Your personal data is stored for the necessary period in accordance with legal regulations, i.e. in particular in accordance with Act No. 372/2011 Coll., on health services and Decree No. 98/2012 Coll., on medical documentation, as well as the File and shredding order.
Personal data are part of the medical documentation. Handling of this documentation is regulated in § 53–69 of Act No. 372/2011 Coll., on health services and Decree No. 98/2012 Coll.,
about medical documentation.
How we protect your personal data:
The medical facility ensures the organizational and technical protection of personal data, in such a way that there can be no unauthorized or accidental access to personal data, their alteration, destruction, loss, unauthorized transmission, or unauthorized processing or misuse.
The protection of personal data is our priority concern.
Your rights in relation to personal data are:
You have the right to be informed about the possibility to exercise your rights against us. If you exercise these rights against the Healthcare Facility, the Healthcare Facility is obliged to exercise your rights.
The rights of data subjects are as follows:
the right to withdraw consent to the processing of personal data in the event that we process your personal data based on your consent, you have the right to withdraw your consent to the processing of your personal data at any time. You can withdraw your consent in whole or in part in the relationship
to only some of your personal data or only some processing purposes,
-
the right to access personal data, in particular to information:
-
the purpose of the processing,
-
categories of personal data concerned,
-
beneficiary or category of beneficiaries,
-
processing time storage of personal data,
-
available information about the source of personal data,
-
the fact whether automated decision-making takes place, including profiling.
-
-
the right to repair,
-
the right to restrict processing can only be exercised if it does not conflict with any legal reason on the basis of which we are processing them,
-
you have the right to object to the processing of your personal data based on your legitimate interest. In the event of this objection, we will not process your personal data further, unless we demonstrate serious legitimate reasons for such processing that would prevail over your interests or rights and freedoms, or it would be necessary for the determination, exercise or defense of legal claims,
-
the right to erasure is limited by Act No. 372/2011 Coll., on health services. Personal data may not be deleted, or they can only be partially deleted, even though you exercise the right to delete them as a patient,
-
you can request the right to data portability from us if you want us to transfer your personal data (which you have provided to us yourself) to another controller. However, this is only if the processing of your personal data is based on your consent or on the fulfilment of a contract between us and your person and at the same time our Medical Facility processes them automatically (i.e. not manually),
-
the right to file a complaint with ÚOOÚ (Office for the Protection of Personal Data in the Czech Republic).
How you can exercise your rights:
You can exercise your rights in relation to personal data via our contact details. All information and actions will be provided to you without undue delay.
We will do our best to protect your personal data. However, if you are not satisfied with the processing, you have the right to contact the relevant authorities, in particular the Office for the
Protection of Personal Data (www.uoou.cz), which supervises the protection of personal data.
This provision does not affect your right to contact the Office for Personal Data Protection directly with your request.
Contact
DOCK in Five
Menclova 2538/2, 180 00
Praha 8 – Libeň
Monday - Thursday
7:00 - 19:00
Friday
7:00 - 17:00
