GDPR Information
ProfessMed GDPR Information.
When We Collect Data
Information Clause regarding the processing of personal data pursuant to Article 13 of the General Data Protection Regulation of April 27, 2016 (Official Journal of the EU L 119 of 05/04/2016) and the Act of May 10, 2018 on the Protection of Personal Data (Journal of Laws of 2018, item 1000). Personal Data Controller: The Personal Data Controller, i.e. the entity deciding how your personal data will be used, is ProfessMed Specjalistyczna Opieka Medyczna, ul. Tartaczna 2/15a, 80-839 Gdańsk, represented by the owners: Kamil Chwojnicki, Przemysław Okonowski, Marek Mostowski. Contact with the Owners: by mail at: ul. Tartaczna 2/15a, 80-839 Gdańsk, by email: kontakt@professmed.pl Data Protection Officer: In order to ensure the security of your personal data, a Data Protection Officer (DPO) has been appointed, whom you may contact regarding matters related to your personal data. You may contact the Data Protection Officer by sending an email to: iod@professmed.pl. Purposes of processing and legal basis for processing Your personal data will be processed for the purpose of: Providing medical services and carrying out medical activity, including the provision of healthcare services, in which case the legal basis for data processing is Article 6(1)(b) and (c), Article 9(2)(h) of the GDPR, as well as the relevant provisions of laws governing the healthcare sector, in particular: a) the Act on Patient Rights and the Patient Rights Ombudsman, b) the Act on Medical Activity, c) the Act on the Medical Profession. Retention period for your personal data Your personal data will be retained for the following period: We will use your data for the duration of the provision of healthcare services and for the period during which the provisions of the Act on Patient Rights and the Patient Rights Ombudsman require us to retain medical records. Depending on the type of documentation, this period may be as long as 30 years. Your data will be processed for the period during which claims related to this agreement may arise, for the limitation period established under specific legal provisions, and for an additional year in the event of claims submitted at the last moment and delivery issues, counted from the end of the year in which the agreement expired, in order to determine a single date for deleting data for agreements ending in a given year. Recipients of your data The recipients of your data will be: Subject to all security guarantees, your personal data may be disclosed to persons authorized by the Controller (e.g. doctors who are our employees and associates), other medical entities in order to ensure continuity of treatment and availability of healthcare services, public authorities and entities performing public tasks or acting on behalf of public authorities, to the extent and for the purposes resulting from legal provisions; providers of technical and organizational services enabling our facility to provide healthcare services (in particular providers of ICT services and suppliers of medical equipment), and other entities processing data on our behalf (e.g. medical laboratories). Rights related to the processing of personal data We guarantee the fulfillment of all your rights arising from the General Data Protection Regulation, namely: the right of access, rectification, and erasure of data, restriction of processing, the right to data portability, the right not to be subject to automated decision-making, including profiling, as well as the right to object to the processing of personal data. Obligation to provide data and consequences of failure to provide data The obligation to provide personal data arises from legal provisions. If data is not provided, we will not be able to fulfill our statutory obligation; if incomplete data is provided, you will be asked to complete it. Right to lodge a complaint with the President of the Personal Data Protection Office You have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office – if you believe that the processing of personal data violates the provisions of the General Regulation. Monitoring Monitoring data is collected and processed for the purpose of protecting facilities and property and ensuring safety on the premises of ProfessMed Specjalistyczna Opieka Medyczna in Gdańsk, in the building located at ul. Tartaczna 2/15a. Video monitoring is carried out on the basis of the Controller’s legitimate interest. The collected data is processed solely to the extent related to the implementation of the above purposes. The Controller does not disclose monitoring data to other recipients except entities authorized under legal provisions. The Controller does not intend to transfer monitoring data outside Poland or to international organizations. Monitoring data is stored for no longer than 3 months and is automatically overwritten. The collection of data through the monitoring system covers, at the Center’s premises (ul. Tartaczna 2/15a in Gdańsk), the reception area (video monitoring), the entrance door, the waiting room, and the corridor leading to the office rooms. A natural person may request from the Controller access to their data, rectification, updating, and also has the right to restrict the processing of data.
What data we may process
Depending on the matter, this may include identification and contact details, information necessary to schedule an appointment, and, in the case of patients, data required to provide medical services in accordance with applicable regulations.
How long we retain data
Okres przechowywania zależy od celu przetwarzania oraz obowiązków wynikających z prawa.