The administrator of your personal data processed to cover you with health care is REHAB Tomasz Zawadziński ul. Władysława Komara 13 83-000 Pruszcz Gdański, hereinafter: ‘the Administrator’ within the meaning of art. 4 clause 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC, hereinafter: ‘GDPR’ ”.
If you want to contact us in matters related to the processing of your personal data, you can do it via the correspondence address or by e-mail: email@example.com
INFORMATION OBLIGATION CLAUSE
The scope and purpose of personal data being processed
Your email address and telephone number, however, is not obligatory for you.
We keep medical records for you that contain all information about your health and services. This is necessary to make a diagnosis and guide your treatment process properly.
Your personal data is processed by the Administrator based on:
· Art. 6 clause 1 lit. b and c and art. 9 item 2 lit. h GDPR in connection from art. 25 point 1 of the Act on patients’ rights and § 10 para. 1 point 2 of the MZ Regulation as part of proper registration and provision of health services;
· Art. 9 item 2 lit. h GDPR in connection from art. 24 Your personal data is processed in order to cover you with health care as part of the services performed by a physiotherapist. Your personal data is processed in the following scope: names, surname, gender, date of birth, PESEL number (in the absence of it, the type and number of the document confirming identity), address of residence, in the case of a minor, also legal guardian’s data and your health status data and benefits provided to you. We can also process paragraph contact purposes. 1 of the Act on Patient Rights and the MZ Regulation as part of keeping your medical records;
· Art. 6 clause 1 lit. b and f RODO, as the administrator’s legitimate interest, which is contact, regarding the reminder of the visit, its postponement, and information on the results of the consultation.
· Art. 6 clause 1 lit. b, c and f RODO and in connection with with the Accounting Act of 29 September 1994, we have the right to process your data also for the purpose of pursuing any claims due to our business or defense against them as well as for tax purposes.
Profiling and transfer of data to third countries
Profiling is based on the fact that, based on the information collected about you, we are entitled to create preference profiles of our patients whose personal data is in our databases. Based on this, we adapt our services and messages targeted at you. Each time this action takes place with human intervention, not automatically. Remember that the possibility of not being subject to automatic decisions in this regard is your basic right that you can use at any time.
The administrator may use the services of external entities providing services necessary for the proper implementation of health services, and therefore your personal data may be transferred outside the European Union, e.g. in the case of IT software maintenance.
We ensure that the transmission of data will be properly secured, among others based on the relevant agreement containing standard clauses adopted by the European Commission.
Provides my personal data voluntarily or mandatory?
Providing personal data by you is completely voluntary, however, failure to provide it may result in refusing an appointment or even the health service itself. The administrator providing physiotherapeutic services is required to keep medical records in a manner prescribed by law, including to mark the patient’s identity using his personal data. Not providing a phone number and email address does not affect the provision of health services, although in many cases it significantly improves communication and the quality of services provided.
Time we process your personal data
Remember that if you use our services, your personal data will be processed by the administrator for at least 20 years from the date of entry in your medical records. In addition, this data may be processed by us for the purpose of pursuing claims for a period arising from the provisions of civil law and for tax reasons for 5 years counted from the end of the calendar year in which the tax obligation arose. After the abovementioned periods, your data is deleted or anonymized.
Information about your rights
The administrator provides you with the right to access your data, you can also correct it, request its removal or limit its processing. You can also use the right to object to the Administrator objecting to the processing of your data and the right to transfer data to another data administrator.
We would also like to inform you that you have the right to lodge a complaint to the body supervising compliance with personal data protection provisions, i.e. you can submit it to the President of the UODO by correspondence to the address below:
Office for Personal Data Protection
ul. Rates 2
00 – 193 Warsaw