We, Perfect Clinic, s.r.o., a company incorporated under Czech law, with registered office at Kartouzsk\u00e1 3274\/10, Sm\u00edchov, 150 00 Praha 5, ID 26865831, registered in the Commercial Register maintained by the Regional Court in Ostrava, Section C, Insert 50765 (and Perfect Clinic Dermatology a.s., Kartouzsk\u00e1 3274\/10, Sm\u00edchov, 150 00 Prague 5, ID No. 05139279, registered in the Commercial Register maintained by the Municipal Court in Prague, Section B, Insert 21587 (hereinafter referred to as the “Companies” or “our Companies”), we are a provider of health services within the meaning of Section 2(1) of Act No. 372\/2011 Coll. on Health Services (hereinafter referred to as the “Health Services Act”). As a provider of health services, we are aware of the importance of protecting the personal data of our patients and for this reason we have prepared this Information concerning all processing of your personal data in connection with the provision of health services (hereinafter referred to as “Information”). <\/p>\n
Our company processes the personal data of our patients in accordance with Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95\/46\/EC, effective from 25 April 2016. 5. 2018 (hereinafter referred to as “GDPR”) and other legal regulations governing the protection of personal data.<\/p>\n
Our company hereby informs you of the following contact details:<\/span><\/p>\n In connection with the provision of healthcare services, our company processes personal data about our patients as data subjects. In addition to the personal data of our patients, our company may, in justified cases, in particular in connection with its obligation to keep medical records, process personal data on the relatives of patients and on persons authorised to consult medical records in accordance with the relevant provisions of the Health Services Act. <\/p>\n Our company primarily obtains personal data directly from data subjects in direct connection with the provision of health services. Our company also obtains personal data from data subjects through orders and inquiries from data subjects, email communication, telephone communication, websites, contact form on our website, social networks, business cards, etc. We also obtain personal data from publicly accessible registers, lists and records (e.g. commercial register, trade register, land register, public telephone directory, etc.). <\/p>\n Our company also receives personal data from other health care providers, primarily in connection with the performance of pre-operative examinations at this provider or in cases of transfer of medical documentation in connection with a change of health care provider by the patient.<\/p>\n Personal data are processed to the extent that their processing is required by the relevant provisions governing the maintenance of medical records, in particular Section 53 et seq. of the Health Services Act and Sections 1, 2 and 3 of Decree No. In cases where the processing is not necessary for the fulfilment of a legal obligation of our company, personal data are processed to the extent that the data subject has provided them to us in connection with the conclusion of a contractual or other legal relationship with our company. <\/p>\n <\/p>\n 5.1<\/b> In order to properly provide healthcare services, our company processes personal data of data subjects in particular in connection with the performance of our legal obligations under the relevant regulations. These regulations govern, among other things, the maintenance of medical records and the issuing of prescriptions. We process the following categories of personal data about data subjects in particular in this respect:<\/span><\/p>\n We process the personal data of our clients primarily for the purposes related to the maintenance of medical records in accordance with the relevant provisions of the Health Services Act and the Decree and the issuance of prescriptions in accordance with Act No. 378\/2007 Coll. on Medicinal Products (hereinafter referred to as the “Medicinal Products Act”). The legal title of the processing in this case is Article 6(1)(c) GDPR. The processing of personal data is therefore necessary in particular for the following purposes: <\/p>\n The provision of your personal data for these purposes is therefore a legal requirement to ensure the appropriate level of our service provision. Your failure to provide the requested personal data may be sanctioned by applicable law. <\/p>\n For these purposes, we process personal data for the period of time specified in the relevant legislation. If you would like more detailed information, please contact us using the contact details above. <\/p>\n Our company is obliged to comply with the entire legal system of the Czech Republic. In addition to the above mentioned laws in the area of keeping medical records and issuing medical prescriptions, we are therefore also obliged to comply with regulations in the area of billing for our services and keeping accounting and tax records. In this case, Article 6(1)(c) GDPR is also the legal basis for processing. The provision of your personal data is again a legal requirement in these cases. Failure on your part to provide the requested personal data may be sanctioned by the relevant legal provisions. <\/p>\n Our company is also obliged to transfer your personal data to the relevant government authorities, either in compliance with a legal obligation or upon request. These authorities may include, for example, the tax office, the social security administration, public health insurance companies, the court or other authorities. In such cases, the transfer of personal data shall only take place under the regime established by the relevant legislation or decision of the authority concerned. <\/p>\n For these purposes, we process personal data for the period of time specified by the relevant legal regulation or decision of a public authority. If you would like more detailed information, please contact us using the contact details above. <\/p>\n 6.1 <\/b>In connection with the provision of our services, our company also processes the following personal data of our patients:<\/p>\n We process the personal data of our patients for purposes related to the performance of obligations under a contract for the provision of our services or in connection with the performance of the measures necessary to conclude such a contract. The lawful title of the processing in this case is Article 6(1)(b) GDPR. The processing of your personal data is therefore necessary in particular for the following purposes: <\/p>\n The provision of your personal data and their subsequent processing for these purposes is a prerequisite for the conclusion of a contract between you and our company. Failure to provide the required personal data on your part may result in the impossibility of the performance of the contract and therefore its nullity from the outset. <\/p>\n We process the personal data in question for the duration of the contractual relationship between you and our company. In justified cases, the period of processing of personal data may exceed the duration of the contractual relationship, in particular due to the assertion of legal claims of our company from already fulfilled contracts. Our company undertakes that the period of processing of personal data will never exceed the statutory limitation period in this case. <\/p>\n We also process the personal data of our patients for the purposes of our legitimate interests of disseminating commercial communications and direct marketing to our existing clients, as well as for purposes related to optimizing and improving the quality of the services we provide, as well as for the purposes of safeguarding and ensuring the protection of health and property. The lawful basis for processing in this case is Article 6(1)(f) GDPR. The processing of your personal data is therefore necessary in particular for these purposes: <\/p>\n The processing of the personal data in question for these purposes is based on our legitimate interests, except where those interests are overridden by the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data, in particular where the data subject is a child. If you have any doubts in relation to our legitimate interests, you have the right at any time to contact us to object to processing under the terms and in the manner set out in this Information. <\/p>\n We process the personal data in question for a reasonable period of time for the duration of our legitimate interest. Our company undertakes that the period of processing of personal data in this case will never exceed 3 years. <\/p>\n We process the personal data of our clients for purposes related to inquiries in our online counseling on our company’s website and to the marketing of our company. The legal basis for the processing in this case is Article 6 (1) (a) and Article 7 GDPR. The processing of your personal data is therefore necessary in particular for these purposes: <\/p>\n We process personal data for the above purposes until your consent is withdrawn, for a maximum period of 1 or 3 years after the consent is given, depending on the specific consent given. You acknowledge that personal data may remain on the physical media already printed and distributed after this period. <\/p>\n The processing of personal data of data subjects is carried out on the premises of our company by individual authorised employees of our company, or the processing of personal data of data subjects is carried out by our processors on their premises by individual authorised employees of the processor. The processing takes place both electronically, i.e. by means of computer technology, and in paper form, i.e. manually, in compliance with all security principles. All personal data provided to our company by data subjects are secured by standard procedures and technologies, however, it is not objectively possible to guarantee 100% security of the personal data of data subjects. In this context, our company regularly reviews the security measures, which are then updated as necessary. <\/p>\n In addition to employees and managers of our company, third parties may also be recipients of your personal data. Our company carefully chooses its business partners to whom it entrusts data subjects’ data and who are able to ensure that the technical and organisational security of data subjects’ personal data is such that unauthorised or accidental access to such data or other misuse of such data cannot occur. <\/p>\n In the context of legal relations with our business partners, they are bound by, among other things, confidentiality obligations and must not use the data provided for any purposes other than those for which we have made it available to them, and must also ensure other measures to secure the personal data of data subjects.<\/p>\n The third parties that may have access to the personal data of data subjects, depending on the nature of the service used or used by the data subjects, are:<\/p>\n Under certain well-defined conditions, our company is obliged to transfer certain personal data of data subjects on the basis of valid legal regulations, e.g. to the Police of the Czech Republic, the Financial Office, the Office for Personal Data Protection and other public administration authorities. <\/p>\n For the purpose of sending commercial communications, our company uses the services of the MailChimp platform. As part of the use of this service, we transfer your personal data abroad, specifically to the USA. The operator of the MailChimp platform, The Rocket Science Group LLC, located at 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, is a company certified under the European Commission’s EU-U.S. and Swiss-U.S. Privacy Shield Framework, which ensures a sufficient level of security for the transfer of your personal data to the United States. A current list of companies covered by this program is available on our website at www.privacyshield.gov. <\/p>\n With the exception of the use of this tool, our company does not intend to transfer the personal data of data subjects to a third country outside the EU. In the event that personal data of data subjects are transferred to third countries outside the EU, this will be done in accordance with the legal requirements and in any case the protection of the personal data of data subjects will be ensured. Our company undertakes to inform you immediately of any such transfer. <\/p>\n In connection with the processing of personal data, data subjects may exercise the following rights:<\/p>\n Our company will respond to the data subject’s requests concerning the exercise of their rights without undue delay within 30 days of receipt of the request. However, the time limit may be extended by a further 30 days if necessary. We will always inform the data subject of such an extension, including the reasons for it. <\/p>\n If you believe that our company is processing personal data in violation of your right to protection of your private or personal life, you can request an explanation from our company and the elimination of such situation.<\/p>\n You can exercise all your rights by contacting us using the contact details provided in this Information.<\/p>\n If you have any questions about data protection or withdraw your consent to further processing of your personal data, you can contact us at the contact details above or contact our data protection officer.<\/p>\n In this context, we would like to inform you that we may require you to provide us with appropriate proof of your identity in order to verify your identity. This is a precautionary security measure to prevent unauthorised persons from accessing your personal data. <\/p>\n This Information is effective from 25. 5. 2018.<\/p>\n","protected":false},"excerpt":{"rendered":" Information for patients on the protection and processing of personal data in connection with the provision of healthcare services We, Perfect Clinic, s.r.o., a company incorporated under Czech law, with registered office at Kartouzsk\u00e1 3274\/10, Sm\u00edchov, 150 00 Praha 5, ID 26865831, registered in the Commercial Register maintained by the Regional Court in Ostrava, Section C, Insert 50765 (and Perfect Clinic Dermatology a.s., Kartouzsk\u00e1 3274\/10, Sm\u00edchov, 150 00 Prague 5, ID No. 05139279, registered in the Commercial Register maintained by the Municipal Court in Prague, Section B, Insert 21587 (hereinafter referred […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":4128,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"simple-page.php","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"folder":[],"class_list":["post-4119","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"\n\n
\n2. Data subjects<\/b><\/h4>\n
\n3. Sources of personal data<\/b><\/h4>\n
\n4. Scope of processing of personal data<\/b><\/h4>\n5. Processing of personal data on the basis of the law<\/h4>\n
\nCommon categories of personal data:<\/span><\/strong><\/p>\n\n
\nSpecial categories of personal data: <\/strong><\/p>\n\n
\n5.2 Maintaining medical records and issuing prescriptions<\/b><\/p>\n\n
\n5.3 Compliance with other legal obligations<\/b><\/p>\n
\n6. Processing of personal data on the basis of other titles<\/b><\/h4>\n\n
\n6.2 Processing under a health care contract<\/b><\/p>\n\n
\n6.3 Legitimate interests of our company<\/b><\/p>\n\n
\n6.4 Your consent to the processing of personal data<\/b><\/p>\n\n
\n7. Method of processing and protection of personal data<\/b><\/h4>\n
\n8. Recipients of personal data<\/b><\/h4>\n\n
\n9. Transfer of personal data to third countries outside the EU<\/b><\/h4>\n
\n10. Rights of data subjects<\/b><\/h4>\n\n
\n11. Contact<\/b><\/h4>\n
\n12. Effectiveness<\/b><\/h4>\n