Personal Data Protection

I. Data Controller

II. Purpose(s) of processing personal data

We process your personal data for the purpose of:

• provision of healthcare services reporting of reimbursed healthcare services
• billing of unpaid healthcare services
• communicating health information to you and other authorized persons
• organization of healthcare services (patient scheduling)
• keeping records of income and expenses, received payments, and management

III. Legal Basis for Processing

• fulfillment of our legal obligation (especially Act No. 372/2011 Coll., Act No. 48/1997 Coll., Act No. 563/1991 Coll., etc.)
• fulfillment of obligations under the health care contract

IV. Recipients of Personal Data

Recipients may include healthcare providers, public authorities, and persons authorized to access medical records. We do not transfer your personal data abroad.

V. Duration of Personal Data Processing

Personal data in medical documentation are processed for the period specified by Decree No. 98/2012 Coll. Other data are processed for the period stipulated by law or for one year after you cease to be our patient.

VI. Rights of the Data Subject

You have the following rights:

• right to request access to your personal data
• right to rectification
• right to restriction of processing
• right to erasure (does not apply to medical records)
• right to data portability
• right to lodge a complaint with the Office for Personal Data Protection (www.uoou.cz)