Information on data protection
Dear Sirs,
The security and confidentiality of your data is a priority for us. We assure you that we have always made and will continue to make every effort to ensure the protection of your data by applying appropriate technical and organisational safeguards, including the application of adequate protection when designing new services and solutions. These Terms and Conditions serve to inform customers and interested parties of the purpose, scope and categories of processing of their personal data, the duration of data processing and their rights, in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (referred to as RODO/GDPR).
Data Controller and Data Protection Officer
The administrator of your data is the Promedica Dental and Practical Centre with its registered office at ul. Piłsudskiego 99; 42-500 Będzin
As Data Controller, we are responsible for ensuring the security of your personal data, how it is used in accordance with current legislation. For any additional information, you can contact the Data Protection Officer at dentistry@pro-medica.com.pl or by post to the address given as the company's registered address.
Data security
In order to guarantee the security of your data, we have carried out a Processing Impact Assessment taking into account the risks associated with the processing of personal data and a risk analysis of the safeguards we apply. We currently use high-level, proven preventive safeguards and mechanisms to monitor the ways in which information held is processed, flows and accessed, so that we can ensure that data processing is carried out not only in accordance with the law but also in accordance with best practices in the field of data security and IT systems.
At present, your data remaining in our records are not transferred outside the European Economic Area (EU). Should such a transfer occur, we will inform you immediately and post information about this on our website, including these Terms and Conditions.
Categories of personal data collected
Currently, in connection with our business, we inform you that we process (or may process) your personal data in the following processes:
- Personal data of our patients
We process this data in order to provide all our services, meet our preventive health objectives
and treatment to the highest possible standard, on the basis of and within the scope of the law, in particular the Act on Medical Activity and on Patients' Rights and Patients' Ombudsman.
We will process all information relating to specific individuals or customers for the period required
in the legislation, currently ranging from ten to thirty years.
Your personal data held by us in this area may be passed on to other entities cooperating with us for the sole purpose of carrying out specialised research, on terms that give full assurance of the security of the information provided.
- Personal data of persons authorised to access our patients' information and medical records
We hold this data in order to properly and securely inform people about the health of our patients. The processing of this data is carried out on the basis of the law, in particular the Patients' Rights and Patients' Ombudsman Act, and only with the consent of the patients (data owners).
We will process all information relating to specific individuals or customers for the period required
in the legislation, currently ranging from ten to thirty years.
Your personal data held by us in this area will not be passed on to any other recipients.
- Personal data of our subcontractors and persons nominated for cooperation.
We process this data in order to be able to provide our services, to carry out public requests of death
in accordance with applicable legislation and proper cooperation with subcontractors.
We will process all information relating to specific individuals or customers for the duration of the contract and five years after its expiry, but no longer than required by law (if applicable).
Your personal data held by us in this area will not be passed on to any other recipients.
- Counterparty information
We process this data in order to comply with legal obligations such as the Accounting Act
and it is these provisions that form the basis for our processing of data for a period of six years (in accordance with the
with the current state of the law five full years).
Your personal data held by us in this area will not be passed on to any other recipients.
- Information on our employees and job applicants
We process this data in order to comply with legal obligations such as the Labour Code Act, for example, and it is these provisions that form the basis for our processing for the period required by law.
We hold data on job applicants thanks to their consent and process it for the duration of the recruitment process. However, where you give your consent for the purposes of future recruitment we may retain it for a period of one year.
Your personal data held by us in this area will not be passed on to any other recipients.
- Other data entrusted to us for the purpose of implementing cooperation agreements
We also hold other personal data for which the Cabinets are not the Data Controller, but as subcontractors of other medical entities we carry out various orders and examinations for them.
- Why and how do we use cookies?
- To analyse the effectiveness of our advertising and content activities, we track cookies as follows:
- Google Analytics, Google, YouTube - we track user information in accordance with Google's privacy policy: https://www.google.com/intl/pl_pl/policies/technologies/cookies/
- Using Google Analytics software, the website places a counting code on the user's computer to collect data about users. We inform you that the data is tracked under an agreement with GOOGLE Inc. For this purpose, we use a mechanism to anonymise the user's IP number. You can object to the collection of data by the Google Analytics software or by changing your browser settings at any time.
- Data is also used for purposes such as demographic reports, remarketing/retargeting and tracking activity on the site: page scrolling, copying page elements, activity times and individual page editing events. .
- We embed video elements made available from YouTube into the pages of our website. To this end, code referring to YouTube is placed in the relevant sections and pages. YouTube tracks the playback of video clips, and this tracking is done in accordance with its privacy policy, which is available https://support.google.com/youtube/answer/171780?hl=pl
As a processor, we only process personal data acquired through the performance of a contract for the duration of our contracts and strictly in accordance with the terms described therein.
In each of the cases mentioned, we endeavour to keep the data we hold up to date and entrained, and, bearing in mind your privacy, we minimise all information that constitutes personal data to the extent that we are able to process it correctly.
A list of recipients to whom personal data may be entrusted or shared is available at the company's head office. It is possible to inspect this list upon written request.
Rights of persons with regard to personal data
At every stage of our data processing, you have the right to:
- access to your data, including obtaining information about the extent of the data we process and obtaining a copy of that data,
- to modify and correct their data, including if there are no other legal contraindications to limit their processing;
- the complete deletion of your data ("right to be forgotten"), unless there are other legal contraindications,
- not to be subject to automated decisions based on profiling;
- object to inappropriate processing of personal data (including withdrawal of consent);
- to transfer the data to another Data Controller, if the data are processed in connection with a consent given or a contract concluded.
In order to ensure that your requests are handled correctly and with due care, we have standardised a form which you can use to request the exercise of your rights. You can download the request directly from the regulations page, the link to the document is at the bottom of the page. We encourage you to read the instructions for filling in the application. The correct completion of the application will enable us to process your request quickly. Completed applications may be submitted in person or by post to the address of our registered office or by e-mail to: dentistry@pro-medica.com.pl by sending an electronically signed application or a scan of a manually signed document.
Each request submitted by you is considered individually and in relation to the applicable legal provisions. We would like to remind you that the possibility of exercising a particular right may depend on the legal basis used for the specific purpose of processing your data and, for example, whether the processing is not dependent on the performance of a contract or service. Your requests will be processed without undue delay and within a maximum of one month of receipt, however, it is possible that due to the nature of the request we may not be able to meet this deadline, in which case you will be notified of the delay and the reasons for it. Similarly, if such circumstances arise, we will inform you of the reasons for refusal to accept and implement your request.
Please be advised that the first request is free of charge, however, in the event that your requests would be unfounded or excessive we reserve the right to charge a fee for the information to be provided again.
You will be informed immediately of the amount of the fee, or any other reason for which we are unable to process your request. In addition, in order to guarantee the security of the information provided, in the event that we are unable to correctly identify you as the person authorised to receive the data, we reserve the right to change the manner in which the information is provided, of which you will be informed.
If the right to data portability is exercised, the Data Controller will make a direct transfer of the data to another Data Controller if technically possible. The person requesting the exercise of this right will be informed of the decision on the possibility of transfer.
Additional information
This Policy is valid from 25 May 2018. until further notice and implements the legal obligation under Articles 13 - 14 of the DPA. We reserve the right to amend this Policy, always with the aim of improving the quality of our services and respecting your rights and privacy.
Information on the right to lodge a complaint with a supervisory authority
Authorised persons have the right to lodge a complaint with a supervisory authority:
Office of the Inspector General for the Protection of Personal Data
- Stawki 2
00-193 Warsaw
tel. 22 531 03 00; fax. 22 531 03 01
Office hours: 8.00 - 16.00
