We, MUDr. Radovan Pock and MUDr. Dita Pocková, Managing Directors of Prague Women's Health Center s.r.o. IČ: 27159191, with registered office at Kartouzská 6, 15000, Prague 5, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C 100795, as the controller of your personal data, hereby inform you about the manner and scope of processing of your personal data, including the scope of your rights related to the processing of your personal data by our clinic.
In our practice, we process personal data in accordance with European Union law, in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the "GDPR"), as well as in accordance with the relevant national legislation, which is in particular Act No. 101/2000 Coll, 372/2011 Coll., on health services and conditions of their provision, Act No. 48/1997 Coll., on public health insurance, Act No. 563/1991 Coll., on accounting, Act No. 586/1992 Coll., on income taxes, Act No. 634/1992 Coll., on consumer protection.
The legal basis for the processing of your personal data is the fulfilment of our legal obligation and the fulfilment of our obligations under the health care contract under which we provide you with health care services.
Purposes of the processing of personal data
We collect and process your personal data only for the stated purpose of providing health services, reporting covered health services, billing for non-covered health services, communicating health data to you and other authorized persons, and organizing the provision of health services (ordering patients), reporting any adverse drug reactions or adverse events within the scope of the applicable legislation, reporting to the registers of certain diseases provided for by law, keeping records of our income and expenses, payments received and management as required by the tax and accounting regulations.
Period of processing of personal data
We process your personal data contained in the medical records for the period of time specified by Decree No. 98/2012 Coll., on medical records. Personal data processed for other purposes are kept for the period specified by law or for as long as you are our patient (and subsequently for one year after you cease to be our patient) or until your consent is withdrawn.
Scope of processing of personal data
We process your personal data to the extent necessary for the provision of health services and the reporting of health care, and the scope of the personal data collected is based on the applicable legislation. If we record your personal data in excess of the obligations imposed on us by law, we will always seek your prior written consent.
The data kept about you in the medical records include your identification data, contact details, data on examinations carried out, diagnosis, treatment, prescribed medicines or medical devices, results of comprehensive and follow-up examinations, etc. Your informed consent or disagreement with the proposed treatment, a list of persons authorised to inspect your medical records or a prohibition on providing information to specified persons.
Recipients of personal data
In addition to you, the recipients of your personal data may be, in accordance with the provisions of the legislation, in specific cases: the provider of health services, public authorities and persons authorised to consult your medical records under the Act on Health Services and Conditions of their Provision.
In addition to the controller, personal data may also be processed by processors for the purposes described above on the basis of data processing contracts concluded in accordance with the General Data Protection Regulation. The persons who have the possibility to get acquainted with your personal data are also legally bound to data protection and confidentiality obligations. Your personal data is not transferred abroad.
You have the right to access your personal data. If you believe that your personal data is not kept correctly or is inaccurate, you have the right to ask us to correct your personal data.
You also have the right to have your personal data erased to the extent that you have voluntarily provided personal data, i.e. in the context of fulfilling contractual obligations. This is therefore not an absolute right, which would give you the possibility to request the erasure of your personal data at any time and in any situation. The right to erasure of personal data only applies to personal data that we process for purposes other than the provision of health services. We may not erase data that we hold about you for the purpose of providing health services (e.g. in medical records).
You have the right to restriction of processing where we must mark your personal data where processing has been restricted and we must not continue to process it except to store it for the duration of the restriction. You may request that we provide your personal data to us for the purpose of transferring it to another data controller or that we provide it to the data controller ourselves. This right only applies to data that we process by automated means, based on your consent or a contract with you. We may only disclose data we hold about you for the purpose of providing health services (e.g. in medical records) to you and, under lawful conditions, to another health service provider or public authority.
If we process your personal data for the purposes of our legitimate interests or those of a third party, you have the right to object to such processing at any time. You may raise any objections directly with the data controller, which is Radovan Pock, MD and Dita Pock, MD. If you object, we will not be able to further process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests or rights and freedoms, or where the processing is necessary for the establishment, exercise or defence of legal claims.
If you believe that the processing of your personal data is in breach of data protection law, you have the right to lodge a complaint with the supervisory authority of your place of residence, place of employment or the place where the alleged breach occurred. In the Czech Republic, the supervisory authority is the Office for Personal Data Protection (Pplk. Sochora 27, 170 00 Prague 7).
Providing your personal data is a legal requirement and you as a patient are obliged to provide them, just as we have the right to request them from you. Failure to provide your personal data will mean that we will not be able to provide you with health services and this may result in damage to your health or direct risk to your life.