The controller, MUDr. Vanda Řezníčková, with her registered office in: Prague 1, Nové Město, Palackého 720/5, Id. No.: 64560830, is a provider of health services in accordance with Act No. 372/2011 Sb., on health services, on the basis of a valid license to provide health services.
In connection with the provision of health care, we are obliged to collect personal data about you, the patient, to the extent necessary for the provision and reporting of health care, where the scope of the collected personal data results from the applicable legal regulations. In the case of patients having VIP or Premium membership on the basis of a contract for the provision of agreed services not covered by public health insurance, the legal basis for the processing of personal data, above and beyond the applicable legislation, is the performance of obligations under that contract. If we record your personal data in excess of the obligations imposed on us by a legal regulation or contract, we will always ask for your prior written consent.
We collect and use your personal data solely in connection with the provision of health care to you. We are also obliged to disclose your personal data when reporting covered health care and fulfilling other legal obligations, such as tax and accounting obligations and in the context of reporting to the registers of certain diseases stipulated by law. We only disclose your personal data to authorized entities and institutions where we are obliged to do so by a legal regulation. Persons who have access to your personal data are also obliged by law to protect your personal data and keep it confidential.
The data kept about you in the medical records contain, in particular, the facts necessary for the identification of your person, data on the examinations performed, or on the established diagnosis, treatment, prescribed medicinal products, or medical devices, the results of complex and control examinations, and possibly your informed consent or dissent with individual interventions and treatment.
We collect your personal data for the period of time required by legal regulations. In particular, reference can be made to Decree No. 98/2012 Sb., on medical documentation, which sets out the period of time for which it is necessary to store the patient’s medical documentation. In addition, reference can be made to the legal regulations in relation to accounting and tax obligations, which also define the archiving period for which documents proving the provision of health care must be archived. In cases of fulfilling a contractual obligation, for example, in cases of providing health care that is not covered by public health insurance, recording your contact details in the ordering system, etc., we collect this personal data for a period of one year from the time you stop receiving health care from our health care facility or until your consent is withdrawn.
Your rights in the provision of health services in relation to the collection of personal data
As a patient, you have the right to access your personal data. If you find that your personal data is incorrect or inaccurate, you have the right to request the correction of your personal data. You also have the right to have your personal data erased to the extent of voluntarily provided personal data, i.e. provided in the framework of fulfilling your contractual obligations. Conversely, you cannot request the deletion of personal data that a health service provider is obliged to collect on the basis of a legal obligation (an obligation imposed by a legal regulation), i.e. in connection with the provision of health services it provides to you.
As a patient, you can lodge a complaint with the supervisory authority if you believe that the processing of your personal data is in breach of data protection legislation. You can lodge the complaint with the supervisory authority, which for the territory of the Czech Republic is the Office for Personal Data Protection, with its registered office at Pplk. Sochora 27, 170 00 Prague 7 (www.uoou.cz).