Search
/ GDPR

GDPR


The purpose of this information is to provide you, as a data subject, with information about what personal data the company collects, for what purposes the company uses it, and where you can obtain information about your personal data that the company processes.

1. WHAT PERSONAL DATA DO WE PROCESS AND FOR HOW LONG?

NH Hospital a.s. - gynaecological outpatient clinic with premises in Prague 2 (hereinafter referred to as NH GA) processes personal data and sensitive data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, as well as in accordance with national data protection legislation.

We maintain a database of our patients' personal and sensitive data and are the data controller of this data:

NH GA processes personal data in the case of compliance with legal obligations for the period of time specified by law; in the case of processing necessary for the performance of a contract, for the period of time necessary to ensure mutual rights and obligations under the contract, i.e. always for at least the duration of the contract; in the case of processing based on the consent of the data subject for the period of time specified in the consent or until its revocation. After the end of the period of legitimate processing, NH GA will cease to process your personal data and will ensure its destruction in accordance with the relevant legislation.

2. FOR WHAT PURPOSES AND ON THE BASIS OF WHICH LEGAL TITLES DO WE PROCESS YOUR PERSONAL DATA?

For the purposes of maintaining medical records and other purposes related to the provision of health care, health protection and related activities based on the fulfilment of the legal obligations of the administrator as a health care facility pursuant to Act No. 372/2011 Coll., on health services and conditions of their provision, as amended, Act No. 373/2011 Coll., on specific health services, as amended, and other applicable health care legislation.

For the purposes of the implementation of the contractual relationship with the data subject in the provision of health services, i.e. negotiations on the conclusion of the contract or its amendment, the mutual performance of rights and obligations under the contract, as well as the protection of the rights and legally protected interests of the controller (in particular, securing and asserting legal claims under the contract).

For its internal use, primarily to protect our rights and legitimate interests, in particular to evaluate potential risks, to monitor the quality of services and to optimise the services provided.

For commercial and marketing purposes, i.e. in particular to offer additional services unrelated to the service provided, including the dissemination of commercial communications, pursuant to Act No. 480/2004 Coll., on certain information society services, as amended, on the basis of the voluntary consent to the processing of personal data.

In the case of voluntary consent, it is your free choice whether you provide your consent to the extent proposed by us. NH GA is bound by the extent of the consent provided. The consent given can be withdrawn at any time. If you withdraw your consent, NH GA is obliged to stop processing your personal data processed on the basis of the consent provided within a reasonable period of time that corresponds to the technical and administrative possibilities of NH GA. You may re-grant your consent to NH GA to process your personal data.

3. TO WHOM CAN OR MUST WE PROVIDE YOUR PERSONAL DATA?

To health care institutions, registries, government organizations that enter into the process of registration, treatment, control and patient contact;

To our processors who carry out partial or full processing of personal data for NH GA under a relevant contract;

State authorities or public authorities in cases where NH GA is obliged by law to provide personal data - in particular, state authorities, courts, law enforcement authorities, supervisory authorities, bailiffs, notaries, insolvency administrators, etc;

To other entities where necessary to protect our rights, e.g. insurance companies, courts, bailiffs, auctioneers; the scope of the personal data provided is limited to the data necessary for the successful assertion of a claim;

To other entities, with your consent.

4. WHAT RIGHTS DO YOU HAVE IN RELATION TO THE PROCESSING OF PERSONAL DATA?

You can request information about what personal data NH GA processes about you, as well as exercise the other rights listed below, at:

Gynaecological practice Rotta-Bednar Ltd.
Americká 579/17
120 00 Prague 2 - Vinohrady

or by e-mail: dpo@Multiscan.cz

Contact the Data Protection Officer:

Mgr. Petra Vlčková, MBA
Data Protection Officer (DPO)
+ 420 725 507 445
vlckova@Multiscan.cz
dpo@Multiscan.cz

As a data subject, you have the right to request information as to whether or not personal data concerning you is being processed by NH GA and, if so, to obtain access to that personal data and information about:

NH GA will provide you with an initial copy of the personal data processed free of charge. For further copies, or if the request is manifestly unfounded or unreasonable, NH GA may require payment of the costs associated with providing the information, such as postage costs.

Where you have provided personal data to NH GA on the basis of consent, you have the right to:
obtain the personal data you have provided in a structured, commonly used and machine-readable format and the right to transfer that data to another controller,
to have personal data transferred directly from one controller to another controller, where technically feasible.
If you become aware or believe that the processing of your personal data by NH GA has infringed your rights or violated the obligations set out in the Regulation or in national data protection legislation, you may seek redress using all the means available to the data subject under applicable law, in particular by asking NH GA to:

NH GA will always inform you without undue delay, in any case within one month of receipt of the request, about the processing of your request.

Application_GDPR.pdf

You can send your request to: dpo@Multiscan.cz

You can also contact the Data Protection Authority directly with your suggestions:

Data Protection Authority
Address: Pplk. Sochor 27, 170 00 Prague 7
Tel: 234 665 111, website: www.uoou.cz

5. CHANGES TO YOUR PERSONAL DATA

For proper and correct processing, you must notify NH GA of any changes to your personal data that occur.