Personal data controller (PDC):
FertiCare SE
Business ID No.: 013 86 620
With its registered seat at:
Clinic Praha: Radlická 3185/1c, Smíchov, 150 00 Praha 5
Clinic Karlovy Vary: Bělehradská 1042/14, 360 01 Karlovy Vary
Clinic Znojmo: MUDr. Jana Jánského 2675/11, Znojmo
Website: www.ferticare.eu
PDC contact: gdpr@ferticare.cz
(hereinafter the “Institution”)
| Personal data: Information concerning an identified or identifiable natural person |
| Data subject: Identified or identifiable natural person |
| Personal data controller: Natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data |
| Personal data processor: Natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller |
We are a private institution specialised in providing general as well as specific health care services (planned health care, diagnostic health care).
Personal data protection is of utmost importance to us, which is why we always proceed in accordance with legal regulations and the best practice of international standards. You will learn from the following paragraphs about our purposes and legal bases for processing your personal data.
In some cases, legal regulations stipulate our obligation to process your personal data. It concerns data processing namely for the following purposes:
In this case, your consent to the processing of personal data is not required in order to process your data.
Processing associated with our activities:
We process your personal data and, if necessary, also the personal data of other persons concerned on the above basis.
We are unable to offer or provide our services to you without processing such data. In this case, your consent to the processing of personal data is not required in order to process your data.
Another reason for the processing of personal data is the protection of your and our rights and interests as well as the interests of other persons. This reason includes the following operations:
It is possible to raise an objection against the processing based on legitimate interests. The objection shall be reviewed and the facts proving whether the given processing complies with the requirements of the regulations assessed. For more information about your rights, see the information provided below.
In this case, your consent to the processing of personal data is not required in order to process your data.
Processing of personal data in this case is stipulated by the Czech or EU legislation, has a specific legal basis and pursues a legitimate aim. It concerns the following activities:
We adhere to the principle of data minimisation and personal data pseudonymisation; we apply the principle of proportionality and necessity.
We adhere to the principle of data minimisation and personal data pseudonymisation; we apply the principle of proportionality and necessity.
In this case, your consent to the processing of personal data is not required in order to process your data.
If we have no legal basis for the processing of personal data (see above), we process your personal data with your consent.
With your consent, we may process your personal data for the following purposes:
The data subject’s consent shall be given by an unambiguous confirmation; consent shall mean any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her whether as a written, including electronic format, or oral declaration.
Provision of such consent shall be voluntary. The consent to the processing of personal data may be withdrawn at any time. Withdrawal of consent shall be without prejudice to the previous processing of personal data.
We process personal data that we need to perform our activities. This means all the data necessary for the provision of health care. Where necessary, we process personal data of other persons (family members, relatives, etc.).
When providing health care services and performing related activities we process the following categories of personal data:
Where do we collect your personal data from?
We collect personal data:
Personal data may be processed not only by the controller, its employees and its staff but also by contractual processors or other controllers involved in providing our services. These are namely the following categories of processors/controllers:
Category 1 Diagnostic laboratories
Category 2 Health insurance companies
Category 3 Private physicians (applicants for the provision of health care services)
Category 4 IT system administrators
Category 5 Processors of financial, payroll and tax operations
Category 6 State administration authorities – State Institute for Drug Control, Tax Office, Regional Social Security Administration, National Health Information System, Regional Hygiene Station, Police of the Czech Republic, etc.
Category 7 Commercial insurance companies
Category 8 Law offices
Category 9 Auditors, accreditation companies
Category 10 Other assisted reproduction centres
Category 11 Documentation processors
Category 12 Others
Category 13 Analytics and advertising systems (anonymized data)
Other categories of entities to whom data may be transferred
Other third parties (such as the Police and other public authorities) may gain access to personal data if they have a statutory reason to have access to such data.
Confidentiality
All persons cooperating with us and handling personal data when performing their labour or contractual obligations are bound by confidentiality and comply with sufficient standards safeguarding the security of your personal data.
When can we transfer data abroad?
Your personal data may be transferred to be processed within the EU and the EEA (e.g., other assisted reproduction centres, IT technology providers, or other recipients listed above). In accordance with the legal regulations, we are allowed to transfer personal data also to countries outside the EU/EEA but only in such cases when assurance of the relevant security measures and evidence of safeguards of the handling of such data in accordance with the relevant legal regulations are provided.
The processing shall be done in manual as well as automated regimes employing various applications and software.
For how long do we keep the data?
The personal data record-keeping and archiving period depends on several factors regarded the given specific situations in which the personal data are to be processed. Our Institution follows the guidelines from the Filing and Shredding Rules. After termination of the provision of care, the personal data are still processed
in order to protect our or your rights and interests, for the minimum necessary time period for their securing or execution. The time periods may vary on the basis of the type of personal data processing, or of the right the given data are relevant to. In case of some documents, we are obliged to retain the data contained therein for the time period stipulated by generally binding legal regulations (namely in the areas of accounting, tax and revenue, labour-law-related issues, archiving and filing services, in accordance with the regulation on health care documentation).
In case of the provision of consent, the data processing shall continue until the consent is revoked, unless otherwise directly stated in the consent. You may withdraw your consent at any time and thus terminate the processing of your data.
In regard to your personal data processing, you are entitled to exercise the following rights:
|
Right to information: |
|
Right of access: |
|
Right to rectification: |
|
Right to erasure (Right to be forgotten): |
|
Right to data portability: |
|
Right to object to processing: |
|
Right to withdrawal of consent: |
|
Right to restriction of processing: You are entitled to require restriction of processing of your data if any of the following applies: - You contest the accuracy of the data for a period enabling the controller to verify the accuracy of the personal data; - The data are not necessary for the purposes of the processing but you require their processing for the establishment, exercise or defence of legal claims; - You have objected to the processing pending verification of whether the legitimate grounds of the controller override your legitimate grounds; - The data processing was unlawful and you oppose the erasure of the personal data and request the restriction of their use instead. |
|
Automated individual decision-making: |
|
The right to bring proceedings before a supervisor, a court: |
How can you exercise your rights?
When you visit our website, cookie files are processed. Some of these files enable us to make the website function properly and to link your activities whilst browsing the web.
The collection of cookie files for such purpose may be considered as personal data processing. Such processing is possible on legal grounds – the legitimate interest of controllers as stipulated by Art. 6(1)(f) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (formerly and hereinafter the “Regulation”).
Use of the cookies of some providers can be deactivated directly at:
Cookies are stored for the time period stated hereinbelow for individual types of cookie files, to a maximum of 24 (twenty-four) months from their last usage.
The collected cookie files are processed by other processors:
The processors subsequently process the cookie files in accordance with their terms and conditions, which you can find at the following links:
