Wheel
Dear Sir/Madam, in accordance with Article 13 of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the „GDPR”), we kindly inform you:
1. Personal Data Administrator:
The controller of your personal data is Centrum Medyczne Prof. J. Zieliński Spółka z ograniczoną odpowiedzialnością with its registered office in Gdańsk, at ul. Joachima Lelewela 6 lok.3, 80-442 Gdańsk, NIP: 9571170125, REGON: 527901821.
You can contact the Administrator:
- by telephone: +48 788 500 030, +48 788 500 060
- electronic mail: e-mail: kontakt@cmzielinski.pl,
- Centrum Medyczne Prof.J.Zieliński Sp. z o.o., ul. Joachima Lelewela 6 lok. 3, 80-442 Gdańsk.
2. Data Protection Officer
Centrum Medyczne Prof. J. Zieliński Ltd. (Administrator) appointed IData Protection Officer, Mr Mikołaj Burka, with whom you can contact regarding all matters concerning the processing of your personal data and the rights afforded to you under data protection regulations. You can contact the DPO:
- electronic mail: e-mail: kontakt@cmzielinski.pl,
- Registered Mail: Data Protection Officer Mikołaj Burka, Centrum Medyczne Prof. J. Zieliński Sp. z o.o. , ul. Joachima Lelewela 6 flat 3, 80-442 Gdańsk
3. Your personal data will be processed on the basis of:
- Article 9(2)(h) GDPR, for the purpose of providing you with health services, including:
- establishing your identity before providing health services, medical diagnosis and treatment, including medical record-keeping,
- ensuring healthcare and managing the provision of healthcare services, including handling patient complaints and requests,
- undertaking health prevention activities, including informing you about the possibility of using health services, providing social insurance, including issuing medical certificates and sick leave;
- Article 6(1)(c) GDPR, in order for the Administrator to fulfil his legal obligations, in particular those arising from the Act of 6 November 2008 on Patient Rights and the Patient Ombudsman, the Act of 15 April 2011 on Healthcare Activities, the Act of 25 June 1999 on cash benefits from social insurance in case of illness or maternity, the Act of 27 June 1997 on Occupational Medicine Service, the Act of 5 December 2008 on the Prevention and Control of Infections and Infectious Diseases in Humans, the Act of 2 March 2020 on special solutions related to the prevention, counteracting and combating of COVID-19, other infectious diseases and crisis situations caused by them;
- Article 6(1)(f) GDPR, i.e. based on the legitimate interest pursued by the Controller consisting in the defence of rights and pursuit of claims by the data controller in connection with the business activity conducted by him;
- Article 9(2)(c) GDPR, for the purpose of protecting your vital interests (in particular, the preservation of your health, life);
- Article 9(2)(j) GDPR, for archival, statistical and scientific purposes;
- Article 6(1)(a) GDPR, based on your consent to the processing of your data by the Administrator.
4. The recipients of your data will be:
As a Medical Entity, we care about the protection and confidentiality of your data. Due to the need to ensure proper organisation, we may share or entrust data:
- to medical professionals employed by or cooperating with the Prof. J. Zieliński Medical Centre Ltd.,
- healthcare providers collaborating with Prof. J. Zieliński Medical Centre Ltd., to ensure continuity of treatment and availability of health services,
- to technical and organisational service providers for the Prof. J. Zieliński Sp. z o.o. Medical Centre, which enable the provision of healthcare services, e.g. technical support for IT systems and medical equipment.,
- by entities keeping medical registers based on applicable legal provisions,
- to data processors on our behalf,
- to public authorities or entities entitled to obtain data under applicable legal regulations, e.g. the National Health Fund (NFZ), Social Insurance Institution (ZUS), courts, law enforcement agencies or state institutions, when they make a request based on appropriate legal grounds.
5. The Administrator shall not transfer your personal data to a third country or an international organisation.
Your personal data will not be used for purposes other than those for which they were originally collected.
7. Data Retention Period:
Your personal data, in accordance with the Act of 6 November 2008 on Patients' Rights and the Patients' Ombudsman, will be stored:
- for a period of 20 years, commencing from the end of the calendar year in which the last entry was made in the medical records;
- in the event of the patient's death as a result of bodily injury or poisoning, for a period of 30 years, from the end of the calendar year in which the death occurred,
- in the case of medical documentation containing data necessary for monitoring blood and its components, for a period of 30 years, counting from the end of the calendar year in which the last entry was made,
- For X-ray images stored outside your medical records, for a period of 10 years, starting from the end of the calendar year in which the image was taken,
- in case of referrals for examinations or doctor's orders, for the period:
a). 5 years from the end of the calendar year in which you received the health service that is the subject of the referral or doctor's order, or
b). 2 years, counting from the end of the calendar year in which the referral was issued – if the health service was not provided due to you not reporting on the agreed date, unless you have collected the referral; - in the case of medical documentation concerning children up to the age of 2, for a period of 22 years;
- Your data, processed based on your consent to the processing of personal data, will be processed until you withdraw your consent to their processing, submit a request for data deletion, or object to the processing of your data.;
- Data for the investigation of claims will be processed for the period of limitation of these claims in accordance with the Civil Code regulations.;
8. Rights of data subjects:
You have the right:
- access to your data;
- for the correction or completion of your data;
- for the deletion of personal data, where the data processing is not for the purpose of fulfilling a legal obligation or in the exercise of public authority;
- to restrict or object to the processing of data, provided that separate regulations may exclude the possibility of exercising this right;
- to lodge a complaint with the President of the Personal Data Protection Office (at the address: Urząd Ochrony Danych Osobowych, ul. Moniuszki 1A, 00-014 Warszawa).
9. Providing personal data by you is a statutory requirement and is essential for the provision of health services.
This requirement arises in particular from the Act of 6 November 2008 on Patient Rights and the Patient Ombudsman and the Act of 15 April 2011 on Medical Activity.
However, providing data processed on the basis of your consent is voluntary.
