PRIVACY POLICY

1. Personal data controller

 

1.1. Personal data controller Mgr. Eva Paglialonga Novotná, ID No. 603 60 411, with registered office at U Boží muky 1201, 665 01, Rosice, Czech Republic, (hereinafter referred to as the “Controller”), declares that all personal data processed by the Controller are strictly confidential. The controller handles them in accordance with national and European Union legislation applicable in the field of personal data protection.

1.2 The Controller collects, stores and uses your personal data within the meaning of Act No. 110/2019 Coll. on the processing of personal data (hereinafter referred to as the Personal Data Processing Act), or Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as the GDPR). The individual purposes for which the Controller processes personal data are defined below.

1.3 The controller also collects this personal data through its website at klinikacinskemedicinybrno.cz.

1.4 This policy is issued by the controller so that you are sufficiently informed about what personal data the controller processes about you, for what purpose, for how long, who will have access to your personal data and what your rights are. This policy applies to all personal data collected by the controller, whether collected for the purpose of fulfilling a contractual relationship, legal obligation, legitimate interest or consent.

 

2. Processed data

 

The controller is entitled to process the following personal data according to the purpose:

2.1. Performance of the contractual relationship

  • Meaning;
  • Categories of personal data: address and identification data;
  • Subject: Clients, business partners;
  • Recipient: Controller;

2.2 Sending commercial communications and offering products and services

  • Meaning: Sending commercial offers, by electronic mail (e-mail), by short text messages or by telephone call;
  • Categories of personal data: address and identification data;
  • Subject: Clients, business partners, site visitors;
  • Recipient: Controller, Ecomail;

2.3 Accounting and tax purposes

  • Meaning: accounting records within the meaning of accounting and tax legislation;
  • Categories of personal data: Address and identification data;
  • Subject: Clients, business partners;
  • Recipient: Administrator, accountant;

2.4 Statistical purposes

  • Meaning: anonymised determination of site traffic, monitoring of the number of page views, time spent on the site, type of device from which the site is accessed. We collect data to improve our services and offer relevant content to our clients;
  • Categories of personal data: information about IP address, proxy server, operating system, web browser and plug-ins, device identifier and features and/or internet or mobile service provider;
  • Subject: Site Visitors;
  • Recipient: Administrator, Google analytics;

2.5 Display of advertisements

  • Meaning: displaying ads on the site based on statistically determined customer preferences;
  • Categories of personal data: information about IP address, proxy server, operating system, web browser and plug-ins, device identifier and functions and/or internet or mobile service provider;
  • Subject: Site Visitors;
  • Recipient: Administrator;

2.6 Legitimate interest

  • Meaning: effective defence in the event of a dispute; the period of processing of personal data in such a case is 4 years from the expiry of the warranty period for the goods and is extended by the period for which the dispute is pending. We want to continuously improve our services and, where appropriate, provide new and better services; we want to avoid obstructing such activities; therefore, activities that contribute to this objective are our legitimate interest. Processing for fraud prevention purposes (e.g. assessing the risk of entering into a contract), direct marketing (e.g. offering relevant services to existing customers), transfer of personal data within the group of companies for internal administrative purposes, notification of criminal offences and transmission of personal data to the competent authority, ensuring network and information security are also legitimate interests. This list is only indicative;
  • Categories of personal data: address and identification data;
  • Subject: Clients, business partners, site visitors;
  • Recipient: Controller, competent authorities;

2.7 Compliance with other legal obligations

  • Meaning: provision of information to law enforcement authorities, provision of information to other public authorities, etc;
  • Categories of personal data: Address and identification data;
  • Subject: Clients, business partners, site visitors;
  • Recipient: Controller, competent authorities;

 

3. Personal data processed on the basis of consent

 

If we have obtained consent from you to process your personal data, it is for one of the following purposes:

 

3.1. the performance of a contractual relationship

3.2. sending commercial communications and offering products and services

3.3 Accounting and tax purposes

3.4. statistical purposes

3.5 Display of advertisements

3.6 Legitimate interest

3.7 Fulfilling other legal obligations

 

4. Rights of data subjects

 

As a data subject, you have the following rights under the law, which you can exercise at any time. These are:

4.1. the right of access to personal data, under which you have the right to obtain information from the controller about whether the controller processes your personal data. The controller is obliged to provide you with this information without undue delay. The content of the information is determined by Article 15 of the GDPR. The controller has the right to charge a reasonable fee for providing the information, not exceeding the costs necessary to provide the information;

4.2 The right to rectification or erasure of personal data, or restriction of processing, whereby you have the right to have personal data that is inaccurate or incorrect rectified. If your personal data is no longer necessary for the purposes for which it was collected or is being processed unlawfully, you have the right to request its erasure. If you do not want to request the erasure of personal data, but only to temporarily restrict its processing, you can request the restriction of processing;

4.3 The right to request an explanation if you suspect that the processing of personal data by the controller is in breach of the law;

4.4 The right to contact the Data Protection Authority if you have any doubts about compliance with the obligations relating to the processing of personal data;

4.5 The right to data portability, i.e. the right to obtain personal data relating to you that you have provided to the controller in a structured, commonly used and machine-readable format (Article 20 of the GDPR);

4.6 The right to object to the processing of personal data processed for the performance of a task carried out in the public interest or in the exercise of official authority or for the protection of the legitimate interests of the controller. The controller shall terminate the processing without undue delay unless it demonstrates that there is a legitimate interest/reason for the processing which overrides your interests, rights or freedoms;

4.7 The right to withdraw consent to the processing of personal data at any time if you have given your consent to the controller to process your personal data.

 

5. Cookies

 

The cookie policy is described in a separate document.

 

6. Transfer to third countries

 

Your personal data will not be transferred to third countries.

For more information, please contact us at evapaglialonga@gmail.com.

In Rosice on 1 February 2023.