Data Controller

The controller of personal data is Garik & son s.r.o., Company ID No.: 06318410, with its registered office at Pod bateriemi 82/7, 162 00 Prague 6, Czech Republic, acting as a provider of healthcare services (hereinafter referred to as the “Controller” or the “Company”).

The Controller processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”), applicable Czech data protection legislation and other relevant legal regulations.

Personal Data We Process

The scope of the personal data processed depends on whether you use our healthcare services, communicate with the Company, visit our website or subscribe to the Appointment Reminder service.

Patient Data

• Name, surname, title, date of birth and, where applicable, personal identification number
• Permanent or temporary residential address
• Contact details, in particular telephone number and email address
• Health-insurance information and data required for billing services
• Data contained in medical records
• Information concerning health condition, medical history, treatment, allergies, medication and other facts necessary for the provision of healthcare
• Photographic and visual documentation where created in connection with treatment and maintained as part of medical records

Website Visitor and Enquirer Data

• Name and contact details submitted through a contact or appointment form
• The content of a message or request sent by email or through a form
• Technical information relating to the use of the website, where processed through cookies or similar technologies

Purposes and Legal Bases for Processing

We process personal data only to the extent necessary for a specific purpose and on the basis of an appropriate legal ground.

Provision of Healthcare Services

We process data in particular for the purpose of providing healthcare services, maintaining medical records, arranging appointments, communicating about health conditions, ensuring continuity of care, and protecting the life and health of patients.

The legal bases include, in particular, compliance with the Controller’s legal obligations, performance of a contract for the provision of healthcare services, and processing necessary for the provision of health or social care under Articles 6 and 9 of the GDPR.

Accounting, Tax Matters and Legal Claims

We process personal data for issuing documents, processing payments, accounting, fulfilling tax obligations, protecting legal claims, and handling complaints or disputes.

Communication and Appointments

We use contact details to respond to your enquiries, arrange, confirm or change appointments, and communicate with you in other matters related to the provision of healthcare services.

Marketing

Newsletters, offers and other marketing communications are sent only where there is a valid legal basis, in particular your voluntary consent. You may withdraw your consent at any time; this does not affect the lawfulness of processing carried out before the withdrawal.

Recipients of Personal Data

Personal data are accessible only to authorised persons who need them to fulfil their employment or contractual duties. Such persons are bound by confidentiality obligations and are informed about the rules governing personal data protection.

Where necessary, personal data may also be processed by our contracted processors, such as providers of information systems, web hosting, email services, accounting services, technical support or secure appointment-management systems. These processors act only on the Controller’s instructions and under agreements concluded in accordance with the GDPR.

Personal data may also be disclosed to public authorities, health insurance companies, authorised healthcare professionals and other entities where required by law or necessary for the provision of healthcare services.

Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which they were collected and for the period required by applicable legal regulations.

• Medical records are retained for the period prescribed by legal rules governing the maintenance and storage of medical documentation
• Accounting and tax documents are retained for the period required by accounting and tax legislation
• Data submitted through contact and appointment forms are retained for the time needed to handle the request and protect related legal claims
• Data processed on the basis of consent are retained until consent is withdrawn, unless legislation requires otherwise
• Appointment Reminder service data are deleted after the user unsubscribes, unless further retention is necessary for another legal reason

Your Rights

Subject to the conditions set out in the GDPR, you may exercise the following rights in relation to your personal data:

• The right of access to personal data
• The right to rectification of inaccurate or incomplete personal data
• The right to erasure of personal data where the legal conditions are met
• The right to restriction of processing
• The right to data portability in cases specified by the GDPR
• The right to object to processing based on legitimate interests
• The right to withdraw consent at any time where processing is based on consent

In specific cases, some rights may be limited where processing is necessary to comply with a legal obligation, maintain medical records, provide healthcare services, or protect the rights and freedoms of others.

You may submit questions or requests concerning your personal data to: info@sgdentalnicentrum.cz .

If you believe that the processing of your personal data breaches applicable legislation, you have the right to lodge a complaint with the Office for Personal Data Protection.

Website, Forms and Cookies

When you use our website, technical data may be processed, such as IP address, device type, browser type, visit data and information stored through cookies or similar technologies.

We use strictly necessary cookies to ensure the proper functioning of the website. Analytical, preference or marketing cookies are used only in accordance with your settings and applicable legal requirements. You may change your cookie settings through your browser or via the cookie banner, where displayed on the website.

If you send us a message by email or using a website form, we process the data you provide solely to handle your request and communicate with you about it.

Appointment Reminder Service

To provide this service, we process the email address, selected reminder types, configured intervals, activation status and technical data necessary for the operation of the service. Providing these data is voluntary, and use of the service is not a condition for receiving healthcare services from the Company.

The service is activated by confirming a link sent to the provided email address. This procedure protects users against activation by another person without their knowledge.

The user may cancel the service at any time using the unsubscribe link included in every email, or may adjust the service through the “Change settings” link. After unsubscription, the service data will be deleted unless further retention is required by law.

Operational emails, such as activation emails and appointment reminders, are sent as part of a service requested by the user. Marketing newsletters and offers are separate and entirely voluntary.

Final Provisions

The Controller implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, destruction or misuse.

This Privacy Policy may be updated from time to time, particularly in response to changes in legal requirements, the way services are provided or the technologies used. The current version is always published on this website.