Privacy Policy

I. Personal Data Controller

Garik & son s.r.o., Pod bateriemi 82/7, 162 00 Prague 6
Email: info@sgdentalnicentrum.cz
Phone: +420721215831

II. Personal Data Processed

Title, first name, last name, date of birth, personal identification number, permanent or temporary residence address, health insurance company, telephone numbers, email address, data on overall health status, treatment, past illnesses, medications used, and addictions.

III. Purposes of Personal Data Processing

Personal data is processed for the following purposes: provision of health services, billing of covered and non-covered services, communication of information regarding health status, patient appointment scheduling, and maintenance of financial records in accordance with tax and accounting laws.

IV. Legal Basis for Personal Data Processing

The processing is based on statutory obligations (Act on Health Services No. 372/2011 Coll., Act on Public Health Insurance No. 48/1997 Coll., Accounting Act No. 563/1991 Coll., Income Tax Act No. 586/1992 Coll.) and contracts for the provision of health services.

V. Recipients of Personal Data

In order to ensure the above-described purposes, personal data may be processed, in addition to the controller, also by processors, based on personal data processing agreements concluded in accordance with the General Data Protection Regulation. Your personal data is not transferred abroad.

VI. Personal Data Retention Period

Your personal data will be processed for the duration of your consent, but no longer than one year after you cease to be our patient.

VII. Rights of the Data Subject

In connection with the processing of personal data, you have the following rights concerning the protection of your personal data:

  • The right to request from us access to your personal data;

  • The right to rectification of your personal data that we process;

  • The right to restriction of processing. Restriction of processing means that we must mark your personal data for which processing has been restricted and, for the duration of the restriction, we may not further process them except for storage. You have the right to restriction of processing when:

    • you contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data;

    • the processing is unlawful and you oppose the erasure of the personal data and request instead the restriction of their use;

    • we no longer need your personal data for the purposes of processing, but you require them for the establishment, exercise, or defense of legal claims.

  • The right to erasure of personal data. The right to erasure applies only to personal data referred to in Section III, processed on the basis of your consent for the purpose(s) set out in Section IV. However, we are not permitted to erase data that we maintain about you for the purpose of providing health services (e.g., in medical records);

  • The right to data portability. You may request that we provide your personal data to you for the purpose of transferring it to another personal data controller, or that we transfer it directly to another personal data controller. However, you have this right only with respect to data that we process by automated means on the basis of your consent or a contract with you;

  • The right to lodge a complaint with a supervisory authority if you believe that the processing of personal data violates personal data protection laws. You may lodge a complaint with the supervisory authority at your habitual place of residence, place of work, or place of the alleged infringement. In the Czech Republic, the supervisory authority is the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.

VIII. Right to Object to Processing

If your personal data is processed for the purpose of direct marketing (the purposes of processing are set out in Section IV), you have the right at any time to object to such processing. You may raise an objection at our address stated in Section I. If you raise such an objection, we will no longer process your personal data for direct marketing purposes.

IX. Consent to Personal Data Processing

I hereby confirm that I have read and understood the above information and I consent to the controller specified in Section I above processing my personal data as set out in Section III above for the purpose(s) stated in Section IV of this consent.

I am aware that this consent to data processing is voluntary and that I am entitled to revoke it at any time. Revocation of consent must be made in writing (in paper or electronic form) at the address given in Section I above.