DECLARATION OF BODY klinika plastické chirurgie s.r.o. ON PERSONAL DATA PROTECTION

INTRODUCTION AND SCOPE OF DECLARATION ON PERSONAL DATA PROTECTION

BODY klinika plastické chirurgie s.r.o. (hereinafter only the "Company" or "BODY klinika") emphasizes that the patients are satisfied with its services in all respects. As the provision of plastic surgery services encompasses, to great extent, the personal data processing including the personal data falling into the special category of the personal data on health status, we carefully and strictly observe all the safety measures when handling your personal data in accordance with the REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (EU), 2016/679 dated 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter only the "Regulation").
Below, we specify in detail the purpose and manner of handling the personal data to relieve you of any fear of misuse of personal data provided by you either via the internet pages or directly at our clinic in person.

PERSONAL DATA COLLECTED

The term "personal data" means all information concerning you and through which it is possible to identify you either by a single piece of information or together with other information we have available. BODY klinika collects, apart from general personal data, e.g. name, surname, telephone or e-mail, also the specific categories of personal data, namely details on the health status of its patients as needed and always, in accordance with the legal regulations.

SOURCES OF INFORMATION

Most of the information we process about you is personal data you provided to us voluntarily in the form of questionnaires and forms completed at our clinic or web pages.
Other sources of personal data include mainly our partners, i.e. the surgeons with whom we have a contractual relationship, e.g. based on a contract on the performance of a surgical intervention. A part of such a contract is also the information that your personal data will be handed over to BODY klinika in order to process them for the surgeon.
Quite frequently, we encounter personal data of third parties due to the nature of the services provided by us, i.e. services of a medical centre. These are the data provided to us by our patients about the persons who are to be informed of the patient´s health status.

PERSONAL DATA USE AND PROTECTION

We consider your personal data confidential and therefore we treat them with utmost care. We employ the proper technical and organizational safety measures to protect them against any unauthorized or unlawful treatment and involuntary loss, destruction or damage.
We use all the personal data in the necessary scope and solely for the stated purpose. Only a close circle of persons who need your personal data to perform their activities have access to them. These persons have been duly trained to handle the personal data in order to prevent confidentiality of your personal data and they always conduct themselves in accordance with the internal safety regulation that strictly determines the manner of handling the personal data.

PURPOSE OF PROCESSING

All the personal data we collect we gain in order to fulfil contractual obligations, fulfil obligations arising from the legal regulations, to protect legitimate interests of our company or based on the consent provided by you. We do not share the personal data with any third party without your expressive prior consent in writing.

PERSONAL DATA RETENTION

We keep the personal data for the time stipulated by the legal regulations and in accordance with the act on archiving. The archiving time differs according to the type of the personal data processed. Below, we state the information on the archiving time determined by law for the personal data which BODY klinika processes the most often. BODY klinika keeps the personal data for the time necessary for the specific purposes only:

• Personal data being the part of the medical documentation are kept in accordance with Decree No. 98/2012 Coll., on medical documentation, for the time for 15 years from the last provision of care in the case of an outpatient health intervention / 40 years from the last hospitalization in the case of hospitalization.
• Personal data which are not a part of the medical documentation are kept for 1 year from the termination of the purpose of the processing of personal data. After that time, we keep only those personal data which are necessary to protect legitimate interests of our company.
• Personal data provided for the purposes of sending advertising messages are kept for the time of validity of the consent to be sent these messages.
• Personal data which we enter into the book of records within the provision of housing services of our boarding house are kept for 6 years from the last entry in the book.

YOUR RIGHTS IN CONNECTION WITH THE PERSONAL DATA

During the processing of the personal data, we take care that all the principles arising from the Regulation are complied with and we process the personal data correctly and in a legal and transparent manner. We are candid concerning the fact what personal data we collect and we want to allow you exercising all your rights in respect of the personal data protection.
Right of Access
If we process your personal data due to any reason, you have the right of access to these personal data and the right to be informed about the purpose of the processing, categories of the personal data we process about you, about the planned time for which we would process the information and about the criteria to determine such a time, about the existence of the right to require from us rectification or erasure of your personal data or restriction of their processing and about the existence of the right to raise an objection against the processing, about the right to file a complaint at the supervisory authority and about the possible sources of personal data. Please use our contact details stated in the footing of this document to send a request for information. After we receive your request and sufficient details to verify your identity, we will provide you with the copy of the personal data we have available about you and to which you are entitled according to the Acts in force.

Right to Rectification

You have the right that we rectify your inaccurate personal data without undue delay and taking into account the purposes, you also have the right to have the incomplete personal data completed.

Right to Erasure

You have the right that we erase your personal data without undue delay which are not needed anymore for the purposes for which they were collected or processed in other way or if you withdraw the consent based on which we processed your personal data and there is no further reason to process them, if you raise objections against processing and there are no prevailing legitimate reasons for the processing, if we processed your personal data unlawfully or if the personal data must be deleted to fulfil a legal obligation stipulated in the EU law or in the law of the Czech Republic unless the processing is necessary for the legitimate purpose determined by the Regulation.

Right to Restriction of Processing 

You also have the right that we restrict the processing of your personal data if you deny the accuracy of personal data (in such a case, the processing may be limited until we verify the accuracy of your personal data), the processing is unlawful and you do not request deletion but only restriction of the processing, we do not need them anymore but you require them in order to determine, exercise or defend legal interests or if you raise the objection against the processing until it is verified whether our legitimate interests prevail your legitimate interests.

Right to Object

At any time, you have the right to raise an objection against the processing of personal data related to you which data we process due to the protection of our legitimate interests or for the purposes of direct marketing. If we fail to demonstrate our legitimate interests, we will stop processing your personal data. In the case of a raised objection against the processing of personal data within the direct marketing, we will stop processing your personal data without any further steps.

Request

At any time, you may write us a request to rectify certain personal data you concern incorrect or irrelevant or request for erasure or other removal of your personal data. We will consider your request and we will meet your request as needed in accordance with the legislation described above.

Right to File a Complaint at the Supervisory Authority

If you believe that your rights concerning the personal data protection were violated by us, you have the right to file a complaint to the supervisory authority, i.e. the Office for the Personal Data Protection determined in the Czech Republic pursuant to the Regulation, with registered office at Pplk. Sochora 27, 170 00 Praha 7, Company ID No. 70837627.

UNSUBSCRIPTION OF MARKETING MESSAGES

All our marketing messages contain an easy way to stop the sending of the future messages, e.g. link to unsubscribe.
If you want to unsubscribe the sending of the marketing messages, you may use the link in the message received or you may address us through the contact details specified below or through our Data Protection Officer.
Notification: If you decide to unsubscribe the marketing messages, we will stop processing your personal data for the purpose of direct marketing, however, if there is any other reason for the processing as described above, we will continue to process your personal data in the scope necessary for that purpose.

CONTACT DETAILS

In the case of any questions concerning how we use the personal data, how to exercise your rights or concerning the declaration on the personal data protection please refer to:

BODY klinika plastické chirurgie s.r.o.

with registered office at Údolní 8a, 602 00 Brno
represented by Executive Director, MUDr. Pavel Holuša
Company ID No.: 26893096
Taxpayer ID No.: CZ26893096
E-mail: info@bodyestet.cz
Tel.: 549 213 660, 604 525 035

Data Protection Officer

JUDr. Lada Štarhová, Attorney-at-Law, Reg. No. in the Czech Bar Association, ČAK 09203
with registered office at Řípská 18a, 627 00 Brno,
Company ID No.: 66250544,
E-mail: starhova@starhova.cz
Tel.: 606 900 009

Consent to the sending of commercial messages

By your consent, you grant your consent, in accordance with the REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (EU) 2016/679 dated 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the "General Data Protection Regulation"), to the processing of the provided e-mail address by BODY klinika plastické chirurgie s.r.o. to be included into the database and for other advertising and marketing purposes, i.e. namely offering products, services and to send commercial messages through electronic means pursuant to Act No. 480/2004 Coll., in force, and in accordance with the requirements of the General Data Protection Regulation for the time of 10 years or until withdrawal.

By your consent, you declare that you are entitled to grant this consent and you are aware of the impact of your conduct on the protection of your personal data.

Please take notice that you have the right:

• withdraw the consent at any time;
• require the information from us which of your personal data we process;
• require the explanation from us concerning the personal data processing;
• request the access to these data and have them updated or rectified;
• request from us the erasure of these personal data;
• in case of doubt about observance of the obligations related to the personal data processing, access us or the Personal Data Protection Office.

Should you have any questions concerning the scope or purpose of your personal data processing, please do not hesitate to contact us on telephone number +420 549 213 660 or by e-mail at info@bodyestet.cz at any time.

This consent is granted remotely through the web form.