General information about GDPR at Nemocnice Mariánské Lázně s.r.o.
provided on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and on the repeal of Directive 95/46/EC (General Data Protection Regulation , hereinafter referred to as the "Regulation").
This information serves to ensure that you are fully and transparently informed about the processing of your personal data (especially data about your health status) at the Mariánské Lázně Hospital s.r.o. (hereinafter referred to as the "Hospital"). The aim of this communication is to provide you with information about what personal data the hospital collects, for what purposes it is used and where you can obtain information about your personal data that the hospital processes.
The provision of your personal data for the purpose of providing health services by the hospital is a legal requirement arising from Act No. 372/2011 Coll., on health services and conditions of their provision (hereinafter referred to as the "Health Services Act"), and you, as a patient, are obliged to to provide the data, just as the hospital has an obligation to request this data from you. Failure to provide your personal data will mean that the hospital will not be able to provide you with health services and this may result in damage to your health or a direct threat to your life.
Contacts of the personal data administrator
Nemocnice Mariánské Lázně s.r.o.
U Nemocnice 91/3
353 01 Mariánské Lázně
Phone number: +420 354 474 222, e-mail: info@neml.cz
Contact the commissioner for personal data protection
What personal data does the hospital keep about you and for how long?
The hospital processes personal data and sensitive data in accordance with the Regulation and further in accordance with national legal regulations in the field of personal data protection.
We maintain a database of personal data and special categories of personal data of our patients and are administrators of such data:
– personal data and special categories of personal data that the hospital acquires and processes in connection with the provision of health services (medical documentation),
– personal data for unambiguous and unmistakable identification,
– personal data enabling the hospital to contact you,
– personal data related to mutual relations between the hospital and the patient.
Personal data is processed by the hospital in the case of fulfillment of legal obligations for the period specified by law; in the case of processing necessary for the fulfillment of the contract, for the time necessary to ensure mutual rights and obligations arising from the contract, i.e. always at least for the duration of the contract; in the case of processing based on the consent of the data subject for the period specified in the consent or until it is revoked.
After the end of the authorized processing period, the hospital stops processing your personal data and will ensure their disposal in accordance with the relevant legal regulations.
For what purposes and on the basis of which legal titles does the hospital process your personal data?
For the purposes of maintaining medical documentation and other purposes related to the provision of health care, health protection and related activities based on the fulfillment of the administrator's legal obligations as a medical facility pursuant to the Act on Health Services, as amended, Act No. 373/2011 Coll., on specific health services, as amended, and other valid legal regulations in the field of health care.
For the purposes of implementing a contractual relationship with the data subject in the provision of healthcare services, i.e. negotiating the conclusion of the contract or its amendment, mutual fulfillment of rights and obligations from the contract, and further protection of the administrator's rights and interests protected by law (in particular securing and enforcing legal claims from the contract).
For our internal needs, primarily to protect our rights and legitimate interests, especially to evaluate possible risks, to monitor the quality of services and to optimize the services provided. In the case of voluntarily provided consent, it is solely up to you to freely decide whether to provide your consent to the extent proposed by us. The hospital is bound by the scope of the consent provided. The given consent can be revoked at any time. If you withdraw your consent, the hospital is obliged to stop processing your personal data processed on the basis of the consent provided within a reasonable time that corresponds to the technical and administrative possibilities of the hospital. You can give the hospital your consent to the processing of personal data again.
To whom can or must the hospital provide your personal data?
Healthcare facilities, state organizations that enter the process of registration, treatment, control and contact with the patient, register (NZIS).
– NZIS is a unified nationwide public administration information system in which, on the basis of the Act on Health Services and its implementing regulations, personal and other data from health service providers and state entities are collected and processed.
The administrator of this data is ÚZIS CR. It does not provide personal data from the NZIS to any other entities, except in cases provided by law. To our processors who carry out partial or full processing of personal data for the hospital based on the relevant contract;
State authorities, respectively to public authorities in cases where the provision of personal data to the hospital is required by law - these are mainly state administration bodies, courts, law enforcement authorities, supervisory authorities, executors, notaries, insolvency administrators, etc.;
To other entities, if necessary to protect our rights, e.g.: insurance companies, courts, bailiffs, auctioneers; the scope of personal data provided is limited to the data absolutely necessary for the successful application of the claim; To other entities, with your consent.
What rights do you have in relation to the processing of personal data by the hospital?
You can request information about what personal data the hospital processes about you, as well as exercise the other rights listed below, at the address:
Mariánské Lázně Hospital s.r.o.
U Nemocnice 91/3, 353 01 Mariánské Lázně
or at the e-mail address:
gdpr@neml.eu
As a data subject, you are entitled to request information as to whether or not personal data relating to you is being processed by the hospital, and if so, you have the right to obtain access to this personal data and to information about:
– the purpose and processing of personal data,
– category of personal data concerned, recipient or category of recipients of personal data,
– the period for which your personal data will be stored,
– sources of personal data,
– facts about whether automated decision-making takes place, including profiling.
The hospital will provide you with the first copy of the processed personal data free of charge. For additional copies or in the event that the request is clearly unfounded or unreasonable, the hospital may request reimbursement of the costs associated with providing the information, e.g. postage.
If you have provided personal data to the hospital based on consent, you have the right to:
– to obtain personal data concerning you in a structured, commonly used and machine-readable format, and the right to transfer this data to another controller.
If you find out or if you believe that during the processing of your personal data the hospital violated your rights or violated the obligations set out in the Regulation or national legal regulations in the area of personal data protection, you can seek redress using all the means available to the data subject to do so valid legislation provides, in particular, you can ask the hospital for:
– correction or erasure (liquidation) of this personal data (except for the case where the processing is necessary to fulfill a legal obligation), or
– restriction (blocking) of processing.
The hospital will always and without unnecessary delay, in any case within one month of receiving the request, inform you about the processing of your request. You can contact the Office for the Protection of Personal Data directly with your suggestions. "PERSONAL DATA ACCESS REQUEST TO DOWNLOAD HERE"
Changing your personal data
For appropriate and correct processing, the hospital must be notified of any changes to your personal data that occur.
Where can you file a complaint about the processing of personal data?
If you have reservations about the processing of personal data at the hospital, you can contact the hospital as the administrator of your data. Furthermore, to the Commissioner for Personal Data Protection (gdpr@neml.eu) and you can file a complaint with the Office for Personal Data Protection.
Office for Personal Data Protection
headquarters Pplk. Sochora 27, 170 00 Praha 7, IČO: 70837627, Phone number: +420 234 665 111, web: https://www.uoou.cz