Privacy policy

Administrator data

The controller of the personal data processed for all purposes contained in the Privacy Policy is:

Centrum Medyczne KARDIOTEL Sp. z o.o.

16 Jana z Kolna Street

81-741 Sopot

tel. +48 58 550 46 73

biuro@kardiotel.pl

www.kardiotel.pl

www.blikpol.pl

Data Protection Officer

For all matters related to personal data protection at CM KARDIOTEL-BLIKPOL, you can contact the Data Protection Officer: biuro@kardiotel.pl.

Information on the processing of patients' personal data at CM Kardiotel-Blikpol

Purposes of personal data processing and legal basis for processing

Patients' personal data may be processed for the following purposes:

• Provision of health services and maintenance of medical records,
• Verification of eligibility for and billing of healthcare services provided,
• Communicate on matters related to the coordination of service provision, including but not limited to the organisation of service provision, assessment of patient wellbeing after service provision, patient satisfaction survey,
• Carrying out other support activities for the provision of health services, including providing the functionality of the online appointment service, as well as activities related to the maintenance of the ICT system, 

on the basis of the provisions of Article 6(1)(b) and (c) (applicable to patients who finance health care services individually), Article 6(1)(c) (applicable to patients whose health care services are financed on the basis of a contract concluded with the National Health Fund) and Article 9(2)(h) of the General Data Protection Regulation 2016/679 (RODO), Article 3 of the Act on Medical Activity and Article 24 of the Act on Patients' Rights and Patients' Ombudsman; and 

• Marketing purposes, receipt of commercial information, receipt of an electronic survey on the provision of feedback on the service provided, based on the patient's consent (Article 6(1)(a) of the General Data Protection Regulation 2016/679 (GDPR)).

The provision of personal data insofar as they are related to the conclusion of a contract for the provision of health services is voluntary and is a condition for the conclusion of the contract. The provision of personal data insofar as they are related to the provision of health services, including the keeping of medical records, is a statutory requirement and is necessary for the proper provision of health services.

The provision of personal data, insofar as it is related to marketing purposes, the receipt of commercial information, the receipt of an electronic survey on the provision of feedback, is voluntary.

Information on recipients of personal data

Personal data of CM KARDIOTEL-BLIKPOL patients may be transferred:

• to medical entities cooperating with CM KARDIOTEL-BLIKPOL in order to ensure continuity of treatment and availability of health services,
• providers of technical and organisational services that enable the provision of health services and the maintenance of medical records, in particular ICT service providers, suppliers and maintainers of medical equipment, courier and postal companies,
• persons authorised to obtain information on the state of health and on planned and provided health services and persons authorised to obtain medical records,
• to entities authorised by law,
• to providers of legal and advisory services and to support CM KARDIOTEL-BLIKPOL in the assertion of due claims or the defence of rights (in particular law firms and debt collection companies).

Transfer of personal data to third countries or international organisations

As CM KARDIOTEL-BLIKPOL uses subcontractors in the provision of its services, patients' personal data may be transferred outside the European Economic Area. CM KARDIOTEL-BLIKPOL shall ensure that, in such a case, the transfer of data will take place on the basis of an appropriate agreement between CM KARDIOTEL-BLIKPOL and the non-EEA entity or an agreement between the subcontractor and the non-EEA entity containing standard data protection clauses adopted by the European Commission or on the basis of a decision of the European Commission that the non-EEA country to which the data are transferred provides an adequate level of protection.

Period for which personal data will be kept

Patients' personal data, insofar as it relates to the conclusion of a contract for the provision of healthcare services, is kept for the period of limitation of possible claims.

Patients' personal data collected in medical records are kept for the legally required retention period for medical records.

Patients' rights in relation to the processing of personal data

Patients have the right to request access to their personal data, to rectify, erase or restrict its processing or to object to its processing and the right to data portability.

If the processing of personal data is based on the patient's consent, the patient has the right to withdraw consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent prior to its withdrawal.

The patient has the right to request the rectification, erasure or restriction of the processing of personal data and the right to object to the processing of data contained in the medical records insofar as it does not violate the Administrator's obligation to keep the medical records.

Web analytics

The Administrator monitors the quality of the services it provides, as it is committed to meeting Patients' expectations. To this end, statistics are kept on the use of the various functions of the Website using:

- internal analytical tools,
- statistical tools provided by partners providing analytical services.

In order to fulfil this purpose, data concerning the visitor's activity on the website are processed. The legal basis for the processing of the data is Article 6(1)(f) RODO, i.e. the Administrator's legitimate interest in facilitating the Customers' use of the services provided by the Administrator electronically and in improving the functionality of these services.

Cookies

The Administrator's websites use technology which stores and accesses information on the Visitor's computer or other device connected to the network in order to provide the Visitor with a maximum level of comfort when using the Website, including for statistical purposes. During the Visitor's visit to the Website, data on the visit may be automatically collected in the form of browser type, operating system type, IP address, Visitor ID, other information transmitted via the http protocol. In addition, the Administrator may process usage data or information about the location of the device used to access the Website. The cookies used on the Website are not harmful to the Visitor or to the computer/device used by the Visitor, so it is recommended not to disable them in browsers. The Website uses two types of cookies: session cookies, which remain stored on the Visitor's computer or mobile device for
the moment of logging off from the website or switching off the software (web browser) and permanent ones, which remain on the Visitor's device for the time specified in the parameters of the cookies or until they are manually deleted in the web browser.
Cookies allow the Administrator to ensure the proper functioning of the Site, to improve the speed and security of use of the Site and to use marketing tools.

It is possible to delete all cookies stored on your terminal device. You can accept or reject all future cookies in your browser settings, but please note that by disabling cookies, some of the content of the pages may become inaccessible. The links below provide information on how to control cookies in your browser:

- Internet Explorer: https://support.microsoft.com/pl-pl/help/17442/windows-internet-explorer-delete-managecookies
- Chrome: https://support.google.com/chrome/answer/95647?hl=en&p=cpn_cookies
- Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences?redirectlocale=en-
US&redirectslug=Enabling+and+disabling+cookies
- Safari:  https://support.apple.com/?path=Safari/5.0/en/9277.html

Profiling for marketing purposes, including on the Website and in social media

CM KARDIOTEL-BLIKPOL processes the personal data of users visiting the Administrator's profiles maintained in social media (e.g. Facebook) and on the website. This data is processed exclusively in connection with the running of the profile, including for the purpose of informing users about the Administrator's activities and promoting various events, services and products, as well as for the purpose of communicating with users through the functionalities available on social media. Please be informed that the Administrator uses tools based on customer profiling to personalise content and advertisements and to analyse website and internet traffic.

You can opt out of interest-based advertising by visiting the following websites:
https://adssettings.google.com/
http://www.networkadvertising.org/choices
http://www.youronlinechoices.com

Your data may be transferred to third countries (including the USA) in connection with: activities undertaken on social networks and the use of plug-ins and other tools from these networks (e.g. Facebook, Twitter);
the use of analytical and anonymised tracking tools, in particular such as Google Analytics and Google AdWords.

 

INFORMATION ON THE PROCESSING OF PERSONAL DATA OF APPLICANTS FOR EMPLOYMENT AT CM KARDIOTEL-BLIKPOL („APPLICANTS”)

Purposes of personal data processing and legal basis for processing

Candidates' personal data are processed for the purpose of conducting the recruitment process and establishing an employment relationship, on the basis of consent (Article 6(1)(a) of the General Data Protection Regulation 2016/679 (GDPR)).

The provision of personal data is voluntary but necessary for the purpose.

Information on recipients of personal data

Candidates' personal data may be transferred to entities authorised by law and to providers of technical and organisational services, in particular ICT services and to courier and postal companies, as well as to the basic occupational health unit.

Period for which personal data will be kept

Candidates' personal data are stored:

- until the end of the recruitment process for those who have given their consent to the processing of their personal data for the purposes of the recruitment process in question,

- for a period of 1 year counted from the last day of the year in which the candidate entrusted his/her data to CM KARDIOTEL-BLIKPOL, in the case of persons who agreed to the processing of their personal data for future recruitment processes.

Applicants' rights in relation to the processing of personal data

Candidates have the right to request access to their personal data, to rectify, erase or restrict its processing or to object to its processing and the right to data portability.

Applicants have the right to withdraw their consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal.

Information on the right to lodge a complaint with a supervisory authority

PATIENTS, PERSONS, CUSTOMERS, CONTRACTORS AND EMPLOYEES AND WORK CANDIDATES have the right to lodge a complaint with a supervisory authority:

President of the Office for the Protection of Personal Data (UODO)

2 Stawki Street

00-193 Warsaw

tel. 22 531 03 00

fax. 22 531 03 01

kancelaria@uodo.gov.pl

www.uodo.gov.pl

Office hours: 8.00 - 16.00

Hotline: 606-950-000