Regulations for the processing of personal data for Orto Med Sport Praktyka Lekarska Bartłomiej Kacprzak patients
- We hereby inform you that we process your personal data.
- The following entities are jointly the administrators of your data:
First Data Co-Controller: OMS sp. z.o.o sp. Komandytowa, ul. 28 Pułku Strzelców Kaniowskich 45, 90-640 Łódź
Second Data Co-Controller: Orto Med Sport Bartłomiej Kacprzak ul. 28 Pułku Strzelców Kaniowskich 45, 90-640 Łódź
- As part of a co-controlling agreement concluded between the co-controllers, we have agreed on the scope of our responsibility for the fulfilment of the obligations arising from the GDPR, and in particular:
- The First Data Co-Controller is responsible for the performance of information duties with respect to you, the exercise of your rights, the implementation of the data protection policy, the security of your personal data.
- We have established a common point of contact for you to contact for matters concerning the protection of your personal data – by e-mail to: email@example.com or by telephone: 882027354.
- We have appointed a Data Protection Officer whom you can contact by e-mail to: firstname.lastname@example.org. Your comments will be forwarded and considered by our Data Protection Officer.
- You have the following rights:
- to obtain confirmation of whether we process your personal data and, if so, to obtain access to your data, upon verification of your identity;
- to access and receive a copy of your data, upon verification of your identity;
- to a free-of-charge first copy of the processed data; the issue of subsequent copies is chargeable;
- to rectify (correct) your data;
- The Patient’s right to be forgotten shall not apply to personal data processed under Article 9(2)(h) of the GDPR, in particular to the processing of data as part of medical records throughout the required archiving period in accordance with Article 29(1) of the Act on Patient Rights in connection with Article 17(3)(b) of the GDPR;
- where data are processed on the basis of your consent, you may exercise your right to be forgotten to the extent of the purpose stated in that consent;
- the right to limit the processing of data shall not apply to your personal data processed for the purpose of providing medical services; in particular, as part of medical records, we may process data to the extent that it is already available, as this could significantly hinder the achievement of this objective;
- to withdraw your consent to the processing of your personal data; you can withdraw your consent to the processing of your personal data for marketing, educational, scientific, advertising purposes at any time, as long as you have given us such consent in writing. Withdrawal of consent will not affect the lawfulness of the processing we have carried out on the basis of your consent prior to withdrawal;
- to have access to medical documentation on the principles set out in Articles 26 and 27 of the Act of 6 November 2008 on Patient Rights and the Patient Ombudsman (consolidated text: Journal of Laws of 2016, item 186, as amended);
- to lodge a complaint with the supervisory authority; if you believe that we process your personal data unlawfully, you may lodge a complaint with the supervisory authority.
8. Identity verification is carried out by checking the identity document you present with at least a photo, first and last name, and PESEL (Personal Identification Number) or, if there is no PESEL, another number uniquely identifying the Patient. The document confirming the identity shall be, in particular, identity card, student ID card, driving license, passport. We may record information about the verification by entering in the documentation the following data: identity verification date; and identity verification document, with an indication of the document number/identifier (e.g. ID card number and series).
9. If a minor Patient is represented by a statutory representative, the Patient’s identity may also be confirmed by the statutory representative by means of a statement and presentation of the statutory representative’s identity card. We may record information about the verification date and the statutory representative’s verification document.
10. In order to exercise your rights, please send your request to the e-mail address or submit it by phone. Please note that prior to executing your request, we will need to make sure that the request definitely comes from you, i.e. we will need to identify you by asking for data that you alone know. If verification of your identity is not successful, we will need to ask you to personally visit our unit to confirm your request and identify you correctly; only then will your request be processed.
11. Providing your personal data is a statutory requirement resulting from § 1 and § 2 of the Regulation of the Minister of Health of 9 November 2015 on the types, scope and models of medical records and the manner of their processing (Journal of Laws, item 2069), and from Articles 25 and 24 of the Act of 6 November 2008 on Patient Rights and the Patient Ombudsman (uniform text: Journal of Laws of 2016, item 186, as amended).
If you do not provide personal data, we will not be able to provide you with medical services.
13. Written consent for processing of personal data for advertising, marketing, educational or scientific purposes is voluntary