Privacy Policy
Privacy Policy and Use of Cookies in the EMC Group Websites
The purpose of this Privacy Policy is to explain the principles under which EMC Instytut Medyczny S.A., with the registered office in Wroclaw, collects, uses, and protects your personal data, as well as to present your rights in connection with the processing of personal data by EMC Instytut Medyczny S.A.
DATA CONTROLLER
EMC Instytut Medyczny S.A., with the registered office in Wroclaw (54-144), at 144-148 Pilczycka Street, entered into the National Court Register maintained by the District Court for Wroclaw – Fabryczna in Wroclaw, VI Economic Department of the National Court Register under KRS number 0000222636, with a share capital of 11,340,000 PLN, NIP: 8942814132, REGON: 933040945.
EMC Instytut Medyczny S.A. diligently selects and applies appropriate technical and organizational measures to ensure the protection of processed data, commensurate with the risk involved, including securing data against unauthorized access, as well as other cases of disclosure or loss, and against destruction or unauthorized modification of such data, as well as against processing in violation of applicable legal provisions. EMC Instytut Medyczny e S.A. maintains continuous supervision over the data processing process and limits access to data as much as possible, granting appropriate authorizations only when necessary.
DATA PROTECTION OFFICER
In order to ensure the highest protection regarding the processing of personal data, EMC Instytut Medyczny S.A. has appointed a Data Protection Officer. If you have any questions regarding the processing of your personal data, please contact the Data Protection Officer at: EMC Instytut Medyczny S.A., Data Protection Officer, 144-148 Pilczycka Street, 54-144 Wroclaw, or via email at: iod@emc-sa.pl.
METHODS OF DATA COLLECTION
EMC Instytut Medyczny S.A. collects ordinary data as well as special categories of data concerning the health status of individuals, natural persons conducting business activities, and partners of civil law partnerships.
EMC Instytut Medyczny S.A. collects only necessary data.
PURPOSE OF PERSONAL DATA PROCESSING
Personal data is processed exclusively for the purpose of ensuring the proper provision of services by EMC Instytut Medyczny S.A. and for responding to inquiries submitted via the contact form available on the website of EMC Instytut Medyczny S.A.
LEGAL BASIS FOR DATA PROCESSING
We inform you that, as part of its operations, EMC Medical Institute S.A. may collect and process personal data for the following purposes:
- Protection of patients’ health, providing medical services to patients (including electronic registration and teleconsultations), and conducting medical examinations by EMC Instytut Medyczny S.A. – based on Art. 9 point 2a GDPR and Art. 6(1)(c) GDPR,
- Providing laboratory results to patients, offering information on their health status, and providing medical documentation to a person designated by the patient – based on Art. 9(2)(a) GDPR and Art. 6 point 1c GDPR,
- Promoting and implementing health prevention measures aimed at protecting patients’ health – based on Art. 9 point 2a GDPR and Art. 6 point 1c GDPR,
- Concluding and performing contracts or actions requested by the data subject before concluding the contract – based on Art. 6 point 1b GDPR,
- Providing electronic (e-mail) or telephone responses to inquiries submitted through the contact form on the Controller’s website – based on Art. 6 point 1a GDPR,
- Fulfilling legal obligations imposed on the data controller – based on Art. 66 point 1c GDPR,
- Pursuing legitimate interests by the data controller or a third party, including the potential redress, determination, and defence of claims, ensuring information security, and for analytical, archival, and statistical purposes – based on Art. 6 point 1f GDPR.
Providing personal data is voluntary, but it is required for the purposes of processing described above. Failure to provide personal data may result in the inability to fulfil the above purposes by EMC Instytut Medyczny S.A.
DATA RETENTION PERIOD
Your personal data may be processed for the following periods:
- For the processing purposes defined in points 1, 2, and 3 – for the duration of medical services provision and subsequently for the period required by legal regulations that mandate the retention of medical documentation,
- For the processing purposes defined in point 4 – until full completion of the contract and then for the period required by archival regulations and the statute of limitations for claims, as well as tax law regulations. If the contract is not concluded, personal data will be promptly deleted,
- For the processing purposes defined in point 5 – for the necessary period to resolve the issue associated with an inquiry submitted through the contact form on the website or until a consent for data processing is withdrawn,
- For the processing purposes defined in points 6 and 7 – for the necessary period to achieve the specified processing purpose, but no longer than the period required by archival regulations and the statute of limitations for claims, as well as tax law regulations.
After the expiration of the above periods, the data will be deleted.
RIGHTS OF THE DATA SUBJECT
You have the right to:
- Access your personal data (Article 15 point 1 GDPR),
- Receive a copy of your personal data (Article 15 point 3 GDPR),
- Rectify or update your personal data (Article 16 GDPR),
- Request the deletion of your personal data – if you believe that there is no basis for EMC Instytut Medyczny S.A. to process your data, you can request that EMC Instytut Medyczny S.A. deletes it, except in cases where the obligation to process personal data arises from a legal requirement or the processing is necessary for the redress, establishment or defence of claims (Article 17 GDPR),
- Restrict the processing of your personal data (Article 18 GDPR),
- Data portability – to receive information about your personal data processed by EMC Instytut Medyczny S.A. in a structured, commonly used, machine-readable format, exclusively in cases where personal data is processed based on your consent and is processed in an automated manner (Article 20 GDPR),
- Lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of your personal data violates GDPR regulations.
If the processing of your personal data is based on the legitimate interest of EMC Instytut Medyczny S.A., you have the right to object to the processing of your personal data (Article 21 GDPR).
To exercise your rights, please contact our Data Protection Officer at:
EMC Instytut Medyczny S.A., Data Protection Officer, 144-148 Pilczycka Street, 54-144 Wroclaw, or by email at iod@emc-sa.pl.
DATA RECIPIENTS
Your personal data will only be processed by the authorized employees of EMC Instytut Medyczny S.A. The recipients of your data may include subcontractors with whom EMC Instytut Medyczny S.A. has entered into service agreements, as well as external IT service providers based on personal data processing agreements.
Your data will not be transferred to third countries or international organizations.
PROFILING
EMC Instytut Medyczny S.A. does not make decisions that have legal effects on you or that similarly affect you, based solely on automated processing, including decisions resulting from profiling.
COOKIES
Cookies are IT data, in particular text files, stored on the user’s device while using this website.
Cookies enable to:
a) use the services available on the website (e.g., authentication),
b) collect information about how the website is used,
c) remember the user’s selected settings and personalizing the interface,
d) provide advertising content that is better tailored to the user’s interests.
The service stores the following information for statistical purposes:
a) device type,
b) operating system,
c) type of web browser,
d) screen resolution,
e) IP address.
This data is used to optimize the operation of the website.
In many cases, the software used to browse websites (web browser) allows cookies to be stored on the user’s end device by default. Users of this website can change the cookie settings at any time. These settings can be changed in particular to block the automatic handling of cookies in the web browser settings or to inform each time they are placed on the user’s device of this website. Detailed information on the possibilities and methods of handling cookies is available in the software (web browser) settings.
The method of changing cookie settings may vary depending on the web browser used by the user. Information on cookies can be found in the “Help” tab in each web browser.
We inform you that restrictions or exclusions of the use of cookies and other similar technologies may affect some of the functionalities available on this website.
COOKIES FROM EXTERNAL SUPPLIERS
We use technology based on cookies (analytical and advertising cookies) from third parties – external suppliers. These types of cookies can be loaded on our website, and the information contained in the cookies can be transferred to these entities. These include:
Google (Google Analytics, Google Tag Manager)
Hotjar
Hotjar Privacy Policy (English version)
Hotjar Cookies Policy (English version)
Any exchange of data with cookies from these companies takes place directly between the user’s browser and these sites, without further participation of EMC. The user can block them at any time.
CHANGES TO PRIVACY POLICY
EMC Instytut Medyczny S.A. reserves the right to change the Privacy Policy if required by applicable law, if the technological conditions of the website operation change or if the change introduces a standard higher than the minimum required by law.
Last modification date: 16.06.2021
PRIVACY POLICY FOR PERSONAL DATA PROCESSED USING FACEBOOK LEAD AD
I. GENERAL PROVISIONS
- The privacy policy regarding personal data processed using Facebook Lead Ad – hereinafter referred to as the Privacy Policy – is the document containing information on the principles of collecting and processing data made available through the use of the Facebook Lead Ad function.
- The controller of personal data obtained through the Facebook Lead Ad form is EMC Instytut Medyczny S.A. with its registered office in Wroclaw (54-144) at 144-148 Pilczycka Street, registered in the Register of Entrepreneurs kept by the District Court for Wroclaw-Fabryczna in Wroclaw, VI Commercial Division of the National Court Register, under the number KRS: 0000222636, NIP: 8942814132, REGON: 933040945 – hereinafter referred to as EMC.
- In accordance with this Privacy Procedure, the data subject expressing consent to the processing of personal data will be hereinafter referred to as the User.
II. PERSONAL DATA
- The processing of the User’s personal data will take place in accordance with the applicable provisions, in particular the Personal Data Protection Act.
- The User’s personal data will be processed for marketing purposes, until the consent to the processing of personal data is withdrawn or the marketing purposes of EMC cease.
- In connection with the provision of personal data, the User has the right to access the content of their data and the right to rectify it, the right to demand that EMC delete it, limit the processing of data and the right to transfer data, the right to object, the right to withdraw consent to its processing at any time without affecting the lawfulness of the processing that was carried out on the basis of the consent expressed before its withdrawal.
- The provision of personal data is voluntary. Failure to provide personal data by the User prevents participation in marketing processes, in particular the sending of commercial and marketing information.
- By completing the data contained in the Facebook Lead Ad form, the User provides EMC with the personal data indicated in the Facebook Lead Ad form, including:
* the User’s name and surname,
* the User’s telephone number,
* the User’s e-mail address. - The withdrawal of consent to the processing of personal data by EMC in the scope of the implementation of orders for marketing services offered by EMC will result in the cessation of the provision of services. The withdrawal of consent may be submitted by sending a statement of withdrawal of consent to the processing of personal data to the following address: iod@emc-sa.pl.
- The User’s personal data are processed by EMC using computer systems ensuring the security of data processing and outside the computer system, with the provision of technical and organizational measures ensuring a level of data security adequate to the risk of processing.
- EMC applies the security measures required by applicable regulations to ensure the protection of processed personal data, in particular the protection against disclosure to unauthorized persons.
III. SENDING COMMERCIAL INFORMATION AND DIRECT MARKETING OVER THE PHONE
- After obtaining User data via Facebook Lead Ad EMC will contact the User at the provided e-mail address or telephone number in order to provide marketing content that may constitute commercial information within the meaning of the Act of 18 July 2002 on the provision of services by electronic means [Journal of Laws 2020.344 consolidated text].
- The User has the right to state at any time that they do not want to receive marketing notifications from EMC and may withdraw the consent already granted. The User may withdraw the consent by sending a statement of withdrawal of consent to sending commercial information to the following address: iod@emc-sa.pl.
IV. FINAL PROVISIONS
This Privacy Policy enters into force on 23.08.2023
