GDPR
INFORMATION CLAUSE
INFORMATION ON PERSONAL DATA PROTECTION
Pursuant to Article 13 sections 1 and 2 of the General Data Protection Regulation of 27 April 2016 (GDPR), we hereby inform that:
- The Controller of your personal data is a company from a capital group of EMC Instytut Medyczny S.A. or Nowy Szpital Holding S.A. hereinafter referred to as PHP (Penta Hospitals Polska), in the site of which you have used medical services. Address and contact data of companies in the PHP group are available at: https://www.emc-sa.pl/nasze-placowki.
- A contact person for matters related personal data protection in PHP is Data Protection Inspector available at: iod@pentahospitals.pl.
- Your personal data including your first and last name, telephone number(s) and/or email address shall be processed in order to inform another medical unit of PHP and make an appointment for a consultation ensuring continuity of health care, and for marketing purposes, via communication channels which you have indicated in this document based on Article 6 section 1 (a) of GDPR
- Your data indicated in point 3 and data on your health shall be processed for the purposes of recruitment to current and future clinical trials with PHP based on Article 6 section 1 (a) and Article 9 section 2 (a) of GDPR.
- Your personal data shall be processed by authorized employees of the Data Controller.
- Your personal data shall be shared with authorized authorities and entities pursuant to the provisions of law, in particular with the following: National Health Fund, the Ministry of Health, e-Health Center, other entities providing health care services to ensure the continuity of treatment, as well as with providers of external services based on an entrusting data agreement.
- Providing personal data is voluntary, but in the case of wanting to use health care services offered by PHP, it is necessary. Failure to provide personal data might result in refusal to register or provide health care services.
- Your personal data shall not be transferred to third countries or international organizations.
- Your personal data shall be stored for the time necessary to achieve an objective to which it has been obtained, or to the moment of withdrawing granted consent in relation to communication channels regarding which the content has been withdrawn. Then, your personal data shall be removed.
- You have the right to access the content of your data, the right to correct, remove, transfer the data, limit its processing, oppose to its processing, withdraw your consent at any time without any affect on compliance with the right to processing done based on the consent before it was withdrawn.
- You have the right to file a complaint to a supervisory body, when you decide that personal data processing exceeds the provisions of GDPR.
- Your personal data shall not be processed in the form of filtering.
CONSENT CLAUSE
- I hereby give my consent for PHP to process my personal data in the form of first and last name, telephone number and/or email address, pursuant to Article 6 section 1 (a) of GDPR for the purpose of:
- sharing it with other PHP medical unit and make an appointment for a consultation ensuring the continuity of health care;
- transfer information about services offered by PHP, in particular about preventive actions, medical packages, health condition check-ups, clinical trials, client satisfaction surveys, through the following communication channels: email messages, text messages and mms, phone calls*
- I hereby give my consent for PHP to process my personal data regarding my health pursuant to Article 6 section 1 (a) and 9 section 2 (a) of GDPR for the purposes of participating in recruitment processes to current and future clinical trials conducted by PHP, including a review of data collected in medical documentation kept by PHP, as an initial assessment of meeting the criteria for the participation in a trial, as well as for contact if the initial assessment reveals that I meet the criteria for the participation in a clinical trial, through the following communication channels: email messages, text messages, mms, phone calls*
What is more, I also declare that I have been informed about the possibility to withdraw granted consent at any time and that withdrawing the consent does not affect the compliance with the right to processing done before withdrawing the consent.
