Privacy notice

Your data will be processed for the following purposes:

Providing healthcare, including keeping medical records and managing the way treatment is delivered, on the basis of:

Article 6(1)(c) and Article 9(2)(h) of the GDPR* in conjunction with Article 25(1)(1) of the Act of 6 November 2008 on Patients' Rights and the Patients' Rights Ombudsman, and § 10(2) of the Regulation of the Minister of Health of 6 April 2020 on the types, scope and templates of medical records and the manner of processing them, in order to confirm your identity before treatment is provided, in particular to verify your details when an appointment is booked by telephone or in person.

Article 3(1) of the Act of 15 April 2011 on Medical Activity, in order to provide healthcare.

Article 9(2)(h) of the GDPR* in conjunction with Article 24(1) of the Act on Patients' Rights and the Patients' Rights Ombudsman of
6 November 2008, and the Regulation of the Minister of Health of 6 April 2020 on the types, scope
and templates of medical records and the manner of processing them, in order to keep and store medical records.

Article 6(1)(c) of the GDPR* in conjunction with Article 9(3) and Article 26(1) of the Act of 6 November 2008 on Patients' Rights and the Patients' Rights Ombudsman, and § 8(1) of the Regulation of the Minister of Health of 6 April 2020
on the types, scope and templates of medical records and the manner of processing them, in order to collect and archive authorisations to access medical records and to release information about your health.

Article 6(1)(f) of the GDPR* in order to pursue the legitimate interests of the controller,
in particular confirming or cancelling an appointment by telephone.

Article 6(1)(c) of the GDPR* in conjunction with Article 74(2) of the Accounting Act of 29 September 1994, in order to handle accounting and tax records, including keeping the books of account and issuing invoices for treatment provided, which may require personal data to be processed.

Providing healthcare under a contract, Article 6(1)(b) of the GDPR* and
Article 6(1)(c) of the GDPR* in conjunction with Article 74(2) of the Accounting Act of 29 September 1994, in order to handle accounting and tax records, including keeping the books of account and issuing invoices for treatment provided, which may require personal data to be processed.

Your personal data may be disclosed to suppliers of technical and organisational services that make it possible to provide healthcare (for example equipment suppliers and courier companies), and to providers of legal and advisory services.

Data will be kept for the retention period that the law requires for medical records
(at least 20 years) and for accounting and tax records (5 years), and for the limitation period for claims under the Civil Code.

You have the right to access your personal data, to have it corrected, to data portability, to erasure or restriction of processing, and the right to object, on the terms set out in the GDPR. We do not erase medical records before the end of the retention period that the law requires.

You have the right to lodge a complaint with the supervisory authority if you consider that the processing of your personal data breaches the Regulation.

You provide your personal data because the law requires it and because it is necessary for treatment to be given. If you refuse to provide it, we cannot treat you. Giving a telephone number and an email address is voluntary, but without them we cannot confirm or cancel an appointment when that is needed.

The data controller is Adam Gawlik. If you have questions about the processing of personal data, please contact us by post at ProViDENT PLUS Adam Gawlik, ul. Różana 2, Wyry, or by email at recepcja@dentystawyry.pl, marking the message “RODO” in the subject line.

*Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).