Book your appointment
Čeština

Privacy policy

INFORMATION FOR PATIENTS ON THE PROCESSING OF PERSONAL DATA

pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016

on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing

Directive 95/46/EC (General Data Protection Regulation)

I. Controller of personal data
VIANE Dental s.r.o.
Company ID (IČO): 23928450
Registered office: Turonská 1033, 253 03 Chýně
E-mail: ordinace@vianedental.cz
The controller is a provider of health services in accordance with Act No. 372/2011 Coll., on Health
Services and the Conditions of Their Provision, as amended.

II. Purpose(s) of the processing of personal data
We process your personal data for the purpose of

  • providing health services;
  • reporting health services covered by public health insurance;
  • invoicing health services not covered by public health insurance;
  • communicating information about your state of health to you and to other authorised persons;
  • organising the provision of health services (scheduling patient appointments);
  • keeping records of our income and expenses, payments received and financial management, as required by the regulations governing taxes and accounting.

III. Legal basis for the processing of personal data
The legal basis for the processing of your personal data referred to in point II is

  • compliance with our legal obligations (in particular Act No. 372/2011 Coll., on Health Services and the Conditions of Their Provision, Act No. 48/1997 Coll., on Public Health Insurance, Act No. 563/1991 Coll., on Accounting, Act No. 586/1992 Coll., on Income Taxes, and Act No. 634/1992 Coll., on Consumer Protection);
  • performance of obligations under the health care contract on the basis of which we provide you with health services (this contract need not be concluded in writing).

IV. Recipients of personal data
In accordance with the provisions of the applicable legislation, the recipients of your personal data in specific cases may, in addition to you, be: a provider of health services, public authorities and persons authorised to access medical records under Sections 31, 32, 33 and 65 of Act No. 372/2011 Coll., on Health Services and the Conditions of Their Provision. To fulfil the purposes described above, personal data may also be processed, alongside the controller, by processors on the basis of personal data processing agreements concluded in accordance with the General Data Protection Regulation. We do not transfer your personal data abroad.

V. Period of processing of personal data
Personal data contained in medical records are processed for the period laid down by Decree
No. 98/2012 Coll., on Medical Records. Personal data processed for the other purposes referred to in point
III are processed for the period laid down by law or for as long as you remain our patient,
and subsequently for a period of one year after you cease to be our patient.

VI. Rights of the data subject
In connection with the processing of your personal data, you have the following rights relating to the protection of your personal data:

  • the right to request access from us to your personal data;
  • the right to rectification of your personal data that we process;
  • the right to restriction of processing. Restriction of processing means that we must mark the personal data whose processing has been restricted and, for the duration of the restriction, we may not process them further, except for storing them. You have the right to restriction of processing if
    • you contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data;
    • the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their
      use instead;
    • we no longer need your personal data for the purposes of the processing, but you require them for the establishment,
      exercise or defence of legal claims;
    • you have objected to the processing as described in point VII below, pending the verification of
      whether our legitimate grounds for the processing override your interests or rights and freedoms;
  • the right to erasure of personal data. The right to erasure applies only to personal data that we process for purposes other than the provision of health services. We are not permitted to erase the data we keep about you for the purpose of providing health services (e.g. in your medical records);
  • the right to data portability. You may request that we provide you with your personal data so that you can transmit them to another controller, or that we transmit them to another controller ourselves. However, you have this right only in respect of data that we process by automated means on the basis of your consent or a contract with you. The data we keep about you for the purpose of providing health services (e.g. in your medical records) may, however, be provided only to you and, under the conditions laid down by law, also to another provider of health services or a public authority;
  • the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes the legislation on the protection of personal data. You may lodge a complaint with the supervisory authority in the place of your habitual residence, place of work or place of the alleged infringement. In the Czech Republic, the supervisory authority is the Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.

VII. Right to object to processing
Where we process your personal data for the purposes of our legitimate interests or those of a third party (the legal bases for processing are set out in point III), you have the right to object to such processing at any time. You may lodge an objection at our address given in point I. If you lodge such an objection, we will be entitled to continue the processing only if we demonstrate compelling legitimate grounds for the processing which override your interests or rights and freedoms, or if the processing is necessary for the establishment, exercise or defence of legal claims.

VIII. Mandatory processing and the obligation to provide personal data
The processing of your personal data for the purpose of providing health services is a statutory requirement. Failure to provide your personal data may mean that we will be unable to provide you with health services, which may result in harm to your health or a direct threat to your life (Section 41(1)(d) of Act No. 372/2011 Coll., on Health Services and the Conditions of Their Provision). The obligation to provide the patient's personal data also applies to the patient's legal representative or guardian (Section 41(2) of Act No. 372/2011 Coll., on Health Services and the Conditions of Their Provision).