GDPR
Privacy Policy
Below we explain who controls personal data, why we process data of patients and people contacting the clinic, and what rights are available to individuals whose data is processed.
Data controller
The controller of your personal data is Sante Medica Spółka z ograniczoną odpowiedzialnością, with its registered office in Gdańsk, ul. Chmielna 71/78, 80-748 Gdańsk, Poland, REGON: 524659236, NIP: 5833472731, KRS: 0001023391, entered in the Register of Entities Performing Medical Activity under number 000000293078.
Purposes and legal bases of processing
We process your personal data in particular for healthcare purposes related to providing medical services, based on Article 9(2)(h) of the GDPR.
Data may also be processed to protect against claims, pursue claims and ensure the safety of people and property, based on the controller's legitimate interest under Article 6(1)(f) of the GDPR.
For marketing purposes and other purposes not listed above, we process data only on the basis of your consent, in accordance with Article 6(1)(a) of the GDPR.
Providing personal data is voluntary, but necessary to use healthcare services provided by the controller.
Who may receive your data
Personal data may be shared with other entities only in justified cases and with respect for confidentiality. These may include in particular:
- persons and entities providing healthcare services on behalf of the controller, including other medical entities and laboratories,
- providers of hosting, IT and medical-record software services,
- the Minister of Health as the controller of data processed in the Medical Information System,
- entities cooperating in operating and supporting the appointment booking system,
- persons authorised by you to receive health information or access medical records,
- insurers, archiving entities and public authorities within the scope of their statutory powers.
The controller does not transfer personal data to third countries or international organisations and does not use automated decision-making in relation to personal data.
How long we keep data
We keep personal data until claims related to provided healthcare services become time-barred. Data contained in medical records is kept for the period required by generally applicable law.
Data processed on the basis of consent is processed until an objection is raised, consent is withdrawn or further processing is no longer necessary.
Your rights
You have the right to access your personal data, rectify it, erase it or restrict its processing, as well as the right to object to processing and the right to data portability.
The right to data portability and the right to object do not apply to data processed for healthcare purposes under Article 9(2)(h) of the GDPR, including data contained in medical records.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office in Poland.