Personal Data Protection – Information Obligation

Our organization processes personal data in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation or GDPR) and in accordance with Act No. 110/2019 Coll., on the processing of personal data.

Our organization is not a public authority or a public body and is therefore not obliged to appoint a Data Protection Officer (DPO) under the EU General Regulation. Our organization is your contact point for any questions, requirements, or requests.

Contact details of the organization:

Dr. Bear Clinic, Radlická 520/117, Prague 5, +420 725 918 155, info@drbc.cz

Operator: Pediatrie Butovice Stodůlky s.r.o., with its registered office at Ke Klimentce 2431/2, 150 00 Prague.

Personal data of patients, clients, employees, and other persons are kept for the period strictly necessary for the purpose of their processing. This is governed by the filing and shredding rules issued in accordance with Act No. 499/2004 Coll., on archiving and filing services, as amended.

lease exercise your rights and requirements under the General Regulation at the contact details provided above. Your requests will always be properly assessed and settled in accordance with the relevant provisions of the General Regulation. If you do not agree with the settlement of your requests and applications, you have the right to lodge a complaint with the Office for Personal Data Protection (ÚOOÚ).

PERSONAL DATA – PATIENTS

Our organization is the controller of your personal data, which it processes mainly for the purpose of:

  • Providing and ensuring health care;
  • Billing of health care to health insurance companies.

Your personal data are collected and further processed mainly on the basis of a legal obligation arising from Act No. 372/2011 Coll., on health services and conditions of their provision (Act on Health Services), as amended. This includes your identification, address, and contact details, information about your health status and the course of health services provided, medical history, and other decisive data necessary for the provision of a specific health service (depending on the nature of the service). Your data may be transferred to contractual processors (IT system providers, laboratories) with whom we have a processing agreement.

PERSONAL DATA – EMPLOYEES

Our organization processes the personal data of its employees and other persons in labor-law relationships. The employment relationship is based on personnel records; the scope and type of materials are decided by the employer at its discretion and with regard to its obligations. Employees are entitled to inspect their personal files and the documents for calculating their salary or to take a copy of them upon request. The employer is obliged to ensure the protection of its employees’ personal data against unauthorized access by unauthorized persons or misuse.

YOUR RIGHTS

In connection with the processing of your personal data, you have the following rights towards our organization:

  • Right of access: You have the right to know what data we process about you, for what purpose, and to whom we transfer it. You have the right to a copy of your medical documentation (providing a copy may be subject to a fee according to the current price list).
  • Right to rectification: If you find that your data (e.g., address, telephone, insurance company) are incomplete or incorrect, you have the right to have them corrected or supplemented.
  • Right to erasure (right to be forgotten): You can exercise this right only for data that we process based on your consent. Please note that for data kept in medical records, the right to erasure cannot be exercised, as we are required by law to keep them for the period specified by shredding periods.
  • Right to restriction of processing: You can ask us to restrict the handling of your data (e.g., while we verify its accuracy).
  • Right to object: If we process data based on a legitimate interest (e.g., property protection by cameras), you have the right to object to such processing.
  • Right to portability: You have the right to obtain your personal data in a structured and machine-readable format for the purpose of transferring them to another controller (health care provider).

You can exercise your rights by sending a written request to the e-mail info@drbc.cz or in person at our clinic. If you believe that we are handling your data in violation of the law, you have the right to lodge a complaint with the Office for Personal Data Protection (www.uoou.cz).