PRIVACY POLICY OF THE NZOZ DIALOG THERAPY CENTRE
Who is the controller of your personal data?
The controller of your personal data is NZOZ Centrum Terapii DIALOG. Address: 19 Stryjeńskich Street, Flat 18U, 02-791 Warsaw (hereinafter ‘We’ or ‘the Controller’), represented by the Management Board.
How can you contact us to find out more about the processing of your personal data?
You can write to us regarding your personal data at the following email address: przychodnia@terapiadialog.pl
Where did we obtain your data?
We received it from you as part of the Controller’s medical practice, which processes personal data relating to health for purposes and to the extent permitted by applicable law, with particular regard to the Act on Patients’ Rights and the Patient Ombudsman.
Other methods of collecting personal data
The Controller may collect Users’ Personal Data, such as: identification details (first name, surname, address) and contact details (telephone number, email address). The Controller may collect Users’ Personal Data, in particular, in the following cases:
- the provision of personal data by users (e.g. via the contact form, the adviser form, by email or by telephone);
- to collect or request that Users provide their Personal Data whilst visiting the Administrator’s website or using any features or resources available on or via the Website. When Users visit the Website, their devices and browsers may automatically provide certain information (such as device type, operating system, browser type, browser settings, IP address, language settings, dates and times of connection to the Website, and other technical information relating to communication), some of which may constitute Personal Data. During a visit to the Website, no Personal Data relating to Users will be stored by the Controller without the Users’ prior, explicit consent. The temporary storage of log files and cookies facilitates the use of our Website. For this reason, Users are asked to give their consent to this on the Website. Granting the aforementioned consent is optional and does not affect the ability to use the Website. In some cases, without granting such consent, the ability to use the Website may be restricted to some extent.
What is the purpose and legal basis for the Controller’s processing of your personal data?
We process your personal data because it is necessary for the performance of our public-interest activities, and we do so on the basis of legal provisions including, amongst others:
- the Medical Practice Act
- the Act on Patients’ Rights and the Patients’ Rights Ombudsman;
- the Healthcare Facilities Act;
- the Occupational Health Service Act;
- the Public Blood Service Act;
- the Mental Health Act;
- the Act on the Healthcare Information System and the implementing regulations for the aforementioned Acts.
If you consent to this, we will process your personal data for the following purposes:
- storing data in cookies, collecting data from websites;
- participation in events organised by the Controller;
- to make it easier to get in touch;
- offering the Administrator’s products and services to users
You may withdraw your consent to the processing of your personal data for purposes other than the performance of public tasks at any time, using the same method by which you gave your consent. You may send your statement of withdrawal of consent to the Controller’s postal address or email address given above.
Do you have to provide us with your personal data?
Yes, as this is required by law, in particular under the Act on Patients’ Rights and the Patients’ Rights Ombudsman.
We also require you to provide your personal data on the forms used to register for events organised by us.
The scope of the data we collect is set out in the event terms and conditions and depends on the nature of the event.
Apart from providing data required by law, the provision of your personal data is voluntary.
What rights do you have vis-à-vis the data controller with regard to the data being processed?
We guarantee that the following rights under the General Data Protection Regulation (GDPR) will be upheld, namely
: the right to rectification, pursuant to Article 16 of the GDPR; with regard to a request for rectification, should you notice that the data is incorrect or incomplete;
– The Patient’s right to be forgotten and to erasure does not apply to Patients’ personal data processed on the basis of Article 9(2)(h) of the GDPR, including, in particular, data processed as part of medical records.
– The Data Controller shall refuse to comply with the Patient’s right to be forgotten and to have data erased in respect of personal data contained in medical records for the entire period of archiving of medical records required by law, invoking the provision of Article 29(1) of the Act on Patients’ Rights and the Patients’ Rights Ombudsman.
You have the right to lodge a complaint regarding our processing of your personal data with the supervisory authority, which, since 25 May 2018, has been the President of the Office for Personal Data Protection.
To which categories of recipients do we disclose your personal data?
Your personal data may be disclosed to
: – entities authorised under applicable law;
– entities providing the following services
: – delivery of correspondence
; – archiving services; –
hosting services; – IT support
The administrator uses Google Analytics, a web analytics system that provides insights into website traffic and is used for marketing purposes. You can read more about Google’s privacy policy HERE
The Controller uses the data provided by the user or collected automatically for the following purposes:
- the proper functioning, configuration, security and reliability of the Website,
- monitoring the session status,
- to tailor the information displayed to the user’s preferences,
- analyses, statistics, research and audits of website page views.
How long do we retain your personal data?
We retain your personal data for the period specified in specific legal provisions, and for the period necessary to fulfil contracts.
For the purposes for which the data subject has consented to the processing of their personal data, such data is retained until consent is withdrawn.
Do we transfer your data to countries outside the European Economic Area?
Data recipients may be established in a country outside the European Economic Area (EEA); in such cases, however, the Controller will ensure an adequate level of security to safeguard the data subject. Data transfers to countries outside the EEA may relate, for example, to:
- activities carried out on social media platforms and the use of plug-ins and other tools provided by these platforms (including Facebook and Twitter),
- using analytical tools and tools designed for the anonymised tracking of user behaviour, in particular tools such as Google Analytics and Hotjar.
Cookies
The administrator uses the following websites:
www.psychiatrzy.warszawa.pl
www.portalpacjenta.psychiatrzy.warszawa.pl
www.centrumdladzieci.pl
sensosenso.pl
When a user accesses the Website, data relating to the user is collected automatically. This data includes: IP address, domain name, browser type and operating system type. This data may be collected via cookies, the Google Analytics system, and may be stored in server logs.
Cookies are small text files sent to a user’s computer or other end device whilst browsing the Website. Cookies remember the user’s preferences, which enables us to improve the quality of the services provided, enhance search results and the relevance of the information displayed, personalise the website and compile website statistics.
Further information
Your personal data will be subject to automated decision-making processes, which may include profiling. This means that, based on the personal data we hold about you and information regarding the products you purchase or the services you use, or the cookies stored on your device, we will draw conclusions about your preferences and interests, which may help us to build your marketing profile, inform our marketing strategy and support our further development. Based on the profiles we create, we will be able to better tailor our communications to your expectations, which means you will receive less irrelevant information and fewer offers for products you are not interested in purchasing.
To contact the Data Protection Officer, please send an email to iod@terapiadialog.pl