GDPR
Information on the processing of Patient's personal data at the Luxdentica Dentistry Center.
Kto jest administratorem danych?
The administrator of your personal data is NZOZ Centrum Stomatologii LUXDENTICA Dariusz Wilisowski, with its registered office at ul. Lubostroń 22g/7, 30-383 Kraków, and Luxdentica Sp. z o.o., with its registered office at ul. Lipska 4/9 and 10, 30-721 Kraków.
Kto odpowie na pytania związane z przetwarzaniem danych osobowych?
You can contact the personal data protection officer - Julia Szablowska, by writing to the address: biuro@personal-data.pl
Jaki jest zakres przetwarzanych danych osobowych?
We need the following set of your data: first name, last name, PESEL number, gender and date of birth (in the case of persons who do not have a PESEL number), residential address, relationship (in the case of persons registered by a family member). We may also receive your e-mail address and telephone number, but these details are not necessary for us to provide medical services.
When using healthcare services, we create your medical records, in which we note all information concerning the treatment process, in particular information about your state of health. We collect this information if it is necessary to make a diagnosis and conduct the treatment process in an appropriate manner.
Jaki jest cel i podstawa prawna przetwarzania danych osobowych?
1) Establishing the patient's identity before providing a service, verifying data when booking an appointment remotely or on-site: at the reception desk or in the doctor's office.
Art. 6 par. 1 lit. c and Art. 9 par. 2 lit. h of the GDPR in conjunction with Art. 25 point 1 of the Act on Patient Rights and § 10 par. 1 point 2 of the Regulation of the Minister of Health of 9 November 2015 on the types, scope and templates of medical documentation and the method of its processing.
2) Maintaining and storing medical documentation.
Art. 9 par. 2 lit. h of the GDPR in conjunction with Art. 24 par. 1 of the Act on Patient Rights and the Regulation of the Minister of Health of 9 November 2015
on the types, scope and templates of medical documentation and the method of its processing.
3) Receiving and storing declarations in which other persons are authorized to access medical documentation and providing them with information about the patient's state of health.
Art. 6 par. 1 lit. c of the GDPR in conjunction with Art. 9 par. 3 and Art. 26 par. 1 of the Act on Patient Rights and § 8 par. 1 of the Regulation of the Minister of Health of 9 November 2015 on the types, scope and templates of medical documentation and the method of its processing.
4) Contacting via the phone number or e-mail address provided by the patient, e.g., to confirm a booking or cancel a consultation date, or to inform about the necessity of preparing for a scheduled procedure or test.
Art. 6 par. 1 lit. b and f of the GDPR.
5) Maintaining accounting records, issuing invoices or bills, and fulfilling tax obligations.
Art. 6 par. 1 lit. c of the GDPR in conjunction with Art. 74 par. 2 of the Accounting Act of 29 September 1994.
6) Pursuing claims resulting from the conducted business activity.
Art. 6 par. 1 lit. b and f of the GDPR, as the so-called legitimate interest of the controller, which is the pursuit of our claims.
7) For scientific research purposes.
Art. 6 par. 1 lit. a and Art. 9 par. 2 lit. a of the GDPR.
8) For marketing purposes.
Art. 6 par. 1 lit. a of the GDPR.
9) For the purpose of enabling the use of the "I like LUXDENTICA" program
Art. 6 par. 1 lit. f of the GDPR
Czym skutkuje nieprzekazanie danych osobowych?
Using our services is fully voluntary, however, as a medical entity we are obliged by law to maintain medical records. In such a case, failure to provide data may result in the refusal to book an appointment or provide a health service. We also have a legal obligation to process your data due to accounting purposes. Failure to provide data may result in the inability to issue an invoice or a personalized bill.
If you provide us with your phone number or email address, it is done on a voluntary basis – failure to provide them will not result in a refusal to provide a health service, but you will not receive an appointment confirmation from us, or you will not be able to cancel it, for example, via SMS.
Jak długo przetwarzane będą dane?
If you are our patient and we have created your medical records, we store your medical records for a period of 20 years, starting from the end of the calendar year, with the following exceptions:
in the event of the patient's death as a result of bodily injury or poisoning – 30 years;
X-ray images stored outside the patient's medical records – 10 years;
referrals for tests or orders – 5 years or 2 years (if the health service was not provided because the patient failed to appear within the scheduled time, unless the patient has collected the referral);
medical records concerning children up to 2 years of age, which are stored for a period of 22 years.
If the data were processed by us for the purpose of pursuing claims arising from our business activities, we process the data for this purpose for the limitation period of claims resulting from the provisions of the Civil Code.
All data processed for accounting purposes and for tax reasons are processed for 5 years from the end of the calendar year in which the tax liability arose. After the expiry of the above-mentioned periods, your data are deleted or anonymised.
Jakim podmiotom mogą być przekazywane dane osobowe?
other medicinal entities, prosthetic laboratories, and laboratories cooperating to ensure continuity of treatment and accessibility of healthcare;
service providers supplying technical and organizational solutions that enable the provision of health services and management;
ICT and IT service providers, software providers, diagnostic and dental equipment providers;
courier and postal companies;
legal and advisory service providers, as well as those supporting the pursuit of eligible claims;
persons authorized within the scope of exercising patient rights.
Regarding the use of external software or medical equipment servicing, your personal data may be transferred outside the European Economic Area. Such transfer may only take place on the basis of an agreement or other legal instrument containing standard data protection clauses adopted by the European Commission.
Jakie przysługują Ci prawa?
The right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. The right to access your personal data, a copy of the processed data, rectification, erasure, or restriction of processing. You have the right to object to the processing of personal data for marketing purposes, as well as the right to lodge a complaint with the President of the Personal Data Protection Office. The data will not be used for automated decision-making or profiling.
