GDPR Information Clause

In accordance with Article 13(1) and (2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of the 27th of April, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “GDPR”), we inform you that:

1. The data controller for patient personal data is OrtoGo Medical Centre Ltd, 25 Wiatraczna street, flat U2, 04-384 Warsaw;
2. The controller has appointed a Data Protection Officer, whom you can contact via email at: [email protected];
3. The controller will process your personal data based on Article 9(2)(h) GDPR, i.e. for health prevention or occupational medicine purposes, to assess an employee's fitness for work, medical diagnosis, or to provide healthcare, as required by the Act of the 6th of November, 2008 on Patient's Rights and the Patient's Rights Ombudsman and the Act of 15 April 2011 on therapeutic activity;
4. Personal data may be shared with other authorised entities based on legal regulations, as well as with entities with which the controller has entered into data processing agreements related to providing services to the controller (e.g. law firms, laboratories, software providers, accounting firms);
5. The controller does not intend to transfer personal data to a third country or international organisation;
6. At the controller's office, you have the right to obtain a copy of your personal data.

Additionally, according to Article 13(2) GDPR, we inform you that:

1. Your personal data will be stored for the period specified by law, i.e. the Act of 6th of November, 2008 on patient's rights and the Patient's Rights Ombudsman, Article 29: for 20 years, counting from the end of the calendar year in which the last entry was made, except for:

• medical documentation in the case of a patient's death due to bodily injury or poisoning, which is stored for 30 years, counting from the end of the calendar year in which the death occurred;
• x-ray images stored separately from the patient’s medical documentation, which are stored for 10 years, counting from the end of the calendar year in which the image was taken;
• referrals for tests or doctor's orders, which are stored for 5 years, counting from the end of the calendar year in which the service subject to the referral or order was provided;

Medical documentation concerning children up to 2 years of age is stored for 22 years. After the periods mentioned in paragraph 1, the healthcare provider destroys the medical documentation in a way that prevents the identification of the patient concerned.

2. You have the right to access your personal data - to rectify, delete, or restrict processing;
3. You have the right to lodge a complaint with the supervisory authority;
4. Providing personal data is a statutory requirement. The data subject is obliged to provide it, and failure to provide the necessary data will result in the refusal of healthcare services;
5. The controller does not make decisions based solely on automated processing of your personal data.