Physical therapy treatments

PATIENT INFORMATION CLAUSE

In fulfilment of the information obligation in Article 13(1) of the General Data Protection Regulation (GDPR), we inform you that:

The Joint Controllers of your personal data are:
- Mirai Clinic Spółka z Ograniczoną Odpowiedzialnością withitsregisteredoffice in Otwock (05-400)at ul. ArmiiKrajowej 8, entered in the Register of Entrepreneurs of the National Court Register under number 0000796790, with tax identification number NIP 5322084436;
- Mirai Instytut Rehabilitacji Spółka z Ograniczoną Odpowiedzialnością with itsregisteredoffice in Warsaw (01-126)at ul. Wolska 96, 01-126 Warsaw (hereinafter referred to as "Mirai Group" or "Joint Controllers");
Regarding the processing of personal data, you may contact the designated Data Protection Officer Ms. Karolina Sybilska via e-mail iod@odosc.pl;
Your personal data are obtained directly at the time of registration - either in person or via the hotline. In the case of continuation of treatment started at another medical facility, your data may also be obtained by the Administrator from other medical facilities. In exceptional situations justified by a medical condition, your personal data may also be obtained from your relatives.
Your data will be processed as follows:
- for the purpose of providing health services, also remotely (so-called telemedicine), including the purpose of keeping medical records on the basis of the provisions of the Act on Health Care Activities, the Act on Patients' Rights and Patients' Rights Ombudsman, as well as the Act on Physician and Dentist Professions (Article 6(1)(c) and Article 9(2)(h) of the GDPR,
- for the purpose of registering for medical appointments in electronic form on the basis of Article 6(1)(a),
- where the purpose stems from the legitimate interests pursued by the Controller or by a third party, on the basis of Article 6(1)(f) of the GDPR, consisting of the assertion and defence of claims;
- o where the purpose is based on the consent given pursuant to Article 6(1) (a) of the GDPR.
With regard to identification information related to provision of health services, the provision of data is mandatory and necessary for the provision of the service. Failure to provide them may prevent the provision of the service;
Recipients of personal data may be entities cooperating with Mirai Group and the data may be transferred to entities processing personal data on behalf of the Controller, whereby such entities process data on the basis of an agreement with the Joint Controllers and only in accordance with their instructions;
Your personal data shall be stored:
- for the period corresponding to the storage period of medical records, as indicated in Article 29 of the Act of 6 November 2008 on Patients' Rights and Patients' Rights Ombudsman, i.e. for 20 years, counting from the end of the calendar year in which the last entry was made, with the exceptions as indicated in the aforementioned Act - in the case of data obtained for the purposes referred to in point 3 (a).
- until withdrawal of the consent - in case of data collected for the purposes as specified in point 3 (b).
- for the period necessary to make potential claims and to defend against such claims - in the case of data collected for the purposes specified in point 3(c);
You have the right to demand access to your personal data, as well as to rectify them (amend). You also have the right to demand erasure or restriction of processing, as well as to object to processing, but only if further processing is not necessary for fulfilment of a legal obligation by the Joint Controllers and there are no other overriding legal grounds for processing;
You have the right to lodge a complaint against the processing of your data by the Joint Controllers to the President of the PDPO (uodo.gov.pl);
Your data may be disclosed to a third country for the purpose of transferring medical records or/and continuation of treatment.
The Joint Controllers do not make decisions by automated means.