Since we process your personal data, please familiarize yourself with this information. It provides details regarding the processing of your personal data.
We are obligated to inform you of the following principles under Article 13(1) and (2) of the European Parliament and Council Regulation (EU) 2016/679 of April 27, 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as “GDPR”.
The administrator of your personal data is REAQUI Rehabilitacja Regeneracja Relaks Agata Kowalska, NIP: 6182032373, ul. Stanisława Worcella 5a/51, 01-250 Warsaw (hereinafter referred to as “Administrator”).
You can contact the Administrator:
In writing, by sending correspondence to: ul. Stanisława Worcella 5a/51, 01-250 Warsaw
Your personal data will be processed for the following purposes:
For health-related purposes, connected to providing you with health services (the legal basis for processing your personal data in this case is Article 6(1)(b) and (c) GDPR, and Article 9(2)(h) GDPR);
To fulfill our obligations related to the management, storage, and provision of medical documentation (the legal basis for processing your personal data in this case is the Patient Rights and the Patient Ombudsman Act, and Article 6(1)(c) GDPR);
To fulfill our obligations related to the transmission of data concerning medical events to the Electronic Platform for Collecting, Analyzing, and Sharing Digital Resources of Medical Events (the legal basis for processing your personal data in this case is Article 7 and 11 of the Act of April 28, 2011, on the information system in healthcare and Article 6(1)(c) GDPR);
To fulfill our tax and accounting obligations (the legal basis for processing your personal data in this case is Article 6(1)(c) GDPR);
To pursue payment for our services if such payment is not made (the legal basis for processing your personal data in this case is Article 6(1)(f) GDPR);
To protect against claims and to pursue other claims not specified in point 3 above, as well as to ensure the safety of persons and property – based on the legitimate interest of the Administrator (the legal basis for processing your personal data in this case is Article 6(1)(f) GDPR);
To fulfill the legitimate interest of the Administrator (the legal basis for processing your personal data in this case is Article 6(1)(f) GDPR);
For marketing purposes and other purposes not mentioned above – based on your consent (the legal basis for processing your personal data in this case is Article 6(1)(a) GDPR).
Providing your personal data is voluntary, but necessary to use the health services provided by the Administrator. Failure to provide data may result in the Administrator not providing the health service (this does not apply to data provided solely for marketing purposes, which are voluntary).
Your personal data may be transferred to other entities only in justified cases and with respect for the confidentiality of this data. Your data may be transferred to:
Persons and entities providing health services (e.g., other medical entities, another physiotherapist practicing in order to continue treatment, perform ordered tests, or provide other health services);
Entities providing hosting and IT services (e.g., providers of software for medical documentation and providers of the server on which personal data is stored);
The Minister of Health as the administrator of personal data processed in the Medical Information System within the Electronic Platform for Collecting, Analyzing, and Sharing Digital Resources of Medical Events;
Persons authorized by you to obtain information about your health condition or access to medical documentation;
Insurers in the event of claims against the Administrator;
Entities providing archiving services to the Administrator;
Public authorities within their statutory powers.
Your personal data will not be transferred to third countries or international organizations.
The Administrator will not use automated decision-making regarding personal data.
Your personal data will be stored until the expiration of claims for the health services provided to you.
Data contained in medical records will be stored for the necessary period resulting from generally applicable law, most often this is a period of 20 years. In the case of data processed based on your consent, we will process this data until you object to the processing of the data, withdraw your consent to their processing, or when for other reasons the processing of this data becomes unnecessary.
You have the right to access your personal data, request their rectification, deletion, or restriction of processing, as well as the right to object to processing and the right to data portability.
The right to data portability, the right to restrict processing, and the right to object to the processing of personal data do not apply to data processed under Article 6(1)(b) and (c) GDPR and Article 9(2)(h) GDPR, i.e., data processed for health purposes, related to providing you with health services, including data contained in medical records. The right to request rectification of data does not apply to collected medical data.
You have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.