pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)

3G Dent s.r.o.

Company ID: 04780809

Registered office: K Beranovu 1192/21, Dolní Chabry, 184 00 Prague

Business address: Jindřicha Plachty 535/16, Prague 5 – Smíchov, 150 00

info@dobrydent.cz

+420 774 126 537

The Administrator is a provider of health services in accordance with Act No. 372/2011 Coll., on health services and conditions for their provision, as amended.

We process your personal data for the purpose of:
providing healthcare services
reporting reimbursed healthcare services
billing for non-reimbursed healthcare services
disclosing health information to you and other authorized persons
organizing healthcare services (ordering patients)
keeping records of our income and expenses, payments received and management, as required by tax and accounting regulations

The legal basis for processing your personal data referred to in point II. is:
fulfillment of our legal obligation (in particular Act No. 372/2011 Coll., on health services and conditions for their provision, Act No. 48/1997 Coll., on public health insurance, Act No. 563/1991 Coll., on accounting, Act No. 586/1992 Coll., on income taxes, Act No. 634/1992, on consumer protection)
fulfillment of obligations under the health care contract, on the basis of which we provide you with health services (this contract does not have to be concluded in writing)

In accordance with the provisions of legal regulations, the recipients of your personal data may, in specific cases, be, in addition to you, the following: a healthcare provider, public authorities and persons authorised to inspect medical records pursuant to Sections 31, 32, 33 and 65 of Act No. 372/2011 Coll., on healthcare services and the conditions for their provision. In order to ensure the purposes described above, personal data may be processed by processors in addition to the controller, on the basis of personal data processing contracts concluded in accordance with the General Data Protection Regulation.
We do not transfer your personal data abroad.

Personal data contained in medical documentation are processed for the period specified in Decree No. 98/2012 Coll., on medical documentation. Personal data processed for other purposes specified in point III are processed for the period specified by law or for the period during which you will be our patient, and subsequently for a period of one year after you cease to be our patient.

When processing personal data, you have the following rights regarding the protection of your personal data:
the right to request access to your personal data from us;
the right to rectification of your personal data that we process;
the right to restriction of processing. Restriction of processing means that we must mark your personal data for which processing has been restricted and that we may not further process them for the duration of the restriction, except for storage. You have the right to restriction of processing if:
you contest the accuracy of the personal data, for a period necessary to verify the accuracy of the personal data;
the processing is unlawful and you object to the erasure of the personal data and request the restriction of their use instead;
if we no longer need your personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims;
if you have objected to the processing set out in point VII below, until it has been verified whether our legitimate grounds for the processing override your interests or rights and freedoms;
the right to erasure of the personal data. The right to erasure of personal data only applies to personal data that we process for purposes other than the provision of healthcare services. We may not erase data that we keep about you for the purpose of providing healthcare services (e.g. in medical records);
the right to data portability. You may request that we provide your personal data to you for the purpose of transferring it to another personal data controller, or that we transfer it to another personal data controller ourselves. However, you only have this right with regard to data that we process automatically on the basis of your consent or a contract with you. However, we may only provide data that we keep about you for the purpose of providing healthcare services (e.g. in medical records) to you and, under legal conditions, to another healthcare provider or public authority;
the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data infringes the legal provisions on the protection of personal data. You may lodge a complaint with the supervisory authority at your place of habitual residence, place of employment or place where the alleged infringement occurred. In the Czech Republic, the supervisory authority is the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.

If we process your personal data for the purposes of our or someone else’s legitimate interests (the legal basis for processing is set out in point III), you have the right to object to such processing at any time. You can object to this at our address set out in point I. If you object, we will only be entitled to continue processing if we demonstrate compelling legitimate grounds for the processing which override your interests or rights and freedoms, and if the processing is necessary for the establishment, exercise or defence of legal claims.

The processing of your personal data for the purpose of providing healthcare services is a legal requirement. Failure to provide your personal data may mean that we will not be able to provide you with healthcare services, which may result in damage to your health or a direct threat to your life (Section 41, paragraph 1, letter d) of Act No. 372/2011 Coll., on healthcare services and conditions for their provision). The obligation to provide the patient’s personal data also applies to his or her legal representative or guardian (Section 41, paragraph 2 of Act No. 372/2011 Coll., on healthcare services and conditions for their provision).