Information from the Personal Data Administrator
HOW WE PROCESS YOUR PERSONAL DATA AT INVICTA MEDICAL CLINICS AND LABORATORIES?
Acting as the Controller of your personal data, we hereby ask you to read the information necessary for any data personal data collection pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR).
PERSONAL DATA PROCESSING NOTICE FOR PATIENTS
Who is the Controller of personal data??
The controller of your personal data is the Invicta corporate group (hereinafter Invicta), acting as a co-controller of personal data (Invicta spółka z o.o., Invicta Management Sp. z o.o., Medyczne Laboratoria Diagnostyczne Invicta Sp. z o.o, Klkinika Antiaging Invicta Sp. z o.o., Invicta Software Sp. z o.o., Zarządzanie Nieruchomościami Invicta Sp. z o.o., Invicta Nieruchomości Sp. z o.o. based in Sopot (81-740) at Polna 64 Street, tel. 58 58 58 800, e-mail invicta@invicta.pl.
Whom may I reach regarding my personal data?
For all matters pertaining to personal data you may contact our Data Protection Officer:
Beata Gozdecka
e-mail address daneosobowe@invicta.pl
ul. Polna 64
81-740 Sopot
Beata Gozdecka
e-mail address daneosobowe@invicta.pl
ul. Polna 64
81-740 Sopot
Is providing personal data voluntary?
Your provision of your personal data, excluding the provision of your telephone number and email address which is entirely at will, is a statutory requirement. Failure to provide the requested data may prevent the proper course of the treatment process. Failure to provide your e-mail address and telephone number may hinder the provision of up-to-date information on the organisation of your treatment, e.g. information on cancellation of your medical appointment.
In the case of consent to receive information and consent to adapt the content of the information provided: providing data is completely voluntary, but it may hinder contact and current service.
In the case of consent to receive information and consent to adapt the content of the information provided: providing data is completely voluntary, but it may hinder contact and current service.
For what purpose and on what basis are the data processed?
Data retention period
Your personal data is processed for the purpose of providing health services, including preventive health or occupational medicine, medical diagnosis, provision of healthcare, treatment or management of healthcare systems and services.
For this purpose, your personal data will be processed:
For this purpose, your personal data will be processed:
- for establishing your identity before providing the service, verifying your data when making a remote appointment (by telephone, via a form or via a registration system) and directly at our Clinics, collection centres, vaccination centres;
- for contact (by telephone, e-mail) to confirm or remind you of your appointment booking, examination, inform you about the need to prepare for the planned treatment, inform you about the possibility of collecting the test results, process your request or complaint;
- to fulfil the obligation to keep and retain medical records;
- to qualify you for a publicly subsidised infertility treatment programme;
- to report on your vaccination status and provide data and information on infections and infectious diseases to the relevant authorities;
-
in order to improve the quality of the service, and to continually monitor patient needs and expectations, we may make requests for service evaluations or short surveys;
We will send surveys in a way that does not violate your rights.
If you do not wish to receive such messages, please let us know.
-
Article 9(2)(h) GDPR
processing is necessary for the purposes of preventive health or occupational medicine, to assess an employee's fitness for work, medical diagnosis, the provision of health care or social security, treatment or the management of health care or social security systems and services - Act of 6 November 2008 on patients' rights and the Patient Ombudsman
- Act of 25 June 2015 on infertility treatment
- Regulation of the Minister of Health of 23 March 2006 on quality standards for medical diagnostic and microbiological laboratories
- Act of 5 December 2008 on preventing and combating infections and infectious diseases in humans
- EN ISO 9001 quality management system
Your personal data is processed for the purpose of fulfilling the order you have placed regarding the sale of services and/or examinations that take place via our websites.
-
Article 6(1)(b) GDPR
The processing is necessary for the performance of the contract
Invicta keeps accounting books and performs tax obligations, including keeping tax records
- Act of 29 September 1994 on accounting
- Tax regulations
Your data may be processed in order to assert claims in respect of the services we provide.
-
Article 9(1)(f) GDPR
processing is necessary to establish, assert or defend claims
Invicta provides Users with the possibility of creating an account on Medipoint.pl Portal.
Patients may have their medical data from the patient's file sent to their account.
-
Article 9(1)(a) GDPR
the data subject has given his/her explicit consent to the processing of this personal data
Your image may be recorded for the security of persons and property located in the Clinic.
-
Article 6(1)(f) GDPR
processing is necessary for the purposes of the legitimate interests pursued by the controller
Your personal data is processed in order to improve the quality of service and verify the information provided.
-
Article 9(1)(a) GDPR
the data subject has given his/her explicit consent to the processing of this personal data
Your personal data is processed for the purpose of archiving consents, declarations or statements made. The recordings are archived in the medical file.
-
Article 9(2)(h) GDPR
processing is necessary for the purposes of providing healthcare and managing healthcare systems and services.
Your data may be processed in order to receive (by email, SMS, MMS, incoming calls to a telephone number) from Invicta information about Invicta activities and events, including services, products and news, as well as discounts, promotions and benefits.
-
Article 9(1)(a) GDPR
the data subject has given his/her explicit consent to the processing of this personal data
If you consent to your image being shared, it may be used on our website, on our social media profile and in our communication materials, depending on the scope of your consent.
-
Article 9(1)(a) GDPR
the data subject has given his/her explicit consent to the processing of this personal data
Your personal data may be processed in order to tailor the information provided to you to your needs and expectations (profiling).
If you consent to the processing of personal data by automated means, including profiling in order to tailor the information provided to you, this will involve combining data received from you with information relating to characteristics, behaviour, preferences in order to tailor commercial information to known or anticipated needs or expectations (profiling). In this way, you will receive such information that corresponds to your needs and that is of interest to you.
If you consent to the processing of personal data by automated means, including profiling in order to tailor the information provided to you, this will involve combining data received from you with information relating to characteristics, behaviour, preferences in order to tailor commercial information to known or anticipated needs or expectations (profiling). In this way, you will receive such information that corresponds to your needs and that is of interest to you.
-
Article 9(1)(a) GDPR
the data subject has given his/her explicit consent to the processing of this personal data
What rights do I have?
- you have the right to request access to your personal data, rectification, erasure or restriction of processing;
- you have the right to object to the processing, as well as the right to data portability. Please make your requests directly to the Clinic or by email todaneosobowe@invicta.pl;
- data: first and last name, date of birth, gender designation, address of residence, PESEL number, if assigned, in the case of a newborn child - the mother's PESEL number, and in the case of persons who have not been assigned a PESEL number - the type and number of the document confirming identity, if the patient is a minor, completely incapacitated or incapable of conscious consent - first and last name of the legal representative and the address of his or her place of residence, as well as data on past, present or future physical or mental health condition, including genetic data are part of the medical records and cannot be removed by the Controller. This does not apply to consent to the transmission of information and consent to profiling;
- you have the right to lodge a complaint with the supervisory authority (President of the Office for Personal Data Protection, POPDP) if you consider that the processing of your personal data violates the provisions of the GDPR or other regulations on personal data protection.
- you have the right to withdraw your consent to the processing of your email address and telephone number, as well as your consent to the transmission of information and consent to profiling, at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal.
To whom is my personal data transferred?
Your personal data, in particular your health data, is confidential and subject to a high level of protection. Your personal data may be communicated to entities involved in the treatment process if this is necessary for the purposes covered by the consents given or by law. Your personal data may be transferred to:
- entities to which we have entrusted your personal data under an entrustment agreement, which participate in the handling of the treatment process;
- other medical entities which cooperate with Invicta to ensure continuity of treatment and are subcontractors of medical services;
- providers of technical and marketing services, in particular providers of ICT services, diagnostic equipment, courier and postal companies, providers of services in the marketing area (advertising agencies, SMS and e-mail companies),
- providers of legal services in the event of redress;
- persons authorised by you to access your medical records and health information;
- entities financing medical services, in particular the National Health Fund and state and local government entities in the scope of infertility treatment programmes.
