Dental clinic

INFORMATION FOR PATIENTS ON THE PROCESSING OF PERSONAL DATA

according to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016
on the protection of natural persons in connection with the processing of personal data and on the free movement of such data and on cancellation
Directive 95/46/EC (General Data Protection Regulation)

I. Administrator of personal data

Name: Beyond infinity, s.r.o
ID: 179 99 341
Adresa: Čsl. armády 1282/23
Most, 43401
Contact: info@zubnimost.cz

The administrator is a provider of health services in accordance with Act No. 372/2011 Coll., on health
services and conditions of their provision, as amended.

​

II. What personal data we process about you
We only process personal data about you that we need for the purposes for which we process it, in particular:
- contact and identification personal data - name, surname, date of birth, insurance number, birth number, address, e-mail address, telephone number
- payment details and bank details
- insurance company number
- medical history related to the patient's health and care
- diagnosis
We also process contact and identification data of third parties - legal representatives, guardians, possibly other persons,

with whom we are entitled to discuss your health condition or to pass on health information to them

III. Purpose/s of personal data processing
We process your personal data for a purpose
− provision of health services
− reporting paid health services
− billing of unpaid medical services
− communication of health status data to you and other authorized persons
− organization of the provision of health services (ordering patients)
− keeping records of our income and expenses, payments received and management as they arise
from regulations governing taxes and accounting

- sending marketing communications

IV. Legal basis for personal data processing
The legal basis for the processing of your personal data listed in point II. Yippee
− fulfillment of our legal obligation (in particular Act No. 372/2011 Coll., on health services and
conditions of their provision, Act No. 48/1997 Coll., on public health insurance, Act No.
563/1991 Coll., on accounting, Act No. 586/1992 Coll., on income taxes, Act No. 634/1992, on protection
consumers)
- fulfillment of obligations from the health care contract, on the basis of which we provide you with health services (this
the contract does not have to be concluded in writing)

​

V. Recipients of personal data
− our employees (as providers of health services) qualified to perform the health profession and other professional staff

in direct connection with the provision of health services

− You (as patients), legal representatives or guardian of the patient, persons designated by the patient, legal representative or guardian of the patient,

foster carer or other caring person

− other health service providers or social service providers to ensure continuity of other health and

social services provided to the patient

− persons authorized to inspect medical records in the sense of §31, §32, §33 and §65 of Act No. 372/2001 Coll.,

in particular the authorized competent administrative authority, public health protection authority,

State Institute for Drug Control, Institute of Health Information and Statistics,

contractual health insurance companies, the Czech Medical Chamber, the Czech Stomatological Chamber, the Czech Pharmaceutical Chamber,

authorized doctors of the assessment service of the district social security administrations, employees of the district social security administrations,

employees of the district social security administrations are authorized to carry out the inspection,

The Public Defender of Rights and authorized employees of the Office of the Public Defender of Rights for the purpose of ascertaining the documents required for the performance of tasks pursuant to Act No. 372/2011 Coll.

or other legal regulations governing the activities and tasks of the said entities

− state authorities (especially law enforcement authorities, the Police of the Czech Republic, public prosecutor's offices, courts)

and other entities on the basis of other legal regulations governing the activities and tasks of the said entities

− entities that provide services to the Administrator and with whom the Administrator has concluded a relevant contract for the processing of personal data
Your personal data is stored in the territory of the Czech Republic or in the territory of a member state of the European Union and we do not intend to transfer it outside the territory of the European Union

respectively to third countries or international organizations

VI. Time of personal data processing
Personal data contained in the medical documentation are processed for the period specified by the decree
No. 98/2012 Coll., on medical documentation. Personal data processed for other purposes specified in point
III are processed for the period specified by law or for the period during which you will be our patient, and
subsequently for one year after you cease to be our patient.

VII. Rights of the data subject
When processing personal data, you have the following rights regarding the protection of your personal data:
− the right to request access to your personal data from us;
− the right to correct your personal data that we process;
− the right to limit processing. Restriction of processing means that we have to your personal data for which
the processing has been restricted, mark and for the duration of the restriction we may not process them further with an exception
their storage. You have the right to restrict processing if:
− you deny the accuracy of the personal data, for the time required for us to be able to verify the accuracy of the personal data
verify the data;
− the processing is illegal and you refuse to delete your personal data and request their restriction instead
use;
− if we no longer need your personal data for processing purposes, but you require them for identification,
the exercise or defense of legal claims;
− if you have raised an objection to the processing mentioned below in point VII., until it is verified,
whether our legitimate reasons for processing outweigh your interests or rights and freedoms;
- the right to erasure of personal data. The right to erasure of personal data applies only to personal data that
we process for purposes other than the provision of health services. Data we keep about you
the purpose of providing health services (e.g. in medical documentation), we may not delete;
− the right to data portability. You can request that we provide you with your personal data for the purpose of their
transfer to another administrator of personal data, or for us to transfer them to another administrator of personal data.
However, you only have this right in relation to data that we process automatically on the basis of
Your consent or contract with you. The data we keep about you for the purpose of providing health care
services (e.g. in medical documentation), however, we may only provide you and under legal conditions
also to another health service provider or public authority.
− the right to file a complaint with the supervisory authority, if you believe that the processing of personal
data, there is a violation of legal regulations on the protection of personal data. You can file a complaint with
supervisory authority in the place of his usual residence, place of employment or in the place where it occurred
to the alleged violation. In the Czech Republic, the supervisory authority is the Personal Data Protection Office, Pplk.
Sochora 27, 170 00 Prague 7, www.uoou.cz.

VIII. The right to object to processing
In the event that we process your personal data for the purposes of our or someone else's legitimate interests
(the legal bases of processing are listed in point III), you have the right to object to such processing at any time
objection. You can raise an objection at our address listed in point I. If you raise such an objection,
we will be entitled to continue such processing only if we prove serious justification
reasons for processing that override your interests or rights and freedoms, and further if
it will be processing necessary for the determination, exercise or defense of legal claims.

IX. Mandatory processing and obligation to provide personal data
The processing of your personal data for the purpose of providing health services is a legal requirement.
Failure to provide your personal data may mean that we will not be able to provide you with health care
services, which may damage your health or directly endanger your life (§ 41 paragraph 1 letter d) of the Act
No. 372/2011 Coll., on health services and conditions of their provision). Obligation to provide personal
the patient's data also applies to his legal representative or guardian (§ 41 paragraph 2 of Act No. 372/2011 Coll.,
on health services and conditions of their provision).