Book an appointment
Documents

Privacy Policy

Website privacy policy

stomatologia.medyk-centrum.pl

English translation of the Polish original („POLITYKA PRYWATNOŚCI STRONY INTERNETOWEJ”). In the event of any discrepancy between the two language versions, the Polish version shall prevail.

§ 1. General provisions

  1. This Privacy Policy sets out the rules for the processing and protection of the personal data of users (hereinafter referred to as Patients or Users) using the website operating at: stomatologia.medyk-centrum.pl (hereinafter referred to as the Website).

  2. The controller of the personal data collected via the Website is Prywatne Centrum Medyczne “Medyk-Centrum” Jan Bińczyk, based in Częstochowa (hereinafter referred to as the Controller).

  3. The Controller exercises particular diligence to protect the interests of the data subjects, and in particular ensures that the data it collects are processed lawfully, including in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and the Act on Medical Activity.

§ 2. Purposes and legal bases for data processing

The personal data of Website Users are processed for the following purposes:

1. Handling inquiries and contact via the contact form:

  • Scope of data: First name, telephone number, and the content of the message voluntarily entered by the User.
  • Legal basis: Article 6(1)(f) GDPR – the Controller’s legitimate interest consisting of responding to messages addressed to the dental practice and communicating with Patients.


2. Undertaking pre-medical actions / Appointment scheduling:

  • Where the content of the message concerns booking an appointment or a treatment process, the data may be processed in order to take action at the request of the data subject prior to concluding an agreement for the provision of medical services.
  • Legal basis: Article 6(1)(b) GDPR and Article 9(2)(a) GDPR (with respect to health data, to the extent voluntarily provided in the form for the purpose of arranging the appropriate health service).


3. Handling the feedback form / service quality surveys:

  • Scope of data: First and last name and the content of the feedback (required to submit feedback), as well as email address and telephone number (optional data for return contact).
  • Legal basis: Article 6(1)(f) GDPR – the Controller’s legitimate interest consisting of analyzing the quality of dental services provided and improving Patient service.


4. Proper functioning of the website:

  • Scope of data: IP addresses, cookies, browser data.
  • Legal basis: Article 6(1)(f) GDPR – legitimate interest consisting of ensuring the security and optimization of the Website’s operation.

§ 3. Feedback form and processing of data from feedback analysis

1. Within the Website, Users may submit feedback and comments regarding the operation of the dental practice via a dedicated feedback form.

2. Completing the feedback form requires providing the following mandatory data: first and last name, content of the feedback/message.

3. Providing an email address and telephone number in the feedback form is voluntary and serves solely for possible return contact by the Controller (e.g., to clarify the comments submitted or to thank the User for the feedback provided).

4. The feedback submitted serves the Controller’s internal purposes – verifying quality standards, improving the level of Patient service, and managing the medical facility.

§ 4. Data retention period

Personal data will be stored for the period necessary to achieve the purposes for which they were collected:

  1. Data from the contact form used for ongoing correspondence – for the time necessary to handle the inquiry, but no longer than 12 months from the end of the correspondence, unless the Patient undertakes treatment.

     

  2. Data processed on the basis of the feedback form – for the time necessary for internal quality analytics, but no longer than 12 months from the date the feedback was submitted.

§ 5. Recipients of data

  1. Patients’ personal data may be disclosed solely to entities authorized to receive them under legal provisions, and to entities cooperating with the Controller in order to maintain IT infrastructure (e.g., the website hosting provider, email technical support).

     

  2. Entities processing data on behalf of the Controller do so on the basis of data processing agreements and are obliged to maintain full confidentiality and data security.

     

  3. The Controller does not transfer personal data to third countries (outside the European Economic Area) or to international organizations.

§ 6. Rights of data subjects

Every User/Patient has the right to:

  1. Access the content of their personal data and obtain a copy thereof.
  2. Rectify (correct) their data.
  3. Restrict the processing of their data.
  4. Object under Article 21 GDPR.
  5. Lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (UODO), if the User considers that the processing of data violates GDPR provisions.


To exercise their rights, the User may contact the Controller by mail at the address of the Medyk Centrum clinic – Aleja Wolności 34, 42-200 Częstochowa, or by email (the dedicated email address of the dental practice provided on the website).

The Controller has appointed a Data Protection Officer, who may be contacted on all matters concerning the processing of personal data at the email address:iod@netbel.pl

§ 7. Cookies, operational data and traffic analytics

1. During a User’s visit to the Website, the Controller processes certain personal data related to the use of cookies and the automatic recording of website access data in server logs.

2. The Controller uses solutions for analyzing website traffic and generating related statistics, based on the Google Analytics service. This tool serves solely analytical purposes and the optimization of the Website’s operation.

3. Google Analytics automatically collects information about the User’s use of our website, including: online identifiers (including cookie identifiers and pseudonymized user identifiers), information about the device, web browser and operating system, approximate geographic data (city/country based on a truncated IP address), and data on activity on the site (e.g., subpages visited, time spent on the site, clicks performed, the source from which the User arrived at the site).

4. The legal basis for the processing of data in the scope described above (both logs and data from the Google Analytics tool) is Article 6(1)(f) GDPR, i.e., the Controller’s legitimate interest consisting of analyzing website activity in order to ensure its proper, secure and efficient operation. This data is not combined with any other personal data that you may provide to us for other purposes (e.g., in the contact form).

5. The User has the option to independently manage cookies, including restricting or completely blocking their storage, by changing the relevant settings in their web browser.

§ 8. Final provisions

1. Providing personal data in the contact form is voluntary, but necessary to respond to the message sent or to make a preliminary appointment booking.

2. The Website does not carry out automated decision-making, including profiling of Users.

3. The Controller reserves the right to make changes to this Privacy Policy in the event of changes in legal provisions or the development of the Website’s technology.

Pursuant to Article 11 of the Personal Data Protection Act of 10 May 2018 (Journal of Laws 2018, item 1000), we inform that Mr. Lechosław Buczak has been appointed to serve as the Data Protection Officer at Prywatne Centrum Medyczne MEDYK-CENTRUM Jan Bińczyk, Al. Wolności 34, Częstochowa.
The Data Protection Officer may be contacted by email at: iod@netbel.pl

 

GDPR Information clause for patients

  1. Downolad: GDPR Information clause for patients.
Zadzwoń