PRIVACY POLICY NZOZ CENTRUM TERAPII DIALOG

Who is the administrator of your personal data? The administrator of your personal data is NZOZ Centrum Terapii DIALOG. Address: ul. Stryjeńskich 19 lok. 18U 02-791 Warszawa (hereinafter “We”, or “Administrator”), represented by the Management Board.

How to contact us to get more information about the processing of your personal data? You can write to us about personal data: e-mail address: przychodnia@terapiadialog.pl.

Where do we get your data from? We received them from you as part of the Administrator’s medical activity, who processes personal data concerning health in accordance with applicable legal provisions, with particular emphasis on the Act on Patient Rights and the Patient Ombudsman.

Other ways of obtaining personal data

The Administrator may obtain Users’ Personal Data, such as: identification data (first name, last name, address), contact data (phone number, e-mail address). The Administrator may obtain Users’ Personal Data, in particular, in the following cases:

• providing Personal Data by Users (e.g., via contact form, advisor form, e-mail or telephone contact);
• obtaining or asking Users to provide Users’ Personal Data during Users’ visits to the Administrator’s website or using any functions or resources available on or through the Website.

When Users visit the Website, Users’ devices and browsers may automatically share certain information (such as device type, operating system, browser type, browser settings, IP address, language settings, dates and times of connection to the Website and other technical communication information), some of which may constitute Personal Data. During a visit to the Website, no User Personal Data will be stored by the Administrator without the Users’ prior, express consent. Temporary storage of log files and cookies facilitates the use of our Website. For this reason, Users are asked to express their consent on the Website. Granting the aforementioned consent is optional and does not affect the possibility of using the Website. In some cases, without granting such consent, the possibility of using the Website may be limited to some extent.

What is the purpose and legal basis for the Administrator processing your personal data? We process your personal data because it is necessary to carry out our public utility activity, and we do so on the basis of legal provisions such as:

• act on medical activity;
• act on patient rights and the Patient Ombudsman;
• act on healthcare facilities;
• act on occupational medicine service;
• act on public blood service;
• act on mental health protection;
• act on the healthcare information system and executive acts to the above acts.

If you agree, we process your personal data for the purpose of:

• saving data in cookies, collecting data from websites;
• participation in events organized by the Administrator;
• enabling easier contact;
• offering Administrator’s products and services to users.

You can withdraw your consent to the processing of personal data for purposes other than the performance of public tasks at any time in the same way you expressed it. A statement of withdrawal of consent can be sent to the Administrator’s correspondence address or e-mail address provided above.

Do you have to provide us with your personal data? Yes, because it results from legal provisions, in particular from the Act on Patient Rights and the Patient Ombudsman. We also require you to provide personal data on forms used to register for participation in events organized by us. The scope of data collected by us is specified in the event regulations and depends on its nature. Apart from providing data resulting from legal provisions, providing your data is voluntary.

What are your rights towards the administrator regarding processed data? We guarantee the fulfillment of the following rights resulting from the General Data Protection Regulation (GDPR), i.e.:

• rectification of data, on the basis of art. 16 GDPR; in relation to a request for data rectification, when you notice that the data is incorrect or incomplete.
• The Patient’s right to be forgotten and to delete data does not apply to patients’ personal data processed on the basis of art. 9 sec. 2 lit h GDPR, including in particular data processed as part of medical documentation.
• The Administrator refuses to exercise the Patient’s right to be forgotten and to delete data in relation to personal data contained in medical documentation for the entire period of archiving medical documentation required by law, citing the provision of art. 29 sec. 1 of the Act on Patient Rights and the Patient Ombudsman.
• You have the right to lodge a complaint regarding our processing of your personal data with the supervisory authority, which, as of May 25, 2018, is the President of the Personal Data Protection Office.

To which categories of recipients do we disclose your personal data?
Your personal data may be transferred to:

• entities authorized under applicable law;
• entities providing services:
  • correspondence delivery;
  • archiving services;
  • hosting services;
  • IT support.

The Administrator uses the Google Analytics system, which is used for web analytics, providing insight into Website traffic used for marketing activities.

Data provided by the user or collected automatically by the Administrator are used for:

• proper functioning, configuration, security and reliability of the Website;
• monitoring session status;
• adapting displayed information to user preferences;
• analyses, statistics, research and audit of Website views.

How long do we store your personal data? We store your personal data for the period specified in special legal provisions, for the period necessary to perform contracts. For purposes for which the data subject has consented to the processing of their personal data, these data are stored until consent is withdrawn.

Do we transfer your data to countries outside the European Economic Area?

Data recipients may be located in a country outside the European Economic Area (EEA), however, in this case, the Administrator will ensure an appropriate level of security to protect the data subject. Data transfer to countries outside the EEA may be related to, for example:

• activities undertaken on social networking sites and the use of plugins and other tools from these services (e.g., Facebook, Twitter);
• the use of analytical tools and those used for anonymized tracking of user behavior, in particular such as Google Analytics, Hotjar.

Cookies

The Administrator uses the following Websites:

• www.psychiatrists.pl;
• www.portalpacjenta.psychiatrzy.warszawa.pl.

When the user uses the Website, data concerning the user are automatically collected. This data includes: IP address, domain name, browser type, operating system type. This data can be collected by cookies, the Google Analytics system, and can be saved in server logs.

Cookies are small text files sent to the user’s computer or other end device while browsing the Website. Cookies remember user preferences, which allows for improving the quality of services, improving search results and the relevance of displayed information, and personalizing the website, creating website statistics.

Additional information

Your personal data will be subject to automated decision-making processes, including profiling. This means that based on the personal data we hold about you and information about the products you purchase or services you use, or cookies stored on your device, we will make inferences about your preferences and interests, which may be used to build your marketing profile, our marketing strategy, and further development. Based on the created profiles, we will be able to better adapt our message to your expectations, which means you will receive less irrelevant information and offers for products you are not interested in purchasing.

To contact the Data Protection Officer, please send an e-mail to iod@terapiadialog.pl.