Privacy Statement

1. Personal Data Administrator

Administrator of personal data is Edent Krystian Adamczyk based in Warsaw at Braci Załuskich 3A m 42, registered in the Register of Entrepreneurs by the District Court for the Capital City of Warsaw, using NIP number: 5242734458 and REGON number 38161906900016. The Administrator of personal data can be contacted via email biuro@stomatologiaedent.pl, and by phone at 604055111 or in writing to the Administrator's registered address.

2. Personal Data Processed
In particular, we collect personal data:
Name;
Name;
residence/registration/correspondence address;
PESEL/NIP/ID card or passport number;
e-mail address or other form of electronic communication;
Sensitive data:
health condition (patient's health condition diseases suffered and medical treatments,)
addictions,
And other data voluntarily provided during a visit to the office. 

3. Purpose of data collection
‍Your personal data may be processed for:‍ the purpose of protecting your health, providing medical services, managing the provision of these services, including maintaining medical records.- will be processed on the basis of Article 6(1)(c) and Article 9(2)(h) of the RODO in conjunction with:
- Article 25(1) of the Act on Patients' Rights and Patients' Ombudsman of November 6, 2008.
- Article 10(1)(2) of the Ordinance of the Minister of Health of November 9, 2015 on the types, scope and specimens of medical records and the manner of their processing for the purpose of establishing identity prior to the provision of services, in particular verification of data during telephone and in-person appointments- the Law on Medical Activity of April 15, 2011;

‍for tax and accounting purposes including bookkeeping, issuing bills/invoices for services rendered - will be processed pursuant to the Act of August 29, 1997. - Tax Ordinance and the Act of September 29, 1994. - on accounting.‍for the purposes of asserting and defending against claims - the legal basis for the processing of personal data is the Administrator's legitimate interest in defending or asserting claims related to the service provided (Article 13(1)(f) RODO);‍for marketing purposes - the legal basis is the consent given.‍ for the purpose of correspondence with patients - the legal basis is the Administrator's legitimate interest in correspondence with consumers (Article 13(1)(f) RODO).

4.  Recipients of Data
‍Your data may be transferred to entities processing personal data on behalf of the Administrator, among others, IT service provider, Law Office - however, such entities process data on the basis of a contract with the Administrator and only in accordance with the Administrator's instructions.Personal data are transferred to authorized persons (doctors, assistants, hygienists and office staff) providing medical and hygiene services at the Administrator's office.Your data may also be made available to public authorities, the National Health Fund, authorities of the self-government of medical professions and national and provincial consultants (to the extent necessary for these entities to carry out their tasks, in particular - control and supervision), the Minister of Health, courts (including disciplinary courts), the prosecutor's office, forensic doctors, ombudsmen of professional responsibility (in connection with proceedings).

5. Transfer of personal data to a third country
Patients' personal data will not be transferred to a third country.

6.  Data storage period

For the purpose of protecting your health, providing medical services, managing the provision of these services including the maintenance of medical records
-Your data will be processed for 20 years, counting from the end of the calendar year in which the last entry was made, except:
- medical records in the case of a patient's death due to injury or poisoning, which shall be kept for 30 years, counting from the end of the calendar year in which the death occurred;
- X-rays kept outside the patient's medical records, which are kept for a period of 10 years, counting from the end of the calendar year in which the image was taken;
- referrals for examinations or doctor's orders, which are kept for a period of:
(a) 5 years, counting from the end of the calendar year in which the health service that is the subject of the referral or physician's order was provided,
b) 2 years, counting from the end of the calendar year in which the referral was issued
- in the event that the health care service was not provided due to the patient's failure to appear within the established time limit, unless the patient picked up the referral;
- medical records pertaining to children under the age of 2, which are kept for a period of 22 years.
-‍for tax and accounting purposes - we process for 5 years calculated from the end of the calendar year in which the tax obligation arose
-for claim investigation and defense purposes - for the period necessary to defend against claims;
-for marketing purposes - until you withdraw your previously given consent;
-for correspondence with patients - until you object to the processing of personal data for this purpose, but no longer than for a period of 2 years.

7. Rights of the data subject
In connection with the processing of personal data, you are entitled to:
‍1) access your data and receive a copy of it,
2) rectification of your personal data,
3) erasure of your personal data - when, in your opinion, there are no grounds for the Administrator to process your personal data, you can request erasure,
4) limitation of processing - you may request that the processing of your personal data be limited only to the storage of your personal data or the performance of activities agreed upon with you,
5) to object to processing - you have the right to object to the processing of your personal data on the basis of the Administrator's legitimate purpose,
6) to data portability - you have the right to receive from the Administrator in a structured, commonly used machine-readable format your personal data processed by the Administrator,
7) send this data to another entity - in cases where your personal data is processed on the basis of your consent,
8) lodge a complaint to the supervisory authority - to the President of the Office for Personal Data Protection - 2 Stawki Street Warsaw,
9) withdraw consent to the processing of personal data at any time when the processing is based on consent, except that withdrawal of consent does not affect the legality of processing carried out on the basis of the participant's consent before its withdrawal.

8. Provision of personal data
‍
‍Use of our services is entirely voluntary; however, as a medical entity, we are required to maintain medical records in the manner prescribed by law, including marking the identity of the patient using his/her personal data. In this case, failure to provide data will result in refusal to book an appointment or provide dental services.

Also, for accounting or tax reasons, we have a legal obligation to process your data, failure to provide it may result, for example, in the inability to issue an invoice or a named bill to you.

If you provide us with your phone number or email address, this is done on a voluntary basis - failure to do so will not result in a refusal to provide dental services, but in such a situation you will not be able to receive from us a confirmation of your visit and will not have the opportunity to cancel it via, for example, SMS. Marketing consent is also given on a voluntary basis. This means that refusal to give them does not prevent you from using our services, and at the same time you have the right to revoke the consent given to us at any time.

Cookies
‍
‍1) The site collects automatically only the information contained in cookies.

2) Cookies are text files that are stored on the end device of the service user. They are intended for the use of the website pages. First of all, they contain the name of the website of its origin, its unique number, the time of storage on the end device.

3) The operator of the site (here the name and possibly the address) is the entity placing on the end device of its user cookies and having access to them.

4) The operator of the site uses files (cookies) in order to:

to tailor the content of the website to your individual preferences, primarily these files recognize your device in order to display the site according to your preferences;

preparation of statistics to help learn about the preferences and behavior of users, the analysis of these statistics is anonymous and allows you to adjust the content and appearance of the site to prevailing trends, statistics are also used to assess the popularity of the site;

5) The site uses two main types of files (cookies) — session and permanent. Session files are temporary, they are stored until you leave the site (by going to another page, logging out or switching off the browser). Permanent files are stored on the user's terminal device until they are removed by the user or for the time resulting from their settings.

6) The user can at any time change the settings of his browser to block the use of files (cookies) or each time to obtain information about their placement on his device. Other available options can be checked in the settings of your web browser. Please note that most browsers are set by default to accept the storage of cookies on your end device.

7) The Operator of the Website informs that changes in the user's browser settings may restrict access to certain functions of the Website.

8) Files (cookies) used by the service (placed on the user's terminal device) may be made available to its partners and cooperating advertisers.

9) Information on the settings of web browsers is available in its menu (help) or on the website of its manufacturer.