GDPR
INFORMATION CLAUSE - PURPOSE: USE OF SANATORIUM TREATMENT SERVICES
In connection with the implementation of the requirements of the Regulation of the European Parliament and Council (EU) 2016/679 of April 27, 2016 (General Data Protection Regulation "GDPR"), we inform you about the principles of processing your personal data and your rights related thereto.
- The administrator of your personal data is Sanatorium Uzdrowiskowe "Budowlani" Szczawnica M. Gonciarz, W. Gonciarz-Jeziorek Sp. J. 33-386 Podegrodzie, Podegrodzie 183 NIP 734-27-85-657, REGON 492018183, KRS no: 0000155639.
- The contact person regarding the processing of your personal data and the exercise of rights arising from GDPR is the Data Protection Inspector, contact: e-mail: iod@spabudowlani.pl, or by writing to: Sanatorium Uzdrowiskowe "Budowlani" ul. Zdrojowa 28, 34-460 Szczawnica.
- Patients’ personal data is used for the following purposes:
- identifying patients (Art. 6(1)(c) GDPR in connection with Art. 9(2)(h) GDPR);
- keeping medical records in accordance with legal requirements (Art. 6(1)(c) GDPR in connection with Art. 9(2)(h) GDPR);
- contacting in connection with conducted activities and provided services (Art. 6(1)(f) GDPR).
- Processed personal data may include any data necessary for medical activities, including health information.
- Providing personal data necessary for keeping medical records is mandatory.
- Personal data will be stored for at least 20 years from the date of the last entry in the medical records.
- Recipients of the data may be entities providing IT support services, other medical entities to ensure continuity of care, and persons designated by the patient.
- The patient has the right to access data, its deletion, restriction of processing, the right to object and data portability.
- There is a right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office.
INFORMATION CLAUSE - PURPOSE: USE OF TOURISM AND ACCOMMODATION SERVICES
- The administrator of personal data is Sanatorium Uzdrowiskowe "Budowlani" Szczawnica M. Gonciarz, W. Gonciarz-Jeziorek Sp. J..
- Contact with the Data Protection Inspector: iod@spabudowlani.pl.
- Providing personal data is necessary to conclude and perform the contract.
- Data will be processed for the purpose of using tourism services based on Art. 6(1)(b) GDPR.
- Recipients of the data will be only entities authorized under the law and entities involved in service delivery.
- Personal data will be stored for a period of 3 years.
- You have the right to request from the administrator access to data, its correction, deletion or restriction of processing, and the right to data portability.
INFORMATION FOR PERSONS FROM WHOM PERSONAL DATA WERE COLLECTED
Your personal data will be processed for the purposes of providing medical, hotel and recreational services, direct marketing of the Company’s products and services, and protection of persons and property.
The legal basis for data processing is: conclusion and execution of a contract, legal obligation and legitimate interest of the company (direct marketing and video monitoring).
Storage period:
- in the case of medical services – 20 years;
- for other purposes – for the time necessary to achieve the purposes and 5 years to secure potential claims.
INFORMATION FOR PERSONS WHOSE PERSONAL DATA WERE OBTAINED FROM OTHER SOURCES OR THE NFZ
The Company processes the following categories of data: name and surname, PESEL, address of residence, gender, phone number, health information, information about medical procedures and image.
In the case of data from the National Health Fund (NFZ), the administrator obtained them from the Regional NFZ Branches referring for spa treatment services.
INFORMATION CLAUSE - PURPOSE: RECRUITMENT
Your personal data will be processed for the needs of the current recruitment based on Art. 6(1)(a) GDPR and the Labor Code. Data will be stored for the duration of the recruitment (or one year in case of consent for future processes).