Search
/ News / Personal data protection

Personal data protection

31. 5. 2018

The purpose of this information is to provide you as a data subject with information about what personal data the hospital collects, for what purposes it is used, and where you can obtain information about your personal data that the hospital processes.

1. WHAT PERSONAL DATA DO WE PROCESS AND FOR HOW LONG?

Multiscan s.r.o., hereinafter referred to as Multiscan, processes personal data and sensitive data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and in accordance with national data protection legislation.

We maintain a database of personal and sensitive data of our patients and are the data controller of this data:

  • Personal data and sensitive data that Multiscan obtains and processes in connection with the provision of healthcare services (medical records),
  • personal data for unambiguous and unmistakable identification,
  • personal data enabling Multiscan to contact you,
  • personal data related to the relationship between Multiscan and the patient.

Personal data is processed by Multiscan in the case of compliance with legal obligations for the period specified by law; in the case of processing necessary for the performance of a contract, for the period necessary to ensure the mutual rights and obligations arising from the contract, i.e. always for at least the duration of the contract; in the case of processing based on the consent of the data subject for the period specified in the consent or until its revocation. After the end of the period of legitimate processing, Multiscan will cease to process your personal data and will ensure its destruction in accordance with the relevant legislation.

2. FOR WHAT PURPOSES AND ON THE BASIS OF WHICH LEGAL TITLES DO WE PROCESS YOUR PERSONAL DATA?

For the purposes of maintaining medical records and other purposes related to the provision of health care, health protection and related activities based on the fulfilment of the legal obligations of the administrator as a health care facility pursuant to Act No. 372/2011 Coll., on health services and conditions of their provision, as amended, Act No. 373/2011 Coll., on specific health services, as amended, and other applicable health care legislation.
For the purposes of the implementation of the contractual relationship with the data subject in the provision of health services, i.e. negotiations on the conclusion of the contract or its amendment, the mutual performance of rights and obligations under the contract, as well as the protection of the rights and legally protected interests of the controller (in particular, securing and asserting legal claims under the contract).
For its internal use, primarily to protect our rights and legitimate interests, in particular to evaluate potential risks, to monitor the quality of services and to optimise the services provided.
For commercial and marketing purposes, i.e. in particular to offer additional services unrelated to the service provided, including the dissemination of commercial communications, pursuant to Act No. 480/2004 Coll., on certain information society services, as amended, on the basis of the voluntary consent to the processing of personal data.
In the case of voluntary consent, it is your free choice whether you provide your consent to the extent proposed by us. Multiscan is bound by the extent of the consent provided. The consent given can be withdrawn at any time. In the event that you withdraw your consent, Multiscan is obliged to stop processing your personal data processed on the basis of the consent provided within a reasonable period of time that corresponds to the technical and administrative possibilities of Multiscan. You may re-grant Multiscan consent to the processing of your personal data.


3. TO WHOM CAN OR MUST WE PROVIDE YOUR PERSONAL DATA?

To health care institutions, registries, state organizations that enter into the process of registration, treatment, control and contact with the patient;
To our processors who carry out partial or full processing of personal data for Multiscan under the relevant contract;
State authorities or public authorities in cases where Multiscan is required by law to provide personal data - in particular state authorities, courts, law enforcement authorities, supervisory authorities, bailiffs, notaries, insolvency administrators, etc;
Other entities, if necessary to protect our rights, e.g. insurance companies, courts, bailiffs, auctioneers; the scope of the personal data provided is limited to the data necessary for the successful assertion of a claim;
To other entities, with your consent.


4. WHAT RIGHTS DO YOU HAVE IN RELATION TO THE PROCESSING OF PERSONAL DATA?

You can request information about what personal data Multiscan processes about you, as well as exercise the other rights listed below, by contacting:

Multiscan s.r.o.
Kyjevská 44
532 03 Pardubice

or at the following e-mail address: dpo@multiscan.cz

As a data subject, you are entitled to request information as to whether or not personal data concerning you are processed by Multiscan and, if so, you have the right to access such personal data and information about:

  • the purpose of the processing of the personal data,
  • the category of personal data concerned,
  • the recipient or category of recipients of the personal data,
  • the period for which the personal data will be kept,
  • the sources of the personal data,
  • whether automated decision-making, including profiling, takes place.


Multiscan will provide you with an initial copy of the personal data processed free of charge. For further copies or if the request is manifestly unfounded or unreasonable, Multiscan may require payment of the costs associated with providing the information, such as postage costs.

If you have provided personal data to Multiscan on the basis of consent, you have the right to:

  • obtain the personal data you have provided in a structured, commonly used and machine-readable format and the right to transfer that data to another controller,
  • to have personal data transmitted directly from one controller to another controller, where technically feasible.


If you become aware or believe that the processing of your personal data by Mutiscan has infringed your rights or violated the obligations set out in the Regulation or in national data protection legislation, you may seek redress using all the means available to the data subject under applicable law, in particular by asking Mutiscan to:

  • rectification or erasure (destruction) of the personal data (except where the processing is necessary to comply with a legal obligation), or
  • restriction (blocking) of processing.


Multiscan will always inform you of the processing of your request without undue delay, in any case within one month of receipt of the request.

You can send your request to: dpo@multiscan.cz

You can also contact the Data Protection Authority directly with your suggestions.

Data Protection Authority

Address: Pplk. Sochora 27, 170 00 Prague 7

tel.: 234 665 111, web: www.uoou.cz

5. CHANGING YOUR PERSONAL DATA

For proper and correct processing, you must notify Multiscan of any changes to your personal data that occur.