in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council
of 27 April 2016 on the protection of natural persons with regard to the processing of
personal data and on the free movement of such data (hereinafter the “General Regulation”),
inform you that our healthcare facility IVF Clinic a.s., as a personal data manager (the “administrator”),
processes your personal data, and the rights and obligations associated with them.
Personal data is considered to be all information about an identified or identifiable natural person
(also referred to as the “data subject”); an identifiable natural person is a natural person that
can be identified directly or indirectly, in particular by reference to a particular identifier such
as name, identification number, location data, network identifier or one or more specific elements of
physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.
The administrator processes personal data to the extent to which it was provided to it by the data
subject in connection with the conclusion of a health care contract with the administrator or in
connection with the provision of health services in accordance with Act No 372/2011, on health
services and the conditions of their provision (the Health Services Act), its implementing regulations
and other regulations governing the provision of health services. The administrator also processes
personal data that was not provided to it by the data subject, but which it obtains in the provision
of health services, e.g. as results of specific examinations. The administrator processes personal
data in accordance with the valid and generally binding legal regulations of the Czech Republic and
to fulfil its legal obligations.
Your personal data is processed for the following purposes:
The administrator processes personal data it obtains:
The following categories of personal data are subject to processing:
The data subjects whose data are processed by the data administrator and to whom this information is addressed are:
Personal data is processed in particular in the patient’s medical file in full
compliance with applicable laws. Their security and protection is ensured in accordance
with these regulations and in accordance with the General Regulation.
Processing is done manually in paper and electronic form or automated by
computer technology, subject to all security principles for managing and processing personal
data. To this end, technical and organizational measures have been taken by the administrator,
in particular those to prevent unauthorized or accidental access to personal data, alteration,
destruction or loss, unauthorized transmission, unauthorized processing and other misuse of
such personal data. All subjects to whom personal data may be made available respect the rights
of data subjects to privacy protection and are required to comply with applicable data protection laws
The administrator shall process personal data for the time necessary for the fulfilment
of the given purpose and in accordance with the time limits specified in the relevant
generally binding legal regulations of the Czech Republic for discarding and archiving
of documents, or as long as it needs them for the determination, exercise or defence of legal claims.
The recipients of personal data of data subjects are:
As a personal data administrator, you are entitled to do the following in our company:
If we receive your request, we will inform you about the measures taken without undue delay and,
in any case, within one month after the receipt of the request. This time limit can be extended by another two
months if necessary and given the complexity and number of requests. In certain cases laid down in the General
Regulation, our company is not obliged to comply with the request in whole or in part. This will be the case
in particular if the request is clearly unreasonable or disproportionate, in particular because it is repeated.
In such cases, we may (i) impose a reasonable fee, taking into account the administrative costs associated with
providing the requested information or communication or with making the requested actions, or (ii) refuse to comply with the request.
If we receive the above request, but we will have reasonable doubt as to the
identity of the applicant, we may ask him/her to provide the additional information necessary to confirm his/her identity.
In addition, you have the right to contact the Office for Personal Data Protection directly if you believe
that personal data are not processed in accordance with legal regulations, in the place of your habitual residence,
place of employment, or where there was an alleged violation. If, as a result of the processing of your personal data,
you incurred damage other than property damage, a special law applies to the claim.
We also inform you that our company has appointed a Data Protection Officer. Contact details of the Officer: Ing. Anna Mityashina, email: email@example.com.
Providing patient’s personal data is a statutory requirement and the patient has an obligation to
provide them as well as a healthcare professional has the right to require them. Failure to provide them may mean
that the administrator will not be able to provide the patient with a healthcare service, thereby damaging the patient’s health or directly endangering his or her life.