Privacy Policy

Information for patients on the processing of personal data according to the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation). I. Personal Data Controller Company: Dental Smile Time s.r.o. IČO: 27074544 Registered Office: Jablonecká 712, 190 00 Prague 9 – Prosek e-mail: smiletime.cz@gmail.com The Controller is a provider of health services in accordance with Act No. 372/2011 Coll., on Health Services and Conditions of Their Provision, as amended. II. Purpose(s) of Personal Data Processing We process your personal data for the purpose of:

 
• providing health services
 
• reporting of covered health services
 
• billing of non-covered health services
 
• communicating information about health status to you and other authorized persons
• organizing the provision of health services (patient booking)
• keeping records of our income and expenses, received payments, and management, as resulting from regulations governing taxes and accounting

III. Legal Basis for Personal Data Processing The legal basis for the processing of your personal data mentioned in point II is:

 
• fulfillment of our legal obligation (especially Act No. 372/2011 Coll., on Health Services, Act No. 48/1997 Coll., on Public Health Insurance, Act No. 563/1991 Coll., on Accounting, Act No. 586/1992 Coll., on Income Taxes, Act No. 634/1992, on Consumer Protection)
 
• fulfillment of obligations under the healthcare agreement, on the basis of which we provide health services to you (this agreement does not have to be concluded in writing)

IV. Recipients of Personal Data Recipients of your personal data may, in accordance with the provisions of legal regulations in specific cases, in addition to you, be: a health service provider, public authorities, and persons authorized to inspect medical documentation according to § 31, § 32, § 33, and § 65 of Act No. 372/2011 Coll., on Health Services. Personal data may also be processed by processors besides the controller to ensure the purposes described above, based on agreements on personal data processing concluded in accordance with the General Data Protection Regulation. We do not transfer your personal data abroad. V. Personal Data Processing Period Personal data contained in medical documentation are processed for the period determined by Decree No. 98/2012 Coll., on Medical Documentation. Personal data processed for other purposes listed in point III are processed for the period determined by law or for the period during which you are our patient, and subsequently for one year after you cease to be our patient. VI. Rights of the Data Subject When processing personal data, you have the following rights concerning the protection of your personal data:

 
• the right to request access to your personal data from us;
 
• the right to rectification of your personal data that we process;
 
• the right to restriction of processing. Restriction of processing means that we must mark your personal data for which processing has been restricted and must not further process them for the duration of the restriction, except for their storage. You have the right to restriction of processing if:
 
• you contest the accuracy of personal data, for the time necessary for us to verify the accuracy of personal data;
 
• the processing is unlawful and you refuse the erasure of personal data and request instead the restriction of their use;
 
• if we no longer need your personal data for processing purposes, but you require them for the determination, exercise, or defense of legal claims;
 
• if you have raised an objection against the processing mentioned below in point VII, until it is verified whether our legitimate reasons for processing outweigh your interests or rights and freedoms;
 
• the right to erasure of personal data. The right to erasure of personal data only applies to personal data that we process for purposes other than the provision of health services. Data that we keep about you for the purpose of providing health services (e.g., in medical documentation) must not be erased;
 
• the right to data portability. You can request that we provide your personal data to you for the purpose of passing them to another data controller, or that we pass them directly to another data controller. However, you only have this right regarding data that we process automatically based on your consent or a contract with you. However, data that we keep about you for the purpose of providing health services (e.g., in medical documentation) may only be provided to you and, under legal conditions, to another health service provider or public authority.
 
• the right to lodge a complaint with the supervisory authority, in the event that you believe the processing of personal data violates legal regulations on personal data protection. You can lodge a complaint with the supervisory authority at the place of your habitual residence, place of employment, or at the place where the alleged violation occurred. In the Czech Republic, the supervisory authority is the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.

VII. Right to Object to Processing In the event that we process your personal data for the purposes of our legitimate interests or those of someone else (legal bases of processing are listed in point III), you have the right to object to such processing at any time. You can raise an objection at our address mentioned in point I. If you raise such an objection, we will only be entitled to continue such processing if we demonstrate serious legitimate reasons for processing that outweigh your interests or rights and freedoms, and furthermore, if it is processing necessary for the determination, exercise, or defense of legal claims. VIII. Mandatory Processing and Obligation to Provide Personal Data Processing of your personal data for the purpose of providing health services is a legal requirement. Not providing your personal data may mean that we will not be able to provide you with health services, which may result in damage to your health or a direct threat to life (§ 41 para. 1 letter d) of Act No. 372/2011 Coll., on Health Services). The obligation to provide personal data of a patient also applies to their legal representative or guardian (§ 41 para. 2 of Act No. 372/2011 Coll., on Health Services).