Longevity Center sp.z o.o. takes care of the privacy of customers and processes personal data in accordance with the principles of personal data processing set out in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (general regulation on data protection) (Journal of Laws EU.L.2016.119.1) – (hereinafter: “GDPR”).
Information on the Policy
In accordance with art. 13 GDPR Longevity Center sp.z o.o. informs that:
1) The administrator of your personal data is Longevity Center sp.z o.o. (hereinafter: “Administrator”) with its registered office in Warsaw at ul. Belwederska 9, zip code 00-761, entered into the Register of Entrepreneurs of the National Court Register under the number 0000796083, NIP 5252796113, REGON 38394670800000, which can be contacted via the e-mail address: email@example.com by phone at: +48 697 752 855 or in writing to the address of the Administrator’s registered office.
2) Data Protection Officer at Longevity Center sp.z o.o. is Urszula Szybowicz who can be contacted via the e-mail address: firstname.lastname@example.org, by phone at +48 697 752 855 or in writing to the address of the Administrator’s registered office. You can contact the data protection officer in all matters regarding the processing of personal data and the exercise of rights related to their processing.
3) Your personal data will be processed:
a) in order to achieve the health purposes of processing personal data pursuant to art. 9 item 2 letter h) GDPR in connection with the performance of medical activities in accordance with the Act of 15 April 2011 on medical activities (Journal of Laws No. 112, item 654) while maintaining the obligations arising from the Act of 6 November 2008 on patient rights and the Ombudsman for Patient Rights ( Journal of Laws 2009 No. 52, item 417, as amended) .;
b) in connection with the consent to the processing of personal data for marketing purposes – Art. 6 clause 1 lit. and GDPR;
c) to defend the rights and pursue claims by the Administrator in connection with his activities pursuant to art. 6 clause 1 lit. f GDPR;
d) in order to keep accounting books and tax settlements pursuant to art. 6 clause 1 lit. c GDPR in connection with the Accounting Act of September 29, 1994 (Journal of Laws No. 121, item 591, as amended), Act of August 29, 1997 – Tax Code (Journal of Laws No. 137, item 926, as amended) and the Act of 11 March 2004 on tax on goods and services (Journal of Laws No. 54, item 535);
4) For the purposes of the abovementioned purposes, we will process your personal data:
name and surname, place of residence, date of birth, PESEL (personal identification number), e-mail address, gender, in the case of a minor – surname and first name (names) of the legal representative and his address, description of the state of health or health services provided to him;
5) The recipient of your personal data may be entities authorized to obtain personal data on the basis of applicable law. The recipient of data may also be entities processing personal data at the request of the Administrator, including IT system providers, service providers providing the Administrator with technical and organizational solutions, enabling the provision of health services and organization management (in particular ICT service providers, diagnostic equipment suppliers, courier companies and postal service providers), marketing service providers, advisory service providers, persons authorized in connection with the exercise of Patient’s rights. Personal data collected by the Administrator may also be made available on the basis of legal provisions, including Art. 26 section 3 of the Act of November 6, 2008 on patient rights and the Ombudsman for Patients’ Rights (Journal of Laws of 2009 No. 52, item 417, as amended).
6) Your personal data in connection with commissioning services to external entities will not be transferred to a third country.
7) You have the right to:
a) access to your personal data and receive a copy thereof;
b) rectify (correct) your personal data;
c) to delete personal data in a situation where the processing of personal data is not carried out in order to fulfill the obligation arising from the provision of law;
d) to limit the processing of personal data;
e) to object to the processing of personal data;
f) withdrawal of consent to the processing of personal data in the scope of data that is processed on the basis of consent;
8) Providing personal data is voluntary.
9) The administrator of personal data provides medical documentation to you or your legal representative, or to a person authorized by you.
10) You have the right to authorize in written statements the persons you indicate:
a. to obtain information about your health condition and health services provided,
b. to obtain medical records.
11) The administrator of personal data provides appropriate technical and organizational measures to ensure the security of your personal data, in particular preventing access to them or processing by third parties in violation of the law, preventing data loss, damage or destruction.
12) Your medical records, including personal data processed in the documentation, are stored for a period of 20 (twenty) years in accordance with art. 29 of the Act of November 6, 2008 on patient rights and the Ombudsman for Patients’ Rights (Journal of Laws 2009 No. 52, item 417, as amended), with the exceptions listed in the abovementioned provision. In the case of processing personal data for the purpose of pursuing claims, they are processed for the period of limitation of claims, resulting from the provisions of the Civil Code. All data processed for the purposes of accounting and for tax reasons are processed for a period of 5 (five) years from the end of the calendar year in which the tax obligation arose. In the case of processing personal data on the basis of consent to data processing for marketing purposes, personal data are processed from the moment of consent until its withdrawal. After the abovementioned periods, personal data is deleted or anonymized.
13) Your personal data are not and will not be processed in an automated manner, including in the form of profiling.
14) You have the right to lodge a complaint with the Office for Personal Data Protection if you believe that the processing of personal data violates the provisions of the GDPR or the Act on the Protection of Personal Data of 10 May 2018 (Journal of Laws of 2018 item 1000).
15) Contact details of the Personal Data Protection Office: ul. Stawki 2, 00-193 Warsaw, tel. 22 531 03 00, Hotline: 606-950-000 (10.00 – 13.00).