GDPR
**Information Obligation Clause**
The administrator of your personal data processed for the purpose of providing you with healthcare is "Fizjoterapia mgr Maciej Gruba" based in Rzeszów at ul. Beskidzka 95/10, hereinafter referred to as the "Administrator" in the sense of Article 4(7) of the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, hereinafter referred to as "GDPR." If you wish to contact us regarding the processing of your personal data, you can do so via the correspondence address or by email at: fizjoterapia.mgruba@gmail.com
**Scope and Purpose of Processed Personal Data**
Your personal data is processed for the purpose of providing you with healthcare within the framework of the services provided by the physiotherapist. Your personal data is processed in the following scope: first name, surname, gender, date of birth, PESEL number (if absent, the type and number of an identity document), residential address, in the case of a minor, also the data of the legal guardian, as well as data on your health condition and the services provided to you. We may also process your email address and phone number for contact purposes, but providing this data is not mandatory for you. We maintain medical documentation for you, which contains all information regarding your health condition and the services provided. This is necessary for establishing a diagnosis and properly conducting your treatment process. Your personal data is processed by the Administrator based on:
• Article 6(1)(b) and (c) and Article 9(2)(h) of GDPR in conjunction with Article 25(1) of the Patient Rights Act and § 10(1)(2) of the Ministry of Health Regulation regarding proper registration and provision of health services;
• Article 9(2)(h) of GDPR in conjunction with Article 24(1) of the Patient Rights Act and the Ministry of Health Regulation regarding maintaining your medical documentation;
• Article 6(1)(b) and (f) of GDPR, as a legally justified interest of the administrator, which is contact regarding appointment reminders, rescheduling, and information about the results of the conducted consultation.
• Article 6(1)(b), (c), and (f) of GDPR and in conjunction with the Act of September 29, 1994, on accounting, we have the right to process your data also for the purpose of pursuing potential claims due to the conducted activity or defending against them, as well as for tax purposes.
Your data may be shared with entities with which the physiotherapist cooperates (i.e., other medical entities), external service providers such as software maintenance or licensing, e.g., the Finezjo application intended for maintaining electronic internal medical documentation. Data regarding health status and services provided to the patient are also shared as part of reporting required by the Act of April 28, 2011, on the information system in healthcare to the e-Health Center based in Warsaw at ul. Stanisława Dubois 5a to the P1 platform.
**Profiling and Data Transfer to Third Countries**
Profiling means that based on the information collected about you, we are entitled to create profiles of our patients' preferences whose personal data is in our databases. Based on this, we adjust our services and communications directed to you. Each time this action takes place with human intervention, not automatically.
Remember that the possibility of not being subject to automated decisions in this regard is your fundamental right that you can exercise at any time.
The Administrator may use the services of external entities providing services necessary for the proper performance of health services, and in connection with this, your personal data may be transferred outside the European Union, for example, in the case of software maintenance. We ensure that the transfer of data will be secured appropriately, including based on a relevant agreement containing standard clauses adopted by the European Commission.
**Do I Provide My Personal Data Voluntarily or Obligatory?**
Providing your personal data is entirely voluntary; however, failure to provide it may result in the refusal to schedule an appointment or even provide health services. The Administrator, when providing physiotherapeutic services, is obliged to maintain medical documentation in the manner specified by law, including identifying the patient using their personal data. Not providing a phone number and email address does not affect the provision of health services, although in many cases, it significantly facilitates communication and the quality of provided services.
**The Duration for Which We Process Your Personal Data**
Remember that if you use our services, your personal data will be processed by the administrator for at least 20 years from the date of entry in your medical documentation. Additionally, this data may be processed by us for the purpose of pursuing claims for the period specified by civil law and for tax reasons for 5 years counted from the end of the calendar year in which the tax obligation arose. After the expiration of the above-mentioned periods, your data is removed or anonymized.
**Information About Your Rights**
The Administrator ensures your right to access your data; you can also rectify it, request its deletion, or restrict its processing. You can also exercise the right to object to the processing of your data and the right to data portability to another data administrator.
We also inform you that you have the right to lodge a complaint with the supervisory authority responsible for enforcing data protection regulations; you can do this by contacting the President of the Personal Data Protection Office at the address below:
Personal Data Protection Office
ul. Stawki 2
00 - 193 Warsaw
Address
Beskidzka 95
Local 10, 1st floor
Rzeszów, 35-083
(above the "Delikatesy Centrum")
Opening hours
8am - 8pm 8am - 2pm Closed
Mon - Fri Sat Sun
Contact
+48 453 035 245