LIFE sp. z o.o. limited partnership
- Personal data administrator
The administrator of personal data is LIFE sp. z o.o. spółka komandytowa, ul. Grzybowska 43A lok. U8, 00-855 Warsaw.
- Data Protection Officer
We have appointed a data protection officer. This is the person you can contact in all matters related to the processing of personal data and in order to exercise your rights related to data processing. You can contact the inspector at: iod@lifemedicalcenter.pl
- Categories of processed data
For the purposes of the specialized services we provide, we collect and process both ordinary and special categories of personal data.
Your usual personal data processed by us are: name(s) and surname, PESEL number, age, gender, language, date of birth, city, e-mail address, telephone number, image.
In addition, we will need data about your health, in particular, but not limited to, the results of the analysis of the biological material collected from you. Your medical records may also include genetic and biometric data as well as data about your addictions.
- Purposes of processing your personal data and legal bases for processing
For the purposes of providing medical services, we process your personal data of special categories based mainly on Article 9(1) and (2) of Regulation 2016/679 (hereinafter: “GDPR”). We process ordinary categories of data on the basis of Article 6 (1) GDPR. We will process your personal data to:
- Cover you with a medical care contract
- set up and maintain your medical records,
- make settlements with you and with entities that were to pay at least in part for the medical service provided to you, including, if necessary, take debt collection actions, including filing a lawsuit with the court,
- handle your complaints (if received),
- provide you with materials promoting our products and services,
- comply with the obligation to store certain data in accordance with specific legal provisions,
- create statistical studies, compilations and analyses for our internal purposes, taking into account your data,
- perform the obligations resulting from the regulations on official statistics,
- defend against claims related to non-performance or improper performance of medical services,
- pursue recourse claims against our co-workers, contractors and the insurance company that insures our civil liability in connection with the payment of compensation, compensation or pension to you (or to your relatives),
- demonstrate to the tax authorities the performance of an obligation concluded with you or for you for the provision of medical services,
- ensure your safety through the use of video surveillance.
The legal bases for the processing of your data are:
- medical care contract (contract under which a medical service was provided to you) – Article 9(2)(h) of the GDPR,
- legitimate interest of the data controller, which is: direct marketing of our services (including profiling), pursuing claims, in particular under the medical care contract, defence against claims, as well as ensuring the safety of persons and property – Article 6(1)(f) of the GDPR,
- legal provisions – Article 6(1)(c) of the GDPR,
- consent to the processing of personal data of ordinary categories (if you give it) – Article 6(1)(a) of the GDPR and consent to the processing of personal data of special categories (if you give it) – Article 9(2)(a) of the GDPR.
- Profiling Information
On the basis of some of your personal data, we perform profiling, i.e. an automatic assessment of certain personal factors concerning you. We will refer to the result of this assessment as the profile. We carry out profiling in order to properly select communication and promotional materials for our business. Based on your profile, we will select appropriate content for information and promotional materials.
We use the following data for profiling: patient number, name(s) and surname, age, gender, language, date of birth, city, facilities visited, type of product purchased, data source, as well as IP address. In addition, when profiling, we take into account statistical data on behaviour on websites and mobile applications, use of the patient portal and preferences expressed in our websites and applications.
The data you provide will not be subject to automated decision-making.
- Retention period for your personal data
We will store data related to the concluded agreement for a period of 5 years – counting from the end of the calendar year in which the tax payment deadline expired.
The data contained in the medical records will generally be stored for a period of 20 years – counting from the end of the calendar year in which the last entry was made in it. Exceptions to this rule are specified in detail in the Act of 6 November 2008 on Patients “Rights and the Ombudsman for Patients” Rights.
In the case of data processing due to our legitimate interest, we will process it until an effective objection is made.
The storage period for data processed with the use of video monitoring is a maximum of 30 days, unless the image recordings constitute evidence in the proceedings or it has been learned that they may constitute such evidence – in such a case, the storage period is extended until the final conclusion of the proceedings.
- Data recipients
We will share your personal data with:
- medical entities or entities performing medical activity, in order to continue treatment or financial settlement of the service provided,
- entities that cooperate with us on the basis of separately concluded agreements in order to provide professional medical care,
- service providers who provide us with technical and organizational solutions that enable us to manage and provide medical care,
- auditors, controllers or entities authorized by law to inspect the medical care provided or medical documentation,
- law firms and law firms serving us.
- Rights
You have the following rights in relation to the processing:
- the right to access personal data,
- the right to rectify data,
- the right to request the deletion of personal data (only in a situation where we are not obliged by law to process them),
- the right to restriction of processing in certain cases,
- the right to transfer personal data,
- the right to object to the processing of data due to a special situation,
- the right to withdraw consent if we have asked you to provide it (this does not affect the lawfulness of the processing we carried out before its withdrawal).
To exercise the above rights, please contact us or our Data Protection Officer.
You also have the right to lodge a complaint with the President of the Office for Personal Data Protection (2 Stawki Street, 00-193 Warsaw).
- Obligation to provide data
Your personal data is needed to provide you with medical care contracts and to comply with legal requirements. For accounting and tax reasons, we have a legal obligation to process data, failure to provide them may result, for example, in the inability to issue an invoice or a personal bill. Consent to the processing of personal data for specific purposes is completely voluntary