Privacy policy

Who is the controller of your personal data?

The controller of your personal data is

Casa Dental, s. r. o., Hlavná 121/5, 040 01 Košice – Staré Mesto City District

• Company ID No.: 54402786
• number: +421 915 755 660
• e-mail: recepcia@casadental.sk

Do we use a processor when processing your personal data?

The controller does not use processors when processing personal data.

For what purposes do we process your personal data and what is the legal basis for the processing?

We may process your personal data without your consent for the following purposes:

processing of personal data based on compliance with a legal obligation

The legal basis for processing your personal data is compliance with our legal obligations as a healthcare provider under:

1. Act No. 580/2004 Coll. on Health Insurance and on the Amendment of Act No. 95/2002 Coll. on Insurance, as amended;
2. Act No. 580/2004 Coll. on Health Insurance Companies, Supervision of Healthcare and on the Amendment of Certain Acts, as amended
3. Act No. 577/2004 Coll. on the Scope of Healthcare Covered by Public Health Insurance and on Payments for Services Related to the Provision of Healthcare, as amended, and
4. Act No. 578/2004 Coll. on Healthcare Providers, Healthcare Professionals and Professional Organisations in Healthcare, as amended
5. Act No. 363/2011 Coll. on the Scope and Conditions of Reimbursement for Medicinal Products, Medical Devices and Dietetic Foods under Public Health Insurance, as amended

When processing personal data, we ensure compliance with the above legislation and the rights of data subjects. We endeavour to handle enquiries and requests from data subjects as quickly as possible, in accordance with the law.

processing of personal data based on a contract

The processing of personal data is necessary for entering into and performing the contract under which we provide healthcare to you.

processing of personal data based on legitimate interest

We may also process your personal data on the basis of our legitimate interest, which is

1. the exercise of rights and fulfilment of obligations arising from the healthcare provided, in particular for the purpose of defending our rights in administrative or court proceedings,
2. providing clients with information about updates relating to the administration of their contract, and
3. making the content of the website www.casadental.sk available

We may process your personal data only with your consent for the following purposes:

• for marketing purposes,
• sending the company’s newsletters

List of personal data processed:

The list of personal data processed depends on the purpose for which we process it.

In the case of the provision of healthcare, i.e. where we process your personal data without your consent, the following data about you is processed:

1. general identification and contact details relating to you as a person insured under public health insurance (first name and surname, personal identification number, date of birth, nationality, health insurance company details, contact details),
2. special categories of personal data – data concerning your health (health data necessary to determine the suitability of proposed medical procedures, diagnoses, data on medical procedures, examination requests, biometric data from X-ray examinations),
3. legal and administrative patient data (e.g. data on informed consent and instructions, identification data of the legal representative in the case of minor patients, names of persons to whom the doctor may provide information about the patient’s health condition, etc.),
4. billing and payment data (data on payments for medical procedures by health insurance companies, data on co-payments for medical procedures not covered by public health insurance, data on payments for above-standard procedures, etc.).

If you visit our website, we process data about your visits to this website, including data on the frequency of visits, location data and any content of questionnaires and contact forms that you complete. The data obtained in this way will make future visits to our website easier by enabling us to provide you with relevant content based on the location and device from which you access our website.

Where personal data is processed on the basis of consent, we process your contact details (first name and surname and e-mail address).

Information on whether the provision of the requested personal data is voluntary or mandatory:

Where the purpose of processing personal data is the provision of healthcare, performance of a contract with you and legitimate interest, the provision of your personal data is not voluntary because it is required either by applicable legislation governing the provision of healthcare, necessary for the performance of a contract with you as the data subject, or necessary for the pursuit of our legitimate interest. You must provide this data; otherwise, we would not be able to provide you with the relevant service (provide healthcare, make the content of the website available, etc.).

Where personal data is processed for direct marketing purposes or for sending newsletters, the provision of personal data is voluntary. You may withdraw your consent at any time electronically by sending a withdrawal of consent to the e-mail address stated in the first section of this notice or in writing to our address also stated in the first section of this notice. After withdrawing your consent, we will no longer be able to provide you with the services for which the consent was given (e.g. we will no longer be able to inform you about developments in dental healthcare, etc.). The withdrawal of your consent does not affect the lawfulness of any processing of your personal data based on the consent you gave before the withdrawal was received.

Categories of recipients

Your data will be accessible to members of the statutory body who act on behalf of our company as the controller.

In addition, our employees who provide you with healthcare or related services, i.e. in particular doctors, nurses and reception staff, will have access to it. These persons are subject to a statutory duty of confidentiality.

Where the purpose of processing personal data is marketing communication and the sending of newsletters, members of the statutory body and reception staff will have access to the personal data.

Which entities have access to your personal data?

Personal data may also be provided to service providers of our company, in particular suppliers of medical equipment, IT equipment, an external accounting company, etc. Such third parties will be subject to contractual and other legal obligations to ensure the confidentiality of personal data and respect the privacy of data subjects. Third parties will have access only to the data they need to perform their activities.

Personal data may be provided to the controller’s advisers in connection with an audit, due diligence relating to corporate and other changes at the controller, etc.

Finally, personal data may be provided to public authorities in the exercise of their powers (e.g. the Health Care Surveillance Authority, the National Health Information Centre, the police, courts, etc.).

How long will we retain your personal data?

We will retain your personal data depending on the purpose of processing the personal data:

• in the case of the provision of healthcare, for the period stipulated under Act No. 395/2002 Coll. on Archives and Registries, as amended; currently this is 20 years from the date on which healthcare was last provided,
• in the case of performance of a contract, for the duration of the contract until the end of the 10th calendar year following its termination (expiry of the objective limitation period due to possible claims for damages arising from incorrectly provided healthcare);
• in the case of legitimate interest, until the expiry of the relevant limitation periods necessary for the exercise of rights or performance of obligations;
• where we process personal data on the basis of your consent, for a period of 5 years from the date on which it was given.

Can your personal data be disclosed publicly?

We will not disclose your personal data publicly.

What about transfers to third countries?

Your personal data will not be transferred to third countries. For the avoidance of doubt, under personal data protection regulations, third countries are countries that are not Member States of the European Union.

Profiling and automated decision-making in the processing of your personal data

Our company does not carry out profiling or automated decision-making when processing your personal data.

Where the purpose of processing personal data is the operation of the website, together with our partners we will use cookies and similar technologies, such as tags and pixels (hereinafter referred to as “Cookies”), to customise and improve your customer experience when using our websites and to provide relevant online advertising. Cookies are small text files containing a unique identifier that are stored on your computer or mobile device so that it can be recognised when a particular website or mobile application is used. They may be used only during your visit or may be used to continuously track your interaction with certain services and content. Cookies help provide important functions and features on our websites and improve your customer experience.

If you consent to Cookies within our services, these files may be used for the following purposes:

• improving the way our websites function,
• improving the performance of our websites,
• providing relevant online advertising, including through social media,
• measuring the effectiveness of our marketing communications, including online advertising.

Your options regarding Cookies in your web browser

Using your browser settings, you can accept or reject new Cookies and delete existing Cookies. You can also configure your browser to notify you each time new Cookies are placed on your computer. More detailed information about how you can manage Cookies can be found using the help function in your browser.

If you choose to disable some or all Cookies, you will not be able to make full use of all the features of our websites. For example, you will not be able to add items to the shopping cart, proceed to checkout or use our products and services that require you to log in.

What rights do you have in connection with the processing of your personal data?

• the right of access to personal data
• the right to rectification of personal data (if you believe that the data we hold in relation to you is inaccurate or incomplete, contact us and we will correct it;
• the right to erasure of personal data – the “right to be forgotten”
• the right to restriction of the processing of personal data
• the right to data portability (data portability is a new right that allows every EU citizen to transfer their data between organisations. This is free of charge and allows customers to change service providers. It consists of the electronic transmission and delivery of data in a structured, commonly used and machine-readable format;
• the right to object to the processing of personal data and the right of the data subject not to be subject to automated individual decision-making, including profiling
• the right to lodge a complaint with the supervisory authority (regarding how we have used your personal data, the Office for Personal Data Protection; e-mail: statny.dozor@pdp.gov.sk; Website: dataprotection.gov.sk; tel. number: +421 232 313 214

Changes to this information

We may change this information from time to time, in particular in the event of changes to applicable regulations governing the processing of personal data or changes to the conditions under which personal data is processed. We will publish all changes on this website or contact you through other communication channels (e-mail, SMS message, etc.).

Contact

If you have any questions about these principles, you can send them to our company’s address or to the e-mail address stated in the first section of this information.