GDPR

In connection with the entry into force of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR), we present information regarding the rules for collecting and processing your personal data.

1. Data controller

The controller of your personal data is Ośrodek Rehabilitacyjny Leśna Polana sp. z o.o. with its registered office at ul. Leśna Polana 1, 72-300 Rzęskowo, registered in the Register of Entrepreneurs of the National Court Register under number 0000123456 (District Court in Szczecin), operating the healthcare entity Care and Rehabilitation Centre , entered in the Register of Medical Facilities of the West Pomeranian Voivode under no. RPWDL-123456.

2. Purposes of data processing

3. Scope of data collected

For the purpose of providing services, we collect the following data in electronic and written form:

• Specialist consultations: first name and surname, phone number, home address, PESEL number
• Service contract: first name and surname, home address, PESEL, ID card series and number, phone number, email address, relationship to the Patient
• Medical services: as above plus all health data resulting from medical documentation
• Outpatient rehabilitation: first name and surname, address, phone number, PESEL, email address and data from the rehabilitation process

Notice: Failure to provide personal data results in inability to provide services and enter into a contract.

4. Data retention period

• For the duration of the contract
• After contract termination: for tax, accounting, statistical and archival purposes
• For the pursuit of claims in connection with contract performance
• Maximum 5 years from contract termination (unless other regulations provide otherwise)
• Marketing data: until consent is withdrawn

5. Your rights

6. Additional information

• Your personal data will not be transferred to a third country or international organisation.
• Data processing will not be subject to automated decision-making or profiling (Article 22(1) and (4) GDPR).

7. Contact