The Phlebology Clinic / List of rights
The provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (the "General Data Protection Regulation") ("GDPR") grant the data subject a number of rights in relation to the processing of personal data.
Please find below information on the rights you have in relation to the processing of your personal data by Klinika Phlebologii sp. z o.o. ("Administrator"), including as to how and under what conditions they may be exercised. The law, including the RODO, may also provide for other conditions that must be met for the exercise of a given right.
If you have any doubts or questions about your rights in relation to the Administrator's processing of your personal data and how to exercise them, we encourage you to contact the Administrator's designated Data Protection Officer:
You have the right to obtain information from us confirming whether we are processing your personal data.
If your personal data is processed by us, you can access your personal data and obtain information about the processing rules. The information about the processing of your personal data will be provided to you in plain, intelligible language and will specify, among other things, the purpose of the processing, the categories of personal data, the recipients to whom the data may be communicated or the intended period of storage.
Upon your request, we will provide you with a copy of the personal data we process. The exercise of your right to obtain a copy of your personal data must not lead to an infringement of the rights of others.
The processing of incorrect personal data may damage your interests. Therefore, if the personal data we process is incorrect, you may request that it be corrected. If the request is legitimate, we are obliged to correct the data immediately.
If we rectify personal data, we will inform any recipient to whom personal data has been disclosed by us, unless this proves impossible or requires a disproportionate effort.
We make every effort to ensure that, insofar as this is necessary to fulfil our legitimate purposes, the personal data we process is complete. If the personal data we process is incomplete, you have the right to request us to complete it.
Where personal data is supplemented, we will inform any recipient to whom personal data has been disclosed by us, unless this proves impossible or requires disproportionate effort.
Upon your request, we are obliged to delete your personal data without undue delay if:
In the cases set out in the DPA, we may refuse to delete your personal data despite receiving a request to do so. In particular, we may refuse to erase your personal data to the extent that the processing of your personal data is necessary for:
If we delete personal data, we will inform any recipient to whom personal data has been disclosed by us, unless this proves impossible or requires a disproportionate effort.
The processing of personal data will be restricted at your request when:
If processing has been restricted, we may process your personal data:
this does not apply to the storage of personal data.
You have the right to receive from us the personal data that you have provided to us and to send it to another controller. Your personal data will be transferred to you in a commonly used computer-readable format. You have the right to data portability if we process your personal data by automated means, based on your consent or a contract with us.
At your request, your personal data may be sent by us directly to another controller, provided that this is technically possible.
Where the basis for the processing of your personal data is the pursuit of a public interest (Article 6(1)(e) RODO) or our legitimate interest (Article 6(1)(f) RODO), you may object at any time - on grounds relating to your particular situation - to the processing of your personal data.
If you lodge an objection, we will not process your personal data unless we have compelling legitimate grounds for the processing which override your interests, rights and freedoms or there are grounds for establishing, pursuing or defending claims.
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, including profiling. The effect of raising such an objection will be to stop the processing of your personal data for these purposes.
If you believe that the processing of your data violates the law, you may lodge a complaint with the competent supervisory authority, i.e. the President of the Office for Personal Data Protection. The complaint may be submitted in writing or electronically.
The complaint should be submitted to the following address: Urząd Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw.
You will find more information on how to lodge this complaint on the website of the Data Protection Authority https://uodo.gov.pl under "Complaints".
Where the processing of your data is based on your consent, you may withdraw your consent to the processing of your personal data at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out before the withdrawal.
Our priority is to ensure the security of your personal data. If a data breach occurs that may result in a high risk of infringement of your rights or freedoms, we will notify you of the breach.
Feel free to contact us!
