Book now
EN

Privacy Policy

In our activities, we place great importance on protecting privacy and personal data. The data mentioned above are processed by us in accordance with the law, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”).

We process personal data only for purposes that have been previously defined and communicated to the data subjects. We ensure that the data we handle are accurate and current. Personal data that are unnecessary for the purposes for which they were collected, or that are incorrect, are deleted. We also implement appropriate measures to protect the processed personal data, including safeguards against unauthorised access.

To promote transparency and fairness in the processing of personal data, below we provide information regarding how personal data are processed in connection with the use of our website https://drtelenga.pl.

Controller and contact with the Controller

The controller of your personal data is Evolve Med Concept sp. z o.o., with its registered office in Konstancin-Jeziorna, ul. Warszawska 10, 05-520 Konstancin-Jeziorna, holding Tax Identification Number (NIP): 1231569261 and REGON: 540217276, entered into the Register of Entrepreneurs kept by the District Court for the Capital City of Warsaw in Warsaw, 14th Commercial Division of the National Court Register under KRS number 0001138794.

You can contact us:

a) by mail: Evolve Med Concept, ul. Warszawska 10, 05-520 Konstancin-Jeziorna;

b) by e-mail: kontakt@drtelenga.pl;

c) by phone: (+48) 798059420.

How we obtain your personal data

We collect your personal data when you use our healthcare services, including before providing the services and during communication with us.

The purpose for which we process your personal data

We process your personal data for the following purposes:

  1. Booking an appointment for the provision of a healthcare service to you, i.e., on the basis of Article 6(1)(b) of the GDPR (processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract), which concerns basic identification data (name and surname, email address, telephone number). The aforementioned data are processed until the service is provided, or for a period of up to 3 months from the planned service date if the service is not provided.
  2. Conclusion and performance of a healthcare service contract with you, i.e., based on Article 6(1)(b) of the GDPR (processing is necessary for the performance of a contract to which the data subject is a party or to take steps at their request prior to entering into a contract) and Article 9(2)(h) of the GDPR (processing is necessary for purposes such as preventive or occupational medicine, assessment of the employee’s working capacity, medical diagnosis, provision of healthcare or social care, treatment, or management of healthcare or social care systems and services), which involves ordinary data (name, surname, date of birth, PESEL number, gender, type, series and number of identity document, residential address, email address, telephone number, etc.) and sensitive data (health-related data, genetic data; we may also process data revealing racial or ethnic origin, religious beliefs, information about place of work, or family status). The aforementioned data are processed for the period of archiving medical documentation as specified in Article 29 of the Act of 6 November 2008 on Patients’ Rights and the Patient Ombudsman, generally for 20 years.
  3. Implementation of the rights to which you are entitled as a patient, i.e., based on Article 6(1)(c) of the GDPR (processing is necessary for compliance with a legal obligation to which the controller is subject), Article 9(2)(c) (processing is necessary to protect the vital interests of the data subject or another natural person, where the data subject is physically or legally incapable of giving consent), and Article 9(2)(h) of the GDPR (processing is necessary for the purposes of preventive or occupational medicine, assessing the employee’s work capacity, medical diagnosis, providing healthcare or social care or treatment, or managing healthcare or social care systems and services), which relates to health information as well as the keeping, archiving, and making available of medical documentation. The aforementioned data are processed for the period of archiving medical documentation specified in Article 29 of the Act of 6 November 2008 on Patients’ Rights and the Patient Ombudsman, generally for 20 years.
  4. Correspondence with you, including via a contact form, archiving of correspondence, and handling of complaints, is conducted based on Article 6(1)(f) of the GDPR (processing is necessary for the legitimate interests pursued by the controller or a third party, unless such interests are overridden by the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data). On this basis, we may process personal data you provide in correspondence to us, such as name, surname, email address, and telephone number, which we will process until the need to contact you ceases, but no longer than 3 months after such contact ends.

Recruitment, i.e., based on Article 6(1)(b) of the GDPR (processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject before entering into a contract). On this basis, we process your personal data to the extent that it includes your name(s), surname, date of birth, contact details, education, professional qualifications, and previous employment history. The remaining data included in the application are processed based on your consent (Article 6(1)(a) of the GDPR). With your consent, the aforementioned data are also processed for the purposes of future recruitment. The personal data specified are processed until the end of the recruitment process, no longer than 6 months, and in the case of consent for future recruitment purposes, until the consent is withdrawn.

In all other cases, i.e., when personal data are collected for a different purpose, on a different legal basis, or when we collect data to a different extent and process them for a different period, the above information is specified in the relevant information clauses that we provide when collecting the data.

Our obligations

The personal data entrusted to us are kept confidential and safeguarded against unauthorised access by third parties.

We do not profile or process the personal data entrusted to us in an automated manner.

Who may receive your data

Recipients of your personal data may include our employees or associates, i.e., persons with whom we cooperate to perform professional duties; external service providers, i.e., entities whose services we use for data processing, particularly providers of IT systems and IT services, as well as providers of services supplying us with technical, IT and organisational solutions that enable us to conduct business activities, including electronic mail, hosting, software, and entities that offer services and tools for project or programme implementation; providers of accounting, legal, and advisory services offering us accounting, legal, or consulting support; and other independent recipients, i.e., entities processing data on our behalf under a data processing agreement, institutions authorised to oversee our activities, or entities entitled to access personal data based on separate regulations.

Your personal data may be transferred to entities whose services we utilise during their processing that are located outside the European Economic Area (EEA). The mentioned countries may not provide the same level of personal data protection as EEA countries. We make every effort to ensure that such data transfer does not lead to a reduction in the level of protection guaranteed by the GDPR. Therefore, your data may only be transferred to third countries or entities for which the European Commission has determined that an adequate level of protection is maintained. The list of countries with a decision from the European Commission confirming sufficient data protection can be found at:
https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en#relatedlinks.

If no such decision has been issued for a third country, personal data may be transferred there only based on standard data protection clauses adopted by the European Commission, standard data protection clauses adopted by the Polish supervisory authority and approved by the European Commission, an approved code of conduct, or an approved certification mechanism. If there are no adequate safeguards in the country to which the data are to be transferred, the transfer will be based on your consent. Before you give your consent, you will be informed of the risks involved in such a transfer.

Your rights in connection with data processing

Regarding the processing of personal data, you have the following rights:

  1. the right to access your personal data, to rectify (correct) or complete them if they are incomplete, to erase them or restrict their processing, to transfer the data, and to obtain a copy thereof;
  2. the right to object to processing;
  3. the right to submit a complaint to the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw) if you believe that the processing of data breaches the law;
  4. where data processing is based on your consent, the right to withdraw your consent to the processing of personal data, provided that the withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

The rights mentioned are granted to you within the limits set by law, including the GDPR. The law, including the GDPR, may specify conditions that must be fulfilled to exercise a particular right.

You are not required to provide us with your personal data. However, please be aware that if you choose not to provide them, we might not be able to offer certain services to you.

Copyright © Evolve Med Concept Sp z o.o. All rights reserved.