Privacy and Cookies Policy for the websites of the EMC Group
The purpose of this Privacy Policy is to explain how EMC Instytut Medyczny S.A., based in Wrocław, collects, uses and protects your personal data, and to describe your rights in connection with the processing of personal data by EMC Instytut Medyczny S.A.
DATA CONTROLLER
EMC Instytut Medyczny S.A., with its registered office in Wrocław (54-144), ul. Pilczycka 144-148, Poland, entered in the register of entrepreneurs of the National Court Register kept by the District Court for Wrocław-Fabryczna in Wrocław, VI Commercial Division of the National Court Register, under KRS number 0000222636, share capital PLN 11,340,000, tax ID (NIP): 8942814132, REGON: 933040945.
EMC Instytut Medyczny S.A. selects and applies, with due care and in proportion to the risk, appropriate technical and organisational measures to protect the data it processes, including protecting the data against disclosure to unauthorised persons, other cases of disclosure or loss, destruction or unauthorised modification, and processing in breach of applicable law. EMC Instytut Medyczny S.A. continuously supervises the data processing and limits access to the data as far as possible, granting authorisations only when necessary.
DATA PROTECTION OFFICER
To ensure the highest level of protection in the processing of personal data, EMC Instytut Medyczny S.A. has appointed a Data Protection Officer.
If you have any questions about the processing of your personal data, please contact the Data Protection Officer at: EMC Instytut Medyczny S.A., Inspektor Ochrony Danych (Data Protection Officer), ul. Pilczycka 144-148, 54-144 Wrocław, Poland, or by e-mail at: iod@emc-sa.pl.
HOW WE COLLECT DATA
EMC Instytut Medyczny S.A. collects ordinary data as well as special categories of data concerning health relating to natural persons, natural persons running a business and partners in civil-law partnerships.
EMC Instytut Medyczny S.A. collects only the data that is necessary.
PURPOSE OF PROCESSING PERSONAL DATA
Personal data is processed solely to ensure the proper provision of services by EMC Instytut Medyczny S.A. and to answer questions sent through the contact form available on the website of EMC Instytut Medyczny S.A.
LEGAL BASIS FOR PROCESSING
As part of its activity, EMC Instytut Medyczny S.A. may collect and process personal data for the following purposes:
- protecting patients’ health, providing medical services to patients (including online registration and teleconsultations) and conducting medical research by EMC Instytut Medyczny S.A. – on the basis of Article 9(2)(a) GDPR and Article 6(1)(c) GDPR,
- providing patients with laboratory results, giving information about the patient’s health and making the patient’s medical records available to a close person indicated by the patient – on the basis of Article 9(2)(a) GDPR and Article 6(1)(c) GDPR,
- promoting and implementing preventive healthcare aimed at protecting patients’ health – on the basis of Article 9(2)(a) GDPR and Article 6(1)(c) GDPR,
- concluding and performing an agreement or taking steps at the request of the data subject before concluding an agreement – on the basis of Article 6(1)(b) GDPR,
- answering, by e-mail or by telephone, a question sent through the contact form on the Controller’s website – on the basis of Article 6(1)(a) GDPR,
- fulfilling the legal obligations of the Controller – on the basis of Article 6(1)(c) GDPR,
- pursuing the legitimate interests of the Controller or a third party, including establishing, pursuing and defending claims, ensuring IT security, and for analytical, archiving and statistical purposes – on the basis of Article 6(1)(f) GDPR.
Providing your personal data is voluntary but is required for the purposes of processing described above. If you do not provide your personal data, EMC Instytut Medyczny S.A. may be unable to achieve these purposes.
PERIOD OF DATA PROCESSING
Your personal data may be processed for the following periods:
- for the purposes defined in points 1, 2 and 3 – for the period of providing medical services and afterwards for the period required by the laws obliging the controller to keep medical records,
- for the purpose defined in point 4 – until the agreement has been fully performed, and afterwards for the period resulting from the regulations on archiving, the limitation of claims and tax law. If the agreement is not performed, the personal data will be deleted without delay,
- for the purpose defined in point 5 – for the period necessary to deal with the enquiry received through the contact form on the website or until consent to the processing of personal data is withdrawn,
- for the purposes defined in points 6 and 7 – for the period necessary to achieve the purpose of processing, but no longer than the period resulting from the regulations on archiving, the limitation of claims and tax law.
After these periods, the data will be deleted.
YOUR RIGHTS
You have the right to:
- access your personal data (Article 15(1) GDPR),
- obtain a copy of your personal data (Article 15(3) GDPR),
- rectify or update your personal data (Article 16 GDPR),
- erasure of your personal data – if you believe that there are no grounds for EMC Instytut Medyczny S.A. to process your data, you may request that EMC Instytut Medyczny S.A. delete it, except where the obligation to process personal data results from the law or the processing is necessary to establish, pursue or defend claims (Article 17 GDPR),
- restrict the processing of your personal data (Article 18 GDPR),
- data portability, i.e. to receive from EMC Instytut Medyczny S.A. information about the personal data processed, in a structured, commonly used and machine-readable format, only to the extent that the personal data is processed on the basis of your consent and by automated means (Article 20 GDPR),
- lodge a complaint with the President of the Personal Data Protection Office (UODO) if you consider that the processing of your personal data infringes the GDPR.
Where the legal basis for processing personal data is the legitimate interest of EMC Instytut Medyczny S.A., you have the right to object to the processing of your personal data (Article 21 GDPR).
To exercise your rights, please contact our Data Protection Officer at: EMC Instytut Medyczny S.A., Inspektor Ochrony Danych (Data Protection Officer), ul. Pilczycka 144-148, 54-144 Wrocław, Poland, or by e-mail at: iod@emc-sa.pl.
RECIPIENTS OF DATA
Your personal data will be processed only by authorised employees of EMC Instytut Medyczny S.A. The recipients of your data may be subcontractors with whom EMC Instytut Medyczny S.A. has concluded service agreements, and external IT service providers under a data processing agreement.
Your data will not be transferred to third countries or international organisations.
PROFILING
EMC Instytut Medyczny S.A. does not make decisions that produce legal effects concerning you or similarly significantly affect you and that are based on automated processing, including profiling.
COOKIES
Cookies are IT data, in particular text files, stored on the end device of the user of this website, which:
a) make it possible to use the services available on the website (e.g. authentication cookies),
b) make it possible to collect information about how the website is used,
c) make it possible to remember the settings selected by the user and to personalise the interface,
d) make it possible to show the user advertising content better suited to their interests.
The website stores the following information for statistical purposes:
a) device type,
b) operating system,
c) web browser type,
d) screen resolution,
e) IP address.
This data is used to optimise the website.
In many cases, the software used to browse websites (the web browser) allows cookies to be stored on the user’s end device by default. Users of this website can change their cookie settings at any time. In particular, these settings can be changed to block the automatic handling of cookies in the web browser settings or to notify the user each time a cookie is placed on their device. Detailed information on the options and ways of handling cookies is available in the software (web browser) settings.
How to change cookie settings may differ depending on the web browser used. Information about cookies can be found in the “Help” section of each web browser.
Please note that restricting or disabling cookies and other similar technologies may affect some of the functions available on this website.
THIRD-PARTY COOKIES
We use cookie-based technology (analytics and advertising cookies) from third parties – external providers. Such cookies may be loaded on our website, and the information they contain may be passed on to these parties. They include:
Google (Google Analytics, Google Tag Manager)
Google Privacy Policy
Google Cookie Policy
Any exchange of data through these companies’ cookies takes place directly between the user’s browser and these services, without further involvement of EMC. The user can block them at any time.
CHANGES TO THE PRIVACY POLICY
EMC Instytut Medyczny S.A. reserves the right to change this Privacy Policy if required by applicable law, if the technological conditions of the website change, or if the change introduces a standard higher than the legal minimum.
Last modified: 16.06.2021
PRIVACY POLICY FOR PERSONAL DATA PROCESSED THROUGH FACEBOOK LEAD ADS
I. GENERAL PROVISIONS
- The Privacy Policy for personal data processed through Facebook Lead Ads (hereinafter: the Privacy Policy) is a document containing information on how data provided through the Facebook Lead Ads function is collected and processed.
- The controller of personal data obtained through the Facebook Lead Ads form is EMC Instytut Medyczny S.A., with its registered office in Wrocław (54-144), ul. Pilczycka 144-188, Poland, entered in the Register of Entrepreneurs kept by the District Court for Wrocław-Fabryczna in Wrocław, VI Commercial Division of the National Court Register, under KRS: 0000222636, NIP: 8942814132, REGON: 933040945 (hereinafter: EMC).
- The person who consents to the processing of personal data in accordance with this Privacy Policy is hereinafter referred to as the User.
II. PERSONAL DATA
- The User’s personal data will be processed in accordance with applicable law, in particular the personal data protection act.
- The User’s personal data will be processed for marketing purposes until consent to the processing of personal data is withdrawn or EMC’s marketing purposes cease.
- In connection with providing personal data, the User has the right to access their data and the right to rectify it, to request that EMC erase it or restrict its processing, the right to data portability, the right to object and the right to withdraw consent to processing at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.
- Providing personal data is voluntary. If the User does not provide personal data, they cannot take part in marketing activities, in particular receive commercial and marketing information.
- By completing the Facebook Lead Ads form, the User provides EMC with the personal data indicated in the form, including:
- the User’s first name and surname,
- the User’s telephone number,
- the User’s e-mail address.
- Withdrawing consent to the processing of personal data by EMC for marketing services offered by EMC will result in these services being discontinued. Consent can be withdrawn by the User sending a statement of withdrawal of consent to the processing of personal data to: iod@emc-sa.pl.
- The User’s personal data is processed by EMC using computer systems that ensure the security of data processing and outside the computer system with technical and organisational measures ensuring a level of data security appropriate to the risk of processing.
- EMC applies the safeguards required by applicable law to protect the personal data processed, in particular against disclosure to unauthorised persons.
III. SENDING COMMERCIAL INFORMATION AND DIRECT MARKETING BY TELEPHONE
- Having obtained the User’s data through Facebook Lead Ads, EMC will contact the User at the e-mail address or telephone number provided in order to deliver marketing content, which may constitute commercial information within the meaning of the Polish Act of 18 July 2002 on the provision of electronic services [Journal of Laws 2020, item 344, consolidated text].
- The User may at any time state that they do not wish to receive marketing notifications from EMC, including withdrawing consent already given. Consent can be withdrawn by the User sending a statement of withdrawal of consent to receive commercial information to: iod@emc-sa.pl.
IV. FINAL PROVISIONS
This Privacy Policy enters into force on 23.08.2023.
This is an English translation provided for information. In case of any discrepancy, the Polish version prevails.
