Detailed information on the processing of personal data by Rehasport Diagnosis Sp. z o.o. at Górecka 30, 60-201 Poznań (Poland)

1. Personal data controller

The controller of your personal data will be Rehasport Diagnostyka Sp. z o.o., ul. Górecka 30, 60-201 Poznań (refered to as “Us” or “We”). You can contact us as follows:

• by post to the following address: Rehasport Diagnostyka Sp. z o.o., ul. Górecka 30, 60-201 Poznań (Poland)
• by e-mail: biuro-diagnostyka@rehasport.pl,
• by telephone:+48 / 616 281 148.

2. Data Protection Officer

We have appointed a data protection officer. This is the person you can contact in all matters relating to the processing of your personal data and the exercise of your rights in relation to data processing. You can contact the officer as follows:

• by post to the following address: Joanna Wiese, Rehasport Diagnostyka Sp. z o.o., ul. Górecka 30, 60-201 Poznań (Poland)
• by e-mail: iod-diagnostyka@rehasport.pl

3. Purposes of processing your personal data and legal basis for processing

We will process your personal data to:

• provide with medical services,
• make business settlements,
• handle complaints if received,
• provide materials to promote the controller's own products and services,
• archive your data in accordance with legal regulations,
• ensure security of persons and property (video surveillance of the clinic),

The legal bases for processing your data:

• legal provisions,
• the legitimate interest of direct marketing of the controller's own services (including profiling) and the assertion of claims, as well as ensuring the safety of persons and property,
• Your consent.

4. Information on profiling for marketing purposes

On the basis of your personal data, we perform profiling, which is the automated assessment of certain personal factors about you.

We undertake profiling to appropriately select communications and promotional materials for the activities of the data controller. We will select appropriate content for information and promotional materials based on your profile. We use the following data for profiling: patient number, first name, last name, age, gender, date of birth, city, facilities visited, type of product purchased, source of data acquisition. In addition, when profiling, we take into account statistical data on website behaviour.

5. Retention period of your personal data

We will keep the data we process on the basis of a contract for the provision of healthcare services for the purpose of providing healthcare services for the period specified by the contract, by law, and in the legitimate interests of the data controller (marketing including profiling) until you object. We will process the data we process on the basis of your consent until you revoke it.

6. Recipients of your personal data

We will forward your personal data to:

• entities processing data on behalf of the data controller,
• entities authorised by law,
• to entities authorised by you.

7. Transfers of data outside the European Economic Area
   Due to the fact that we use other suppliers, e.g. for ICT support, your personal data may be transferred outside the European Union. We assure you that in such a case the transfer of data will take place on the basis of an appropriate agreement between Rehasport Diagnostyka Sp. z o.o. and the entity, containing standard data protection clauses adopted by the European Commission.
8. Your rights related to personal data processing
   
   

You have the following rights in relation to the processing of your personal data:

• the right to object to processing for marketing purposes - as we are processing your data for marketing purposes on the basis of a legitimate interest,
• the right to object to processing on grounds of special circumstances — where we process your data on the basis of our legitimate interests,
• the right to access your personal data,
• the right to request the rectification of your personal data,
• the right to request the deletion of your personal data, only if we are not obliged by law to process it,
• the right to request the restriction of the processing of your personal data,
• the right to transfer your personal data, i.e. the right to receive your personal data from us , in a structured, commonly used and machine-readable computer format. You may transfer this data to another controller or request that we transfer your data to another controller. However, we will only do this if such a transfer is technically possible.

To exercise the above rights, please contact us or our Data Protection Officer (contact details — see points 1 and 2 above).

Right to lodge a complaint to an institution
You also have the right to lodge a complaint with the supervisory authority dealing with the protection of personal data, i.e. the President of the Personal Data Protection Office.

9. Obligation to provide the data

The receipt of personal data was dictated by the condition of being covered by the contract for the provision of health services and by a statutory requirement.

Diagnosis information clause – marketing

Detailed information on the processing of personal data processing for marketing purposes by Rehasport Diagnostyka Sp. z o.o., at ul. Górecka 30, 60-201 Poznań.

1. Personal data controller

The controller of your personal data will be Rehasport Diagnostyka Sp. z o.o., ul. Górecka 30, 60-201 Poznań (refered to as “Us” or “We”). You can contact us as follows:

• by post to the following address: Rehasport Diagnostyka Sp. z o.o., ul. Górecka 30, 60-201 Poznań (Poland)
• by e-mail: biuro-diagnostyka@rehasport.pl,
• by telephone:+48 / 616 281 148.

1. Data Protection Officer

We have appointed a data protection officer. This is the person you can contact in all matters relating to the processing of your personal data and the exercise of your rights in relation to data processing. You can contact the officer as follows:

• by post to the following address: Joanna Wiese, Rehasport Clinic Sp. z o. o., ul. Górecka 30, 60-201 Poznań (Poland)
• by e-mail: iod-diagnostyka@rehasport.pl

1. Purposes of processing your personal data and legal basis for processing

We will process your personal data to carry out direct marketing of our products and services and, if you have given your consent, of Medicover Poland's products and services.
We will, for example, send out information on products, promotions and competitions and conduct marketing research. We will also carry out profiling for marketing purposes. We will process your personal data on the basis of your consent, which you can withdraw at any time.

1. Information on profiling for marketing purposes

Based on your personal data, we perform profiling, which is the automated assessment of certain personal factors about you. We perform profiling to better understand your interests and needs regarding the products and services we offer. Based on your profile, we will send you information tailored to your preferences in terms of tailoring the subject matter of the content and promotional, educational, informational materials we send you, offering products, researching the market and public opinion, and making measurements that allow us to improve our services. We use the following data for profiling: first name, last name, age, gender, date of birth, city, establishments visited, type of product purchased, and source of data acquisition. In addition, when profiling, we take into account statistical data about your behaviour on websites and your preferences expressed on Rehasport Clinic Sp. z o.o. websites and applications.

1. Retention period of your personal data

We will keep your data until you withdraw your consent to process your personal data.

1. Recipients of your personal data

We will transfer your personal data to our suppliers to whom we outsource personal data processing services, such as;

• IT service providers,
• marketing agencies,
• research agencies.

Such entities process data on the basis of a contract with us and only in accordance with our instructions.

1. Transfers of data outside the European Economic Area

Your personal data will not be transferred to recipients located in countries outside the European Economic Area.

1. Your rights related to personal data processing

You have the following rights in relation to the processing of your personal data:

• the right to withdraw your consent,
• the right to access your personal data,
• the right to request the rectification of your personal data,
• the right to delete your personal data,
• the right to request the restriction of the processing of your personal data,
• the right to transfer your personal data, i.e. the right to receive your personal data from us , in a structured, commonly used and machine-readable computer format. You may transfer this data to another controller or request that we transfer your data to another controller. However, we will only do this if such a transfer is technically possible.

To exercise the above rights, please contact us or our Data Protection Officer (contact details — see points 1 and 2 above).

Right of withdrawal of consent
Your personal data is processed on the basis of your consent. You therefore have the right to withdraw your consent to data processing at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of your consent before the withdrawal. You can withdraw your consent by contacting Customer Services on the telephone number: +48/ 616 281 148 or by sending an email to wycofajzgode-diagnostyka@rehasport.pl.

The right to lodge a complaint to an institution
You also have the right to lodge a complaint with the supervisory authority dealing with the protection of personal data, i.e. the President of the Personal Data Protection Office.