Information clause for the patient, using health services and for persons using non-health services in compliance with RODO Basic information on the processing of personal data and health-related data, being a special category of personal data referred to in Article 9(1) RODO Data controller - SANATORIA "SŁOWACKI" SP. Z O.O. Company registration data: Sanatoria Słowacki Sp. z o.o. with its registered office in Busko-Zdrój, at ul. 1 Maja 33, 28-100 Busko-Zdrój; NIP 6551975373; REGON 368430356 ; KRS 0000697752 ; e-mail sanatorium@slowacki.busko.pl :; tel. +48 41 378 78 79; "https://www.sanatoriaslowacki.pl/hotel-slowacki?fbclid=IwAR3x5Ni1KqRILoGZ3T69X4XgZz2Bm6S-70U_lYwrlwVulp6BqPRjPRsNMhM" Processing purposes Making a reservation for a stay at SANATORIA "SŁOWACKI" SP. Z O.O. Cancellation of a reservation or change of reservation date at SANATORIA "SŁOWACKI" SP. Z O.O. Making a banquet reservation at SANATORIA "SŁOWACKI" SP. Z O.O. Making a reservation for cosmetic services and massages at SANATORIA "SŁOWACKI" SP. Z O.O. Assessment of the health condition of a patient reporting to SANATORIA "SŁOWACKI" SP. Z O.O. Selection of an appropriate treatment or health service for a patient reporting to SANATORIA "SŁOWACKI" SP. Z O.O. Provision of health prophylaxis Provision of appropriate health service by SANATORIA "SŁOWACKI" SP. Z O.O. Legal basis for processing - Performance of an agreement to which a party is data subject or to take action at the data subject's request prior to entering into a contract (pursuant to Art. 6(1)(b) RODO) Fulfilment of a legal obligation incumbent on the controller, i.e. the obligation to fulfil the purposes of preventive health care, pursuant to Art. 9(2)(h) in connection with Article 6(1)(c) RODO in connection with Article 24(1) of the Act of 6 November 2008 on Patients' Rights and Patients' Rights Ombudsman; Consent to the processing of personal data Recipients of data Entities processing data on behalf of SANATORIA "SŁOWACKI" SP. Z O.O., Rights related to data processing Right of access to personal data and right to demand their rectification or restriction of their processing Other rights specified in the detailed information Details of personal data and health-related data processing 1. Personal data controller The controller of personal data and health-related data shall be SANATORIA "SŁOWACKI" SP. Z O.O. with its registered office in Busko-Zdrój (hereinafter: SANATORIA "SŁOWACKI"). Contact with SANATORIA "SŁOWACKI" is possible in the following manner: a) by mail to the address: 1 Maja 33, 28-100 Busko-Zdrój b) by e-mail: rodo@slowacki.busko.pl c) by telephone: 41 378 78 79 2.Data Protection Officer A Data Protection Officer has been appointed at SANATORIA "SŁOWACKI". This is a person who can be contacted in all matters concerning the processing of personal and health data and the exercise of rights related to data processing. The DPO can be contacted as follows: - by letter to: 1 Maja 33, 28-100 Busko-Zdrój - by e-mail: rodo@slowacki.busko.pl - by telephone: 41 378 78 79 3. Purposes of processing and legal basis for processing SANATORIA "SŁOWACKI" will process personal and health data in order to: make a reservation for a stay at SANATORIA "SLOWACKI" cancel a reservation for a stay or change the date of a reservation at SANATORIA "SLOWACKI" make a reservation for the organisation of a banquet at SANATORIA "SLOWACKI" make a reservation for beauty services at SANATORIA "SLOWACKI" make a reservation for massages in SANATORIA "SLOWACKI" assess the health condition of a patient applying to SANATORIA "SLOWACKI" choose an appropriate treatment or health service for a patient applying to SANATORIA "SLOWACKI" provide preventive health care for a patient applying to SANATORIA "SLOVAKIA" 4 The legal basis for the processing of personal data and health data is: a) Performance of a contract to which the data subject is a party, or to take action at the request of the data subject prior to entering into a contract (pursuant to Article 6(1)(b) RODO) b) Rule of law (Article 9(2)(h) RODO) pursuant to which processing is necessary for the purposes of preventive health care c) Consent to the processing of personal data and health data. (h) RODO) according to which the processing is necessary for the purposes of preventive health care c) Consent to the processing of personal data 5. Period of storage of personal data and health data a) SANATORIA "SŁOWACKI" shall store personal data for a period no longer than is necessary for the purposes for which the data are processed (pursuant to Art. 5(1)(e) RODO), subject to the regulations below. b) SANATORIA "SŁOWACKI" will store personal data : for 5 years counted from the end of the calendar year in which the tax obligation arose, processed (stored) all data processed for accounting purposes and for tax reasons (invoices bills) for the period of limitation of claims, resulting from the provisions of the Civil Code, if the data were processed in order to assert claims c) SANATORIA "SŁOWACKI" will store health data in accordance with Art. 29(1) of the Act of 6 November 2008 on Patients' Rights and Patients' Rights Ombudsman in conjunction with Art. 2(1) para. 10) of the Act of 15 April 2011 on therapeutic activity, i.e. for a period of: 20 years, counting from the end of the calendar year in which the last entry was made; 22 years - in the scope of medical records concerning children under 2 years of age, 30 years - in the case when the data are necessary to monitor the fate of blood and its components or when the patient's death due to injury or poisoning occurred, counting from the end of the calendar year in which the death occurred. 10 years - in the case of X-ray images stored outside the patient's medical records, counting from the end of the calendar year in which the image was taken; 5 years - in the case of a referral for examination or a doctor's order, counting from the end of the calendar year in which the health service which was the subject of the referral or the doctor's order was provided; 2 years - in the case of a referral for examination or a doctor's order, if the health service was not provided due to the patient's non-appearance within the established time limit, unless the patient collected the referral, counting from the end of the calendar year in which the referral was issued. 6 Recipients of data SANATORIA "SŁOWACKI" shall transfer personal data and health-related data to entities cooperating with SANATORIA "SŁOWACKI", to which it orders the performance of a service related to the processing of personal data and health-related data. Such entities shall process the data on the basis of an agreement concluded with SANATORIA "SŁOWACKI". 7 Rights in relation to the processing of personal data and health data and automated decision-making The data subject shall have the following rights in relation to the processing of personal data or health data : a) the right of access to personal data and health data; b) the right to request the rectification of personal data and health data; c) the right to request the erasure of personal data pursuant to Art. 17 para. lit. c RODO d) the right to request the restriction of processing of personal data and health data; e) the right to object to the processing of data due to a particular situation - in cases where data are processed on the basis of a legitimate interest of SANATORIA "SŁOWACKI"; f) the right to personal data portability, i.e. the right to receive from SANATORIA "SŁOWACKI" personal data in a structured, commonly used IT format suitable for machine reading. Upon request, SANATORIA "SŁOWACKI" may send this data to another data controller or request, if technically possible, such a transfer. The right to transfer personal data shall only apply to those data which SANATORIA "SŁOWACKI" processes on the basis of a contract or on the basis of consent. In order to exercise the above rights, please contact SANATORIA "SŁOWACKI" or the Data Protection Officer (contact details in points 1 and 2 above. g) The right to withdraw consent to the processing of personal data, if the processing is based on consent; To the extent that the data are processed on the basis of consent - you have the right to withdraw your consent to the processing at any time. The withdrawal of consent shall not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal. Consent can be withdrawn by sending a statement of withdrawal of consent to SANATORIA "SŁOWACKI". Right to lodge a complaint to the authority You also have the right to lodge a complaint to the supervisory authority dealing with personal data protection, i.e. the President of the Office for Personal Data Protection.