GDPR – Information on the Processing of Personal Data

Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR), we inform that:

The controller of your personal data for the proper performance of dental services is:
Kupalov DM3D Workshop spółka jawna
ul. Juliusza Słowackiego 25/15, 60-822 Poznań
NIP: 7812085007
KRS: 0001157622
REGON: 540986193

For matters related to personal data processing and exercising your rights, please contact us via email:
dm3d.workshop+rodo@gmail.com 

Personal data is processed for the purposes of:

• Medical diagnosis, health protection, provision of medical services, treatment, or management of healthcare systems and services, maintaining medical records of persons using health services – pursuant to: Art. 9 letter h of GDPR, the Act of 6 November 2008 on Patients’ Rights and the Patients’ Rights Ombudsman (Journal of Laws of 2017, item 1318 as amended), and the Regulation of the Minister of Health of 8 December 2015 on the types, scope, and templates of medical documentation and the method of its processing.
• Fulfillment of tax law obligations.

Providing personal data is mandatory under legal provisions, i.e., the Act on Medical Activity and the Act on Patients’ Rights and the Patients’ Rights Ombudsman. Failure to provide personal data may result in refusal to provide services, unless otherwise stipulated by law.

The Controller will not transfer your personal data to third countries or international organizations. The Controller does not engage in automated decision-making, including profiling.

In the case of healthcare services financed by the patient, data will be shared with tax authorities; if financed by other institutions, the data may also be shared with those entities.

Your data will be retained for the period necessary to achieve the processing purposes and in accordance with applicable laws (Art. 29 of the Act on Patients’ Rights and the Patients’ Rights Ombudsman regulates the retention period for medical records – the standard period is 20 years from the end of the calendar year in which the last entry was made, with certain exceptions).

You have the right to:

• request access to your personal data from the Controller,
• rectification,
• portability,
• erasure or restriction if no appointment or procedure has taken place,
• object to the use of personal data.

You have the right to lodge a complaint with a supervisory authority regarding the processing of your personal data by the Controller, if you believe your data is being processed in violation of GDPR.

For additional information regarding data processing, please contact: 
dm3d.workshop+rodo@gmail.com