GENERAL INFORMATION CLAUSE ON PROCESSING PERSONAL DATA CONTAINED IN MEDICAL DOCUMENTATION

In accordance with Article 13(1) and (2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as "GDPR"), we inform that:

1. the administrator of your personal data is RIDENTEM ANNA ZNAMIROWSKA DENTAL CENTER, Boryczki 6/U1 Street, 33-100 Tarnów (hereinafter referred to as the "Entity").

2. contact details: tel.: 606264663, 146391959, email address: a.znamirowska@ridentem.pl

3. your personal data will be processed by the Medical Entity based on Article 23 and subsequent provisions of the Act of 6 November 2008 on patient rights and the Patient Rights Ombudsman for the purpose of providing you with healthcare services, documenting your health status, and the healthcare services provided to you,

4. in the case of providing healthcare services financed from public funds, your personal data will be processed based on Article 2 and Article 49 et seq. of the Act of 27 August 2004 on healthcare services financed from public funds, and in cases referred to in Article 12 et seq. of the aforementioned Act and based on the specified special provisions, for the purpose of verifying your entitlement to receive healthcare services financed from public funds, as well as for the purpose of settling these benefits with the National Health Fund or another entity financing these benefits,

5. in the case of providing healthcare services financed from public funds, the recipient of your personal data will be the National Health Fund or another entity financing healthcare services,

6. your personal data will be processed by the Medical Entity based on the legally justified interest of the Administrator in order to pursue any claims related to the healthcare services provided to you,

7. the recipients of your personal data may be persons and entities specified in Article 26 of the Act of 6 November 2008 on patient rights and the Patient Rights Ombudsman and in the provisions of specific laws, as well as suppliers of technical/organizational services and solutions (IT service providers, courier companies, postal services, diagnostic equipment suppliers, etc.), legal and advisory service providers (law firms, debt collection companies, etc.), and persons authorized by you.

8. your personal data will not be transferred to a third country,

9. your personal data included in medical documentation will be processed in accordance with the requirements of Article 29(1) of the Act of 6 November 2008 on patient rights and the Patient Rights Ombudsman (Journal of Laws of 2017, item 1318), i.e., for a period of 20 years from the end of the calendar year in which the last entry was made, with the exception of:

1. medical documentation in the event of a patients death due to injury or poisoning, which will be kept for 30 years from the end of the calendar year in which the death occurred,

2. medical documentation containing data necessary for monitoring the fate of blood and its components, which will be kept for 30 years from the end of the calendar year in which the last entry was made,

3. X-ray images stored outside the patients medical documentation, which will be kept for 10 years from the end of the calendar year in which the image was taken,

4. referrals for examinations or orders of a doctor, which will be kept for 5 years from the end of the calendar year in which the healthcare service covered by the referral or order of the doctor was provided, and in cases where the service was not provided due to the patients failure to report within the specified period - for a period of 2 years, unless the patient received the referral,

5. medical documentation concerning children until the age of 2, which will be kept for 22 years.

10. you have the right to access your data, correct it, delete it, limit processing, transfer data, object, and withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal, subject to the principles of collecting and processing data in medical documentation as referred to in Chapter 7 of the Act of 6 November 2008 on patient rights and the Patient Rights Ombudsman and in the provisions of specific laws,

11. you have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO) if you believe that the processing of your personal data violates the GDPR,

12. providing your personal data to the extent resulting from the provisions of law, i.e., the Act on Medical Activity and the Act on Patient Rights and the Patient Rights Ombudsman, is obligatory. Failure to provide personal data will result in the possibility of refraining from providing healthcare services.

13. your data will not be processed in an automated manner, including profiling.