GDPR – Personal Data Processing

INFORMATION OBLIGATION OF THE OPERATOR

When processing your personal data, we proceed in accordance with Act No. 18/2018 Coll. on the protection of personal data and amendments to certain laws and Regulation of the European Parliament and of the EU Council 2016/679 of 27 April 2016 on the protection of natural persons in the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC (general data protection regulation).

We process personal data in a legal manner so that your rights are not violated.

1. Operator and contact details of the operator

The operator who processes your personal data in accordance with Act no. 18/2018 Coll. on the protection of personal data and amendments to certain laws, the company Bohdal RAJ s. r. o., Limbová 1, Bratislava – Nové Mesto district 831 01, ID number: 53 524 101, limited liability company, registered in the Commercial Register of the Bratislava I District Court, section Sro, insert no. 149877/B.

E-mail address of the operator: raj@rajzdravia.sk.

2. Intermediary

Personal data processing intermediaries who process it on behalf of the operator may have access to the protected personal data of the affected persons. Description of beneficiary categories: Social insurance, supplementary pension savings, health insurance, Office of Labour, Social Affairs and Family, Central Office of Labour, Social Affairs and Family, local competent tax administrator, doctor performing preventive medical examinations in relation to work, executor, court, commercial insurance companies, educational companies, contractual partners providing external services of financial statement audits and other audits, accounting, technical maintenance and service of computer technology, technical maintenance and service of security camera system, occupational health service, external legal services, etc.

3. The affected person

The affected person is the person whose personal data is processed by the operator (client, legal representative of a minor child, client’s representative).

4. Scope of processed personal data of the person concerned

title, first and last name, address of permanent residence, date of birth, e-mail, telephone, occupation, data on the state of health listed in the health questionnaire for consultations with a doctor/health worker/masseur/therapist/trainer data from the health documentation of the person concerned maintained by her to the general practitioner/specialist doctor you have provided to us, data on the health status kept in the operator’s documentation,
video recordings from the operator’s camera system,
cookies when browsing the website www.rajzdravia.sk, information on the processing of cookies can be found at this link: https://www.rajzdravia.sk/subory-cookies/.

5. Purpose and legal basis of personal data processing

a. Client records and client identification within the ordering system

Processing of personal data based on Art. 13 par. 1 letter b) of the Personal Data Protection Act/Art. 6 par. 1 letter b) of the General Data Protection Regulation (performance of a contract to which the data subject is a party) and Art. 13 par. 1 letter c) of the Personal Data Protection Act/Art. 6 par. 1 letter c) of the general regulation on data protection (fulfilment of the legal obligation of the operator). Conclusion and fulfillment of contracts, including orders and invoices

Processing of personal data based on Art. 13 par. 1 letter b) of the Personal Data Protection Act/Art. 6 par. 1 letter b) of the General Data Protection Regulation (performance of a contract to which the data subject is a party) and Art. 13 par. 1 letter f) of the Personal Data Protection Act/ Art. 6 par. 1 letter f of the General Data Protection Regulation (legitimate interest of the operator).

b. Accounting and related documentation

Processing of personal data based on Art. 13 par. 1 letter c) of the Personal Data Protection Act/Art. 6 par. 1 letter c) of the general regulation on data protection (fulfilment of the legal obligation of the operator).

c. Safety and protection of property, monitoring of natural persons with a camera system.

Processing of personal data based on Art. 13 par. 1 letter
f) of the Personal Data Protection Act/Art. 6 par. 1 letter f) of the General
Data Protection Regulation (legitimate interest of the operator).

d. Exercising the operator’s legal claims against the affected
person (lawsuits, debt collection, etc.)

Processing of personal data based on Art. 13 par. 1 letter f) of the Personal Data Protection Act/Art. 6 par. 1 letter f) of the General Data Protection Regulation (legitimate interest of the operator).

e. Marketing communication

Processing of personal data based on Art. 6 par. 1 letter a) of the Personal Data Protection Act/Art. 6 par. 1 letter a) of the General Data Protection Regulation (consent of the person concerned).

Legal basis for personal data processing – legislation:

Law no. 18/2018 Coll. on the protection of personal data and amendments to certain laws,
Regulation of the European Parliament and of the EU Council 2016/679 of April 27, 2016 on the protection of natural persons in the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC (General Data Protection Regulation),
Law no. 40/1964 Coll. Civil Code,
Law no. 160/2015 Coll. Civil dispute procedure,
Law no. 395/2002 Coll. on archives and registries and on amendments to some laws,
Law no. 431/2002 Coll. about accounting,
Law no. 222/2004 Coll. on value added tax.

6. Principles of personal data processing

We process your personal data in accordance with the principle of legality, the principle of purpose limitation, the principle of minimization of personal data, the principle of correctness, the principle of minimization of storage, the principle of integrity and confidentiality and the principle of responsibility in accordance with Act no. 18/2018 Coll. on the protection of personal data and amendments to certain laws.

7. Your rights in the processing of personal data are as follows:

The right to access personal data – the right to information about what personal data we process and also to provide a copy of the processed personal data.
The right to correct personal data – in the event that we process outdated or inaccurate data of the person concerned (e.g. change of address), you have the right to inform us about this and request the correction of the processed personal data.
The right to delete personal data if they are no longer necessary for the purpose for which they were obtained or otherwise processed, if you have revoked your consent to the processing of personal data and there is no other legal basis for processing your personal data, or if your personal data is being processed illegally.
The right to restrict the processing of personal data if you object to the correctness of the personal data, the processing of personal data is illegal and you object to the deletion of personal data and instead request the restriction of their use, if we no longer need your personal data for the purpose of personal data processing, but you need them for the purpose of exercising a legal right claim or you object to the legality of the processing of personal data, the processing of which is not necessary for the purpose of the legitimate interests of the operator, you have the right to limit the processing of personal data.
The right to transfer the personal data you have provided to us to another operator.
The right to object to the processing of personal data – the right to object to profiling, i.e. automated processing of personal data, if it occurs.
The right of the affected person to file a motion to initiate proceedings – the affected person who claims that he is directly affected by his rights established by Act no. 18/2018 Coll. on the protection of personal data and amendments to certain laws has the right to submit a proposal to initiate proceedings at the Office for the Protection of Personal Data of the Slovak Republic.

8. Provision of personal data of affected persons

The operator processes the client’s personal data in accordance with §13 of Act no. 18/2018 Coll. on the protection of personal data and amendments to certain laws and the aforementioned legislation. The operator does not provide or make available personal data to third parties, with the exception of recipients of personal data for reasons in accordance with the regulation on the protection of personal data and in the sense of fulfilling the legal obligations of the operator.

On behalf of the operator, personal data of clients are processed by intermediaries according to point 2).

9. Cross-border transfer of personal data

There is no cross-border transfer of your personal data.

10. Profiling of personal data

There is no automated processing of personal data.

11. Period of storage of personal data

We store your personal data in accordance with the principle of minimization of storage in accordance with § 10 of Act no. 18/2018 Coll. on the protection of personal data.

Personal data that we process on the basis of your consent are kept at the latest for as long as it is necessary for the purpose for which the personal data is processed.

We keep accounting documents for ten years.

We keep personal data processed for marketing purposes unless you withdraw your consent to their processing, but for a maximum period of five years.

12. Withdrawal of consent to the processing of personal data

You have the right to withdraw your consent to the processing of personal data at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal.

You can revoke your consent: