Privacy policy
The operator of the information systems, LV-Medical, s.r.o., with its registered office at Humenská 11, 040 11 Košice, Company ID (IČO): 47 584 581, publishes the following information on personal data protection for data subjects, in order to comply with the principles of fairness and transparency:
pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the “Regulation”) and Act No. 18/2018 Coll. of the National Council of the Slovak Republic on personal data protection and on amendments to certain acts (hereinafter the “Act”)
In its information systems, the operator processes personal data of data subjects (mainly patients and employees, but also third parties) for a precisely specified purpose. The purpose of processing personal data is the reason for which the personal data are processed, and this reason must have a precisely defined legal basis (principle of lawfulness under Articles 6 and 9 of the Regulation).
Personal data are processed on the basis of Section 13(1)(c) of the Act without the consent of the data subject; their processing is necessary to fulfil the purpose of processing under:
- Act No. 576/2004 Coll. on healthcare, services related to the provision of healthcare and on amendments to certain acts, as amended,
- Act No. 578/2004 Coll. on healthcare providers, supervision of healthcare and on amendments to certain acts, as amended,
- Act No. 362/2011 Coll. on medicines and medical devices and on amendments to certain acts, as amended,
- Act No. 153/2013 Coll. on the National Health Information System and on amendments to certain acts, as amended,
- Act No. 311/2001 Coll., the Labour Code, as amended,
- Act No. 355/2006 Coll. on the protection, promotion and development of public health and on amendments to certain acts, as amended,
- Act No. 124/2006 Coll. on occupational health and safety and on amendments to certain acts, as amended,
- Act No. 595/2003 Coll. on income tax, as amended,
- Act No. 461/2003 Coll. on social insurance, as amended, etc. (further legal bases are recorded separately by the operator according to the purpose of processing).
The operator provides personal data to the following recipients: public authorities under the relevant legal regulations, other healthcare providers, and third parties to which a special regulation entrusts the power to decide on the rights and obligations of natural persons (e.g. patients – the Healthcare Surveillance Authority).
The operator does not transfer personal data to third countries. No automated decision-making, including profiling, takes place.
All data subjects whose personal data the operator processes in its information systems for a specifically defined purpose may exercise the following rights (in writing or electronically):
a/ the right of access to personal data (Section 21 of the Act) – the right to obtain from the operator confirmation as to whether your personal data are being processed (as well as access to those data itself), and information about the purpose of processing, the categories of personal data processed, the recipients, the retention period, the right to request from the operator rectification of personal data concerning the data subject, their erasure or restriction of their processing, or the right to object to the processing of personal data, the right to lodge a complaint under Section 100 of the Act, the source of the personal data, the existence of automated individual decision-making and the procedure used in any automated processing.
The operator has the right to use all reasonable measures and means to verify the identity of the data subject who requests access to personal data, in particular in connection with online services and identifiers.
b/ the right to rectification of inaccurate personal data and completion of incomplete personal data (Section 22 of the Act);
c/ the right to erasure of personal data (Section 23 of the Act) – if they are no longer necessary for the purposes for which they were obtained or otherwise processed, – if the consent on the basis of which the processing is carried out has been withdrawn and there is no other legal basis for the processing, – in the case of unlawful processing; if the data subject objects to the processing,
d/ the right to restriction of processing (Section 24 of the Act) may be exercised if the data subject contests the accuracy of the personal data, for a period enabling the operator to verify the accuracy of the personal data; if the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead; if the operator no longer needs the personal data for the purpose of processing, but the data subject needs them for the establishment or exercise of a legal claim; if the data subject has objected to the processing of personal data pursuant to Section 27(1) of the Act, until it is verified whether the legitimate grounds of the operator override the legitimate grounds of the data subject;
e/ the right to data portability (Section 26 of the Act) is the right of the data subject to obtain the personal data concerning them which they have provided to the operator and to transmit those data to another operator in a structured, commonly used and machine-readable format, where technically feasible; the right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the operator.
f/ the right to lodge a complaint initiating proceedings on personal data protection pursuant to Section 100 of the Act with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, if you believe that the processing of personal data is in breach of the Regulation or the Act.
g/ the right to object to the processing of personal data (Section 27 of the Act) on grounds relating to a particular situation. The operator shall no longer process your personal data unless it demonstrates compelling legitimate interests for the processing which override the rights or interests of the data subject, or grounds for the establishment or exercise of a legal claim.
The provision of personal data for the purposes of providing healthcare is a legal requirement under Act No. 576/2004 Coll. on healthcare, services related to the provision of healthcare and on amendments to certain acts, as amended.
LV-Medical, s.r.o., as the operator of the information systems, has adopted all appropriate personnel, organisational and technical measures to protect the personal data of data subjects to the maximum extent and to reduce the risk of their misuse, leakage, etc. as much as possible. We also inform you that, should a situation arise that poses a high risk to the rights and freedoms of natural persons, we will inform you without undue delay.
Notice: In order to comply with the principle of data minimisation, all personal data you provide are a necessary legal or contractual requirement for fulfilling the purpose of their processing. Failure to provide the mandatory data necessary for concluding a contract may result in the contractual relationship not being concluded.
If you have any questions about the protection of your personal data, including the exercise of your rights under the Regulation and the Act, you may contact our data protection officer at ochranaosobneudaje@lv-medical.sk.