Clinic of One-Day Surgery

Processing of personal data and risk management

Administrator: Palas Athéna s.r.o., Hviezdoslavova 509/25, 149 00 Prague 4, Company ID: 25091468

Dear patients, our healthcare facility processes your personal data for the purpose of providing healthcare services. This includes your identification and address information, such as your first and last name, date of birth, personal identification number, residence, health insurance provider, as well as information about your health status, the course of the provided health services and treatment, including other significant circumstances related to your health condition and the data you provide from your family, personal, and occupational history.

All of these personal data are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and Council and other relevant applicable legislation. The purpose of their processing is to provide accurate and comprehensive healthcare services.

To protect personal data, we have established a security mechanism that includes technical, organizational, and personnel measures. Updates occur once a year.

Only personnel who are part of the Palas Athéna healthcare facility and are bound by mandatory confidentiality, which continues even after the termination of their employment, may handle your personal data.

The recipients of your personal data are the health insurance companies you have chosen and entities that have a legal reason to access it (e.g., the Czech Social Security Administration, court experts, police, and other public authorities).

The retention period for personal data is determined by legal regulation (Decree No. 98/2012 Coll. on healthcare documentation). After this mandatory period expires, the healthcare documentation is destroyed, rendering reconstruction and identification of its content impossible.

Our facility has a functional camera system that monitors public areas and is arranged in such a way that it does not infringe on your privacy in any case. The legal basis is the legitimate interest of the administrator, and the main purpose is to prevent unlawful or criminal activities, thus protecting both your and our property from theft, vandalism, possible aggression, etc.

The employment relationship is based on personnel and payroll records. Palas Athéna s.r.o. is also obliged as an employer to ensure the protection of its employees’ personal data from unauthorized access by unauthorized persons or misuse. Employees’ personal data is retained for the necessary, legally mandated period required for the purpose of processing.

You have the right to request information about the processing of your personal data and access to it. In the case of repeated requests for information and a copy of the processed data, we have the right to charge a reasonable fee for costs. If you discover or believe that the processing of personal data is being carried out in violation of the aforementioned legal regulations, you may request an explanation and ask us to remedy the situation, particularly by requesting correction, deletion, restriction, or destruction of personal data. We will always inform you promptly about the resolution of your request; in cases of deletion, restriction, and destruction, we must comply with applicable legislation, such as the Health Services Act, the Regulation on Health Documentation, etc. You also have the right to contact the Office for Personal Data Protection with your suggestions or complaints at any time.

Details on the protection of personal and sensitive data:

Triton IT