Zpracování osobních údajů

We would like to inform you herewith of the principles and procedures in processing of your personal data as a patent
by Unicare Medical Center (UMC) in the position of data controller.

Below you may learn about the terms and conditions for the processing of your personal data in the form of F&Q.
Should you have any additional questions or remarks you can contact UMC:
Email: director@unicare.cz
Phone: +420235356553

Does UMC have a data protection officer?
UMC did not appoint data protection officers

What is the purpose and extent of processing my personal data?
UMC processes your personal data, which you provide to it yourself (especially data in the registration form), data on
your health insurance and payment, and data concerning health as well as other data that UM finds out during the
provision of medical services.

What entitles UMC to process my personal data?
UMC processes your personal data and eventually also other data of third persons (relatives, guardian, employer etc.)
on the basis of the following legal grounds:

• performance of a contract with you on the basis of which we provide you with medical services (this contract does not have to be concluded in writing);
• fulfilment of UMC’s legal obligations (these are obligations arising from special legal regulations governing, for example, the provision of health care services, the keeping of medical documentation and the reporting of paid health care services);
• protection of the legitimate interests of UMC, in particular the interest in the proper and smooth provision of medical services, exercise and enforcement of UMC rights (e.g. notification of the patient to the date of examination, reminder of unpaid services).

If you give UMC your consent, we may process your personal data for the purposes stated in such consent; in such a
case the consent represents the legal ground for the respective data processing.

Can I refuse to provide my personal information?
The processing of your personal data for purposes of providing our medical services is a legal and contractual
requirement and without providing your personal data we cannot provide you with medical services.

To whom can my personal data be passed?
We are entitled / obliged by binding legal regulations to pass on your data to other health care service providers (to
ensure the continuity of health care services provided), health insurance companies, public authorities or persons
authorized to view your health documentation under the Health Services Act.

Your data may also be disclosed to:

• accounting companies authorised to carry out accounting operations;
• companies providing IT solutions authorised to carry out IT administration of software programs used by UMC and companies operating server storage service;
• any other external service providers with access to personal data, such as legal, economic or tax advisors, auditors or computer system suppliers.

All recipients are obliged to maintain confidentiality of your personal data. UMC has entered into personal data
processing agreements with the processors that guarantee an appropriate level of organisational and technical security
of your data.

UMC does not transfer personal data to a third country or to international organisations.

How long will UMC keep my personal data?
If we process your personal data based on the title of performance of obligations following from legal regulations, the
data will be processed by UMC for the period stipulated by said legal regulations.

The data processed on grounds of the contractual performance are processed for the duration of the contract and subsequently - with regard to the legitimate interest of UMC in the exercise and enforcement of rights - for another 4 years, if the contract with your insurance company does not provide for a longer period.

The above periods may be exceeded in individual cases and after assessment of the relevant circumstances, if necessary
e.g. to protect your legitimate interests or legitimate interest of UMC (in the event of outgoing litigation or control by a
public authority, etc.).

UMC will process your personal data always for the period necessary for achieving the purpose of processing.

What are my rights in relation to the processing of personal data?
Below you will find an overview of your rights that you can exercise against UMC at the contacts listed above. Please
note that it may not always be possible to exercise all of these rights or to exercise them in full.

• the right of access to personal data: you are entitled to obtain from UMC a confirmation as to whether or not personal data concerning you are being processed and, if so, you have the right to gain access to such personal data and the basic information on such data processing. At the same time, you have the right to obtain a copy of the processed personal data.
• the right to rectification of personal data: you shall have the right to obtain from UMC without undue delay the rectification of inaccurate personal data concerning you or the completion of incomplete personal data.
• the right to erasure of personal data: you have the right to request that UMC erases without undue delay personal data related to you in certain cases, especially if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed or if you have withdrawn the consent on which the processing of your personal data was based and there is no other legal ground for the processing.
• the right to restriction of processing: In certain cases, you have the right to restrict the processing of your personal data, especially if you deny the accuracy of personal data (for the time needed to verify accuracy) or if UMC does not need personal data any more but you need it to determine, enforce or defend legal claims.
• the right to data portability: based on your request, we will pass on to you or a third party personal data that we process automatically about you on the basis of a contract or your consent.
• the right to withdrawn consent: You have the right to revoke the consent granted to the processing of your personal data if the processing is based on your consent. Withdrawal of consent does not affect the lawfulness of processing based on the consent given before its withdrawal.
• The right to object to processing: If the processing of your personal data is carried out for the purposes of the legitimate interests of UMC or a third party, you also have the right to object to the processing.

If you believe that UMC does not process your personal data in a lawful manner, you have the right to lodge a
complaint with a supervisory authority, which is the Office for Personal Data Protection (address: Pplk. Sochora 27, 170
00 Prague 7).