Privacy policy
Mirrored from the clinic’s own published legal text at hrclinic-international.com. Confirm with the clinic before this page goes live.
1. Personal Data Controller
The personal data controller is:
HR Clinic s.r.o.
ID No.: 23053569
Registered Office: Kotkova 3974/9c, 66902 Znojmo
E-mail: info@hrclinic.cz
Phone: 515 225 520
(hereinafter referred to as the “Controller”)
2. Categories of Processed Personal Data
a) Patients
We process in particular:
- identification data (name, surname, personal identification number, date of birth)
- contact details
- address details
- health status data
- anamnestic data
- data on provided healthcare
b) Employees and Associates
- identification and contact details
- education and qualification data
- payroll and accounting data
- data required by labor law regulations
c) Other Persons (e.g., contact forms)
- name, e-mail, phone
- communication content
3. Purposes and Legal Bases for Processing
Patients
We process patients’ personal data for the purpose of:
- providing health services
- maintaining medical records
- reporting healthcare to health insurance companies
Legal basis:
- compliance with a legal obligation (Act No. 372/2011 Coll.)
- performance of a contract
- protection of vital interests
Employees
- fulfillment of labor law obligations
- maintenance of personnel and payroll records
Legal basis:
- compliance with a legal obligation
- performance of a contract
Contact forms / communication
- handling inquiries
Legal basis:
- legitimate interest or consent
4. Recipients of Personal Data
Personal data may be disclosed to:
- health insurance companies
- public authorities (e.g., courts, administrative bodies)
- IT service providers
- accounting and tax advisors
5. Transfer of Personal Data to Third Countries
Personal data is not transferred outside the European Union.
In the event of using external services, transfer may only occur in accordance with the GDPR.
6. Retention Period of Personal Data
Personal data is retained as follows:
- medical records according to Act No. 372/2011 Coll. and relevant regulations
- accounting documents according to the Accounting Act
- personnel documentation according to labor law regulations
The retention period is governed by the Controller’s filing and destruction rules.
7. Rights of Data Subjects
The data subject has the right:
- to access their personal data
- to the rectification of inaccurate or incomplete data
- to the restriction of processing
- to object to processing
The right to erasure of personal data does not apply if the processing is necessary for the fulfillment of a legal
obligation of the Controller, particularly in the maintenance of medical records.
Patients’ personal data cannot be erased upon request if their retention is mandated by legal regulations.
8. Right to Lodge a Complaint
You have the right to lodge a complaint with the supervisory authority: The Office for Personal Data Protection (www.uoou.cz)
You also have the right to submit a complaint or a compliment directly to the clinic. For more information, click here.
Office for Personal Data Protection (www.uoou.cz)
9. Automated Decision-Making
No automated decision-making or profiling takes place.
10. Security of Personal Data
The Controller has adopted appropriate technical and organizational measures to secure personal data against
unauthorized access, loss, or misuse.
11. Final Provisions
This policy may be updated periodically.