Privacy Policy

1. Personal Data Controller

The personal data controller is:

HR Clinic s.r.o.
ID No.: 23053569
Registered Office: Kotkova 3974/9c, 66902 Znojmo
E-mail: info@hrclinic.cz
Phone: 515 225 520

(hereinafter referred to as the “Controller”)

2. Categories of Processed Personal Data

a) Patients

We process in particular:

• identification data (name, surname, personal identification number, date of birth)
• contact details
• address details
• health status data
• anamnestic data
• data on provided healthcare

b) Employees and Associates

• identification and contact details
• education and qualification data
• payroll and accounting data
• data required by labor law regulations

c) Other Persons (e.g., contact forms)

• name, e-mail, phone
• communication content

3. Purposes and Legal Bases for Processing

Patients

We process patients’ personal data for the purpose of:

• providing health services
• maintaining medical records
• reporting healthcare to health insurance companies

Legal basis:

• compliance with a legal obligation (Act No. 372/2011 Coll.)
• performance of a contract
• protection of vital interests

Employees

• fulfillment of labor law obligations
• maintenance of personnel and payroll records

Legal basis:

• compliance with a legal obligation
• performance of a contract

Contact forms / communication

• handling inquiries

Legal basis:

• legitimate interest or consent

4. Recipients of Personal Data

Personal data may be disclosed to:

• health insurance companies
• public authorities (e.g., courts, administrative bodies)
• IT service providers
• accounting and tax advisors

5. Transfer of Personal Data to Third Countries

Personal data is not transferred outside the European Union.

In the event of using external services, transfer may only occur in accordance with the GDPR.

6. Retention Period of Personal Data

Personal data is retained as follows:

• medical records according to Act No. 372/2011 Coll. and relevant regulations
• accounting documents according to the Accounting Act
• personnel documentation according to labor law regulations

The retention period is governed by the Controller’s filing and destruction rules.

7. Rights of Data Subjects

The data subject has the right:

• to access their personal data
• to the rectification of inaccurate or incomplete data
• to the restriction of processing
• to object to processing

The right to erasure of personal data does not apply if the processing is necessary for the fulfillment of a legal
obligation of the Controller, particularly in the maintenance of medical records.

Patients’ personal data cannot be erased upon request if their retention is mandated by legal regulations.

8. Right to Lodge a Complaint

You have the right to lodge a complaint with the supervisory authority: The Office for Personal Data Protection (www.uoou.cz)

You also have the right to submit a complaint or a compliment directly to the clinic. For more information, click here.

Office for Personal Data Protection (www.uoou.cz)

9. Automated Decision-Making

No automated decision-making or profiling takes place.

10. Security of Personal Data

The Controller has adopted appropriate technical and organizational measures to secure personal data against
unauthorized access, loss, or misuse.

11. Final Provisions

This policy may be updated periodically.