GDPR / Medical records

Data
health.

Information on the processing of special category data by Orto Smile in accordance with Art. 13 GDPR.

Data controller

Bloomed Sp. z o. o., 74 Katowicka Street, 41-500 Chorzów, Tax ID: 6272767687, KRS: 0000846869. Contact: kontakt@ortosmilesilesia.pl.

What data do we process?

  • identification and contact details, including name, surname, date of birth, address, telephone number, e-mail address and PESEL number;
  • health data: interview, diagnosis, methods and course of treatment, test results, X-rays, documentary photographs, information about medications and allergies.

Purposes and legal basis

Documentation and benefits

Article 9(2)(h) of the GDPR, read in conjunction with the Polish Act on Patients’ Rights. Medical records are retained for 20 years from the date of the last entry; records concerning minors are retained until they reach the age of 22.

Contact and reminders

Art. 6 section 1 letter b and f GDPR. The data is used to confirm appointments and treatment-related contacts.

Settlements

Art. 6 section 1 letter c GDPR. Settlement documents are kept for the period required by tax regulations.

Data recipients

The data may be received by medical staff, software and IT suppliers, accounting offices, other healthcare entities within the scope of treatment continuity, and public authorities in cases required by law. The administrator does not sell health data.

Your rights

  • access and copy of data,
  • correction,
  • deletion to the extent permitted for medical records,
  • restriction of processing,
  • objection, withdrawal of consent and complaint to the President of the Personal Data Protection Office.

Providing health data is voluntary, but necessary to provide the service. Contact: kontakt@ortosmilesilesia.pl.