RODO clause

(1) The administrator of your personal data is Chirurgia Plastyczna sp. z o. o. sp. k. based in Warsaw, WeAesthetic sp. z o. o. based in Warsaw and D. Charytonowicz, M. Charytonowicz sp. k. a. based in Warsaw. (2) The Administrator and co-administrators have appointed a Data Protection Supervisor – Marta Szymanska, who can be contacted via e-mail address: iodo@drszczyt.pl. (3) Your personal data will be processed by the Administrator/Co-Administrators in order to enable you to use the services provided by the Administrator/Co-Administrators, including health services, in particular to arrange a medical consultation or other appointment, as well as further contact with you in connection with the use of services provided by the Administrator/Co-Administrators. 4 The Administrator processes your personal data only on the basis of the law and for strictly defined purposes, i.e.:
-. for the purposes of preventive health care, diagnosis and treatment – The legal basis for the processing of your personal data is Article 6 (1) letter c. and Article 9(2)(h). RODO, – in order to provide health care and manage health care systems and services – The legal basis for processing your personal data for this purpose is Article 6 (1) lit. c. and Article 9(2)(h). RODO, – in order to perform the contract concluded with you – The legal basis for processing your personal data for this purpose is art. 6 par. 1 lit. b. RODO, – in order to keep your accounts and fulfill your tax obligations – The legal basis for processing your personal data for this purpose is art. 6 para. 1 lit. c. RODO, – for the purpose of marketing the services provided by the Administrator – the legal basis for processing your personal data for this purpose is Article 6(1)(a) of the RODO and Article 6(1)(f) of the RODO, – for the purpose of possible establishment and investigation of claims – the legal basis for the processing of your personal data for this purpose is Article 6(1)(f). RODO. (7) If the obligation to provide personal data does not directly arise from the law, the provision of personal data is voluntary, however, the lack thereof may hinder or prevent the proper implementation of the Administrator’s / Joint Administrators’ services. 8. your personal data, including the data referred to in Art.

9 RODO, they may be made available only to entities authorized to obtain them on the basis of universally applicable laws, as well as to entities participating in the implementation of services by the Administrator/Co-Administrators. 9. the period of storage of your personal data depends on the legal basis for their processing:
– when the data constitute medical records – personal data will be stored for a period of 20 years,
– when the data are processed on the basis of Article 6.1.c. RODO – personal data will be stored for the period required by law,
– when data are processed on the basis of Art. 6 par. 1 lit. b. RODO – personal data will be processed until the completion of all factual and legal actions necessary for the execution of the contract or for the protection of possible claims,
– when data are processed on the basis of Article 6(1)(f). RODO – personal data will be processed until the fulfillment of the legitimate interests of the Administrator constituting the basis for such processing or until you raise an objection to such processing,
– when data are processed on the basis of Art. 6 par. 1 lit. a. RODO – your personal data will be processed until you withdraw your consent to such processing. (10) You have the right to access your data and receive a copy of your data, the right to rectify your data, as well as the right to delete your data, data portability, restriction of processing and objection to the processing of your personal data. (11) You have the right to withdraw your consent to data processing at any time, which shall not affect the legality of the processing performed on the basis of consent before its withdrawal. (12) You have the right to lodge a complaint to the supervisory authority, i.e. the President of the Office for Personal Data Protection /ul. Stawki 2, 00-193 Warsaw/. 13. the Administrator shall address to special categories of subjects whose data it processes information on the manner of processing personal data, including, among others, providing patients with the Personal Data Information Clause, which contains detailed information on the manner of processing of their personal data.