GDPR Information Clause

In accordance with applicable legal provisions, and in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), we present information regarding the protection of your personal data.

Data Controller

The controller of your personal data is Maritime Hair Center sp. z o.o. with its registered office at ul. Obrońców Wybrzeża 9/5, 80-398 Gdańsk, Poland (NIP: 5833538565, REGON: 541851555).

Contact with the Controller:

E-mail: biuro@maritimehaircenter.pl

Phone: +48 732 737 037

Address: ul. Obrońców Wybrzeża 9/5, 80-398 Gdańsk, Poland

Purpose of Data Processing

Your personal data are processed for the purpose of using the services of Maritime Hair Center, in particular the provision of medical services, healthcare, and the management of healthcare services.

                    Data required for the provision of services: first name, last name, date of birth, residential address, PESEL number (or national identification number), e-mail address, phone number. In the case of sensitive data: information about health status, past illnesses, medications taken, and current medical treatment.
                

We process data for the following purposes:

Healthcare and provision of services – providing health services, medical diagnosis, and treatment. Art. 6(1)(b) GDPR and Art. 9(2)(h) GDPR.

Appointment booking – entering data into the facility's IT system, registering the visit, and verifying identity on the day of the planned procedure. Art. 6(1)(c) GDPR and Art. 9(2)(h) GDPR. Required data: first name, last name, residential address, phone number, e-mail address.

Phone or e-mail contact – appointment confirmation, rescheduling or cancellation, providing information about the procedure, pre- and post-operative instructions, and assessment of health status. Art. 6(1)(c) GDPR and Art. 9(2)(h) GDPR.

Maintaining medical records – keeping, storing, and archiving documentation containing personal data, diagnosis, treatment methods, and recommendations. Art. 9(2)(h) GDPR.

Social security – issuing medical certificates or sick leaves. Art. 9(2)(h) GDPR.

Preventive healthcare – conducting follow-up visits at the Maritime Hair Center facility. Art. 9(2)(h) GDPR. Required data: first name, last name, phone number, e-mail address.

Ensuring continuity of care – contacting another medical entity to ensure the continuity of medical care. Art. 9(2)(h) GDPR. Required data: first name, last name, residential address, phone number, e-mail address and (in the case of sensitive data) information about health status, past illnesses, medications taken, and current treatment.

Transfer of data to public registries – as a medical entity, we are required to transfer patient data to public registries. Art. 6(1)(c) GDPR.

Performing auxiliary activities – as a medical entity, we may perform other auxiliary activities in the provision of health services. Art. 9(2)(h) GDPR.

Exercising data protection rights – fulfilling obligations arising from the GDPR. Articles 16-21, 33, 34 GDPR.

Establishment, exercise, and defense of claims – processing data to establish and pursue claims arising from business activities and to defend against them. Art. 6(1)(f) GDPR.

Realization of patient rights – access to information about health status, keeping, archiving, and sharing medical records. Art. 6(1)(c) GDPR, Art. 9(2)(c) and (h) GDPR.

Accounting and tax obligations – issuing invoices for provided medical services. Art. 6(1)(c) GDPR.

Providing data is necessary to conclude an agreement for the provision of healthcare services and to perform such services. Refusal to provide data results in the inability to provide healthcare services.

Data Recipients

Your personal data may be shared with entities authorized under applicable legal provisions (pursuant to Article 26 of the Act of 6 November 2008 on Patient Rights and the Patient Ombudsman), entities cooperating with Maritime Hair Center, entities authorized by the patient, and payment system operators.

Personal data will not be transferred to third countries outside the European Economic Area or to international organizations.

Retention Period

                    Medical documentation is stored for 20 years in accordance with Article 29 of the Act of 6 November 2008 on Patient Rights and the Patient Ombudsman. Identification data (first name, last name, e-mail, phone) are stored until the service is provided. If the service does not take place, the data are stored for 12 months from the date of the planned procedure.
                

Patient Rights

In accordance with Articles 15-22 of the GDPR, you have the following rights:

Access to the content of your data

Access to medical records

Rectification or supplementation of data

Erasure of data

Obtaining a copy of data

Restriction of processing

Data portability

Right to object

Withdrawal of consent to processing

Complaint to PUODO

In the event of a breach by Maritime Hair Center of personal data protection provisions, you have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office.

Additional Information

Your personal data will not be processed by automated means and will not be subject to profiling.