Privacy policy
1. Personal Data Controller
The personal data controller is:
HR Clinic s.r.o.
ID No.: 23053569
Registered Office: Kotkova 3974/9c, 66902 Znojmo
E-mail: info@hrclinic.cz
Phone: 515 225 520
(hereinafter referred to as the “Controller”)
2. Categories of Processed Personal Data
a) Patients
We process in particular:
- identification data (name, surname, personal identification number, date of birth)
- contact details
- address details
- health status data
- anamnestic data
- data on provided healthcare
b) Employees and Associates
- identification and contact details
- education and qualification data
- payroll and accounting data
- data required by labor law regulations
c) Other Persons (e.g., contact forms)
- name, e-mail, phone
- communication content
3. Purposes and Legal Bases for Processing
Patients
We process patients’ personal data for the purpose of:
- providing health services
- maintaining medical records
- reporting healthcare to health insurance companies
Legal basis:
- compliance with a legal obligation (Act No. 372/2011 Coll.)
- performance of a contract
- protection of vital interests
Employees
- fulfillment of labor law obligations
- maintenance of personnel and payroll records
Legal basis:
- compliance with a legal obligation
- performance of a contract
Contact forms / communication
- handling inquiries
Legal basis:
- legitimate interest or consent
4. Recipients of Personal Data
Personal data may be disclosed to:
- health insurance companies
- public authorities (e.g., courts, administrative bodies)
- IT service providers
- accounting and tax advisors
5. Transfer of Personal Data to Third Countries
Patient data is not transferred outside the European Union. The only transfer that can occur is the one described for this website in section 11 (measurement services, after your consent).
In the event of using external services, transfer may only occur in accordance with the GDPR.
6. Retention Period of Personal Data
Personal data is retained as follows:
- medical records according to Act No. 372/2011 Coll. and relevant regulations
- accounting documents according to the Accounting Act
- personnel documentation according to labor law regulations
The retention period is governed by the Controller’s filing and destruction rules.
7. Rights of Data Subjects
The data subject has the right:
- to access their personal data
- to the rectification of inaccurate or incomplete data
- to the restriction of processing
- to object to processing
The right to erasure of personal data does not apply if the processing is necessary for the fulfillment of a legal
obligation of the Controller, particularly in the maintenance of medical records.
Patients’ personal data cannot be erased upon request if their retention is mandated by legal regulations.
8. Right to Lodge a Complaint
You have the right to lodge a complaint with the supervisory authority: The Office for Personal Data Protection (www.uoou.cz)
You also have the right to submit a complaint or a compliment directly to the clinic. For more information, click here.
Office for Personal Data Protection (www.uoou.cz)
9. Automated Decision-Making
No automated decision-making or profiling takes place.
10. Security of Personal Data
The Controller has adopted appropriate technical and organizational measures to secure personal data against
unauthorized access, loss, or misuse.
11. This website
Enquiry form
We receive enquiries through a form provided by Tally (Tally BV, Belgium), which loads directly on the enquiry page of this website. The details you enter are processed by Tally as our processor solely to handle your enquiry. When the form loads, your IP address and technical browser data are also transferred to Tally’s servers. Please do not describe your medical history in the form: we ask for the information we need after your enquiry.
Legal basis:
- taking steps at your request before entering into a contract
Cookies and measurement
Strictly necessary data (for example your choice in the cookie banner) is always stored. Google Tag Manager, Google Ads conversion measurement and Google Analytics (Google Ireland Limited) start only after you consent in the cookie banner; they tell us whether a visit from an advertisement led to an enquiry and how the site is used. Google may transfer data to Google LLC in the USA, which is certified under the EU–US Data Privacy Framework. You can change or withdraw your consent at any time: cookie settings.
Legal basis:
- consent
12. Final provisions
This policy may be updated periodically.