Pursuant to Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation – GDPR), we inform you that:
- The Data Controller of patients’ personal data is Adrian Łuba, conducting business activity under the name ŁUBA DENTAL CLINIC, located at ul. J.K. Chodkiewicza 8, 02–593 Warsaw, Poland, NIP (Tax ID): 5272323323.
Contact details: Adrian Łuba, correspondence address as above, tel. +48 515 602 408, e-mail: clinic@lubadentalclinic.pl. - Patients’ personal data will be processed for the purpose of providing medical services at ŁUBA DENTAL CLINIC, pursuant to Article 9(2)(h) of the GDPR.
Additionally, data may be processed based on the legitimate interests of the Data Controller, such as:- scheduling appointments,
- managing payments,
- handling complaints and requests,
- establishing, pursuing or defending against legal claims related to our business activity – pursuant to Article 6(1)(f) of the GDPR.
- The scope of processed personal data includes:
- identifying data such as: full name, date of birth, PESEL number (Polish National ID Number), and contact details (residential or correspondence address, email address, phone number),
- medical data (diagnostic and treatment-related information).
- Personal data is collected directly from patients or their legal guardians.
- Personal data contained in medical records will be stored for a period of 20 years, counted from the end of the calendar year in which the last entry was made – subject to the exceptions specified in Article 29 of the Act of 6 November 2008 on Patients’ Rights and the Patient Ombudsman (Journal of Laws of 2024, item 581).
Other personal data will be deleted promptly after fulfilling the purpose for which it was collected. - Patients and other individuals whose data is processed by the Controller have the right to:
- access their personal data,
- rectify it,
- object to its processing,
- and request data portability.
They also have the right to lodge a complaint with the supervisory authority if they believe that the processing of personal data violates the provisions of the GDPR.
The supervisory authority in Poland is the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, tel. +48 22 531 03 00, e-mail: kancelaria@uodo.gov.pl, helpline: +48 606 950 000. - Providing personal data is a necessary condition for receiving medical services at ŁUBA DENTAL CLINIC.
- Personal data will be processed automatically using patient management IT systems.
Access to data is granted only to employees of the Clinic, insofar as such access is justified and arises from their professional duties.
Data will not be transferred to third countries (outside the European Economic Area).