I. Scope of Regulation
The dental clinic of MUDr. Jan Paroulek, CSc., and MUDr. Jan Paroulek is a licensed provider of healthcare services in accordance with Act No. 372/2011 Coll., on Health Services.
In connection with providing medical care, we are required, as the controller of personal data, to collect and process personal information about you – the patient – to the extent necessary for the provision and billing of medical services. The scope of this data collection is defined by applicable legislation. If we process any personal data beyond our legal obligations, we will always request your prior written consent.
II. Legal Basis
Our clinic processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR) and other relevant national laws.
The legal basis for processing your personal data includes compliance with legal obligations arising especially from:
- Act No. 372/2011 Coll., on Health Services,
- Act No. 48/1997 Coll., on Public Health Insurance,
- Act No. 563/1991 Coll., on Accounting,
- Act No. 586/1992 Coll., on Income Taxes,
- Act No. 634/1992 Coll., on Consumer Protection.
Also, the performance of obligations under a Healthcare Agreement, on the basis of which we provide you with medical services (this agreement does not have to be concluded in writing).
III. Purpose of Personal Data Processing
We collect and process your personal data solely for the purpose of providing healthcare services.
We are also obliged to disclose certain personal data in the process of billing healthcare services or fulfilling other legal obligations, such as tax and accounting requirements.
Personal data is only shared with authorized entities and institutions, and only when legally required. All persons with access to your personal data are legally bound by confidentiality and data protection obligations.
IV. Scope of Data Processing
We process personal data only to the extent strictly necessary for the provision and billing of healthcare services.
If we collect any additional data beyond what is required by law, we will always request your explicit written consent.
Your medical records may include:
- Identification and contact details
- Records of examinations, diagnoses, treatments
- Prescribed medications or medical devices
- Results of initial and follow-up evaluations
- Informed consent or refusal of treatment
- List of persons authorized to access your records or a prohibition to share information with specified individuals
V. Data Retention Period
Personal data contained in medical records is retained in accordance with Decree No. 444/2024 Coll., on Medical Documentation.
Other data retention obligations (e.g., for tax and accounting purposes) follow relevant legal regulations.
If data is collected based on contractual obligations (e.g., for private care not covered by public health insurance), it is stored for one year after the last treatment, or until your consent is withdrawn.
VI. Other Recipients of Personal Data
In addition to you, your personal data may be disclosed, as required by law, to:
- Other licensed healthcare providers
- Public authorities
- Persons legally authorized to access medical records under the Health Services Act
Data may also be processed by external processors based on data processing agreements compliant with GDPR. All persons who may access your personal data are bound by confidentiality and legal data protection duties.
Your personal data is not transferred outside of the Czech Republic.
VII. Your Rights
As a patient, you have the following rights:
- Access to your personal data
- Correction of inaccurate or incomplete data
- Erasure of voluntarily provided data (unless legally required to be stored)
- Data portability, where applicable (for data processed based on consent or contract and by automated means)
You may not request erasure of data that we are legally obliged to collect in connection with the provision of healthcare services.
If you believe your personal data is being processed in violation of applicable laws, you may file a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7 (www.uoou.cz).
You also have the right to object to data processing based on our legitimate interests or those of a third party.
If you have questions, requests, or objections, please contact MUDr. Jan Paroulek, CSc. or MUDr. Jan Paroulek directly.
Providing your personal data is a legal requirement. As a patient, you are obligated to provide this data, and we are entitled to request it. Failure to provide the necessary information may result in our inability to offer healthcare services, potentially endangering your health or life.