III. What is personal data

Personal data is any information about an identified or identifiable natural person (data subject). An identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier (name, number, network identifier) or to one or more specific elements of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

WHAT ARE SPECIAL CATEGORIES OF PERSONAL DATA

Special categories of personal data are ones which reveal an individual’s racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health or sex life or sexual orientation. Genetic and biometric data which are processed for the purpose of uniquely identifying a natural person are also considered to be a special category of data.

IV. Legal basis for the processing of patients’ personal data

Personal data of patients who use the Prostate Cancer Centre are processed at PTCC because other possible health services requested through the Prostate Cancer Centre by the patient are provided at PTCC. The processing is necessary for the fulfilment of the legal obligations of PTCC, which is the so-called Data Controller of your personal data (within the meaning of Article 9(2)(H) of the Regulation or Article 6(1)(C) of the Regulation).

LEGAL PROVISIONS AUTHORISING THE PROCESSING OF PERSONAL DATA IN THE HEALTHCARE SECTOR

We are legally obliged to provide health services pursuant to Act No. 372/2011 Coll., on Health Services, further pursuant to Act No. 373/2011 Coll., on Specific Health Services, pursuant to Act No. 48/1997 Coll., on Public Health Insurance and on Amendments and Additions to Certain Related Acts, pursuant to Act No. 258/2000 Coll., on the Protection of Public Health, pursuant to Act No. 378/2007 Coll., on Medicinal Products and on Amendments to Certain Related Acts (Medicinal Products Act), as amended.

V. Sources of personal data

Personal data are obtained at PTCC mainly in the following ways:

From data subjects, from you, in particular in the context of registration or submission of a form from the Prostate Cancer Centre website and in connection with the provision of health services and the maintenance of medical records at PTCC (verbally, in writing, by e-mail, by telephone, from web forms, from video consultations, etc.).
In other ways, in particular from publicly accessible registers, lists and records (e.g. registers of health insurance companies), on the basis of contractual relationships, etc.

VI. Categories of personal data subject to processing

PTCC processes the following personal data about you, as data subjects, which are necessary for the performance of the Controller’s duties:

Identification data used for unambiguous and unmistakable identification such as name, surname, title, birth number, date of birth, permanent address, type and number of identity card, ID number, VAT number, etc.
Contact details such as contact address, telephone number, fax number, e-mail address and other similar information.
Health data – data obtained and processed in connection with the provision of health services.
Data provided in excess of the relevant laws and processed under your consent.
In the case of a video consultation, in addition, metadata (video and audio), chat texts, voice, image, ambient sounds, sharing of connection location and time, recorded images, IP address, etc..,
VII. Method of processing and protection of personal data

The processing of personal data is carried out by PTCC. The processing is carried out by individual authorised and trained employees. Personal data is processed in paper and/or electronic form. Personal data shall be processed only for the necessary period of time, which is individual for each processing purpose and in accordance with the PTCC’s filing and shredding rules. After this period, the personal data is destroyed or is further stored for the period of time specified by the applicable legislation. PTCC is legally entitled to disclose your personal data to selected recipients of personal data, such as health insurance companies, other providers of health or social services, state authorities, mandatory registers, etc.

PERSONAL DATA IS PROCESSED IN CONNECTION WITH THE FOLLOWING PURPOSES
Provision of outpatient specialised care
Provision of medicines and other preparations
Laboratory processing of biological material
Processing of compulsory agendas (health insurance companies, health registers, etc.)
Operation of the camera system
Monitoring of selected telephone lines
VIII. Rights of the data subject

The data subject has the right to be informed about the processing of his/her personal data. In connection with the processing of your personal data by PTCC, you have the right to access, rectification or completion of your personal data or erasure or restriction of processing, unless this is contrary to the legal requirements of PTCC. You also have the right to object or complain about the way in which your personal data is processed, or you can exercise your right to data portability if it is a contractual relationship.

Right of access to personal data

You have the right to obtain confirmation as to whether or not personal data relating to you is being processed and, if so, the right to access that personal data. You will receive information about the processing of personal data. However, PTCC is entitled to charge a reasonable fee for any additional copies, corresponding to the administrative costs incurred by PTCC.

The right to erasure (to be forgotten) represents an obligation of the Controller to destroy personal data if at least one condition is met:

The personal data is no longer necessary for the purposes for which it was collected or otherwise processed,
The data subject withdraws consent and there is no further legal basis for the processing,
The data subject objects to the processing and there are no overriding legitimate grounds for the processing,
The personal data has been unlawfully processed,
The Personal Data must be erased to comply with a legal obligation,
The personal data was collected in connection with the offer of information society services pursuant to Article 8(1) of the General Regulation.

However, we would like to mention here that it is not possible to request the erasure of Personal Data contained in medical records. The treatment of medical records is regulated by Sections 53-69 of Act No 372/2011 Coll., on Health Services, and Decree No 98/2012 Coll., on Medical Records.

You can exercise your rights and requirements with the Data Protection Officer. Your requests will always be properly assessed and dealt with in accordance with the relevant provisions of the Regulation.

The right to erasure (to be forgotten) represents an obligation of the Controller to destroy personal data if at least one condition is met:

The personal data is no longer necessary for the purposes for which it was collected or otherwise processed,
The data subject withdraws consent and there is no further legal basis for the processing,
The data subject objects to the processing and there are no overriding legitimate grounds for the processing,
The personal data has been unlawfully processed,
The Personal Data must be erased to comply with a legal obligation,
The personal data was collected in connection with the offer of information society services pursuant to Article 8(1) of the General Regulation.

However, we would like to mention here that it is not possible to request the erasure of Personal Data contained in medical records. The treatment of medical records is regulated by Sections 53-69 of Act No 372/2011 Coll., on Health Services, and Decree No 98/2012 Coll., on Medical Records.

You can exercise your rights and requirements with the Data Protection Officer. Your requests will always be properly assessed and dealt with in accordance with the relevant provisions of the Regulation.