+ 48 533 599 552
Warszaw
EN

Privacy policy

provided pursuant to Art. 13 of the GDPR,
before completing the PATIENT’S PERSONAL DATA FORM

The controller of personal data is ASTRA DENT limited liability company with its registered office in Warsaw (Company address: 00-002 Warsaw, Świętokrzyska 20, REGON: 523692148, NIP: 5273028129), entered in the Register of Entrepreneurs of the National Court Register under number KRS 0001002352 (hereinafter referred to as Astra Dent).

  • For matters related to the protection of personal data, you can contact us by email at: info@astradent.pl, by post at the registered address of Astra Dent, or by phone at: +48 533 599 552.
  • Your personal data will be processed for the purpose of providing medical treatment (medical service), on the basis of the GDPR: Art. 6(1)(a) (consent), (b) (performance of a medical service contract), and (c) (fulfilment of the obligation to maintain the Patient’s medical records by the Controller).
  • The recipients of your personal data will be entities entrusted with data in order to ensure the security of the services provided or to perform the medical service, e.g. prosthetic laboratories, under a personal data processing agreement.
  • Your personal data as a Patient will be stored for the period specified by law for medical documentation (currently 20 years). Other data will be stored for the duration of the medical service or until any resulting claims expire.
  • You have the right to request from the Controller, with respect to your personal data:
    • access to your personal data,
    • rectification of your personal data,
    • erasure of your personal data,
    • restriction of processing of your personal data,
    • withdrawal of consent to the processing of personal data by submitting a request to Astra Dent – if you have previously given such consent and the processing is based on it,
    • data portability,
    • to object to the processing of personal data on grounds relating to your particular situation, in accordance with Art. 21 of the GDPR.
    • You also have the right to lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw), if you believe that the processing of your personal data violates the provisions of the GDPR.
    If your data are processed based on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.
  • Providing your personal data is a legal requirement for the purpose of maintaining medical documentation (mandatory data under Art. 25 of the Act on Patient Rights and the Patient Ombudsman). Providing other data results from the conclusion of a medical service agreement. Failure to provide mandatory personal data makes it impossible to maintain medical documentation and, consequently, to provide medical services.
  • Your personal data will not be transferred outside the territory of the European Economic Area or to international organizations.
  • Your personal data will not be processed in an automated manner (including profiling) that could result in any decisions being made.
  • In order to ensure the safety of the Controller’s employees and collaborators, protect property, and maintain the confidentiality of information whose disclosure could harm the Controller – which constitutes the Controller’s legitimate interest (Art. 6(1)(f) GDPR) – video surveillance is in operation on Astra Dent’s premises. Video recordings are retained for no longer than 3 months (data overwriting).