Skip to main content Skip the show 
Privacy Policy
Information on the Processing of Personal Data
pursuant to Articles 13 and 14 of the GDPR
Below you will find a complete list of our services and their price lists. If you have any questions, please do not hesitate to contact us.
This is an information memorandum providing information pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation—hereinafter referred to as the “GDPR”).
If, after reading this document, anything remains unclear or you are unsure about anything, we will be happy to explain any term or section of this document if you contact us by email at dpo@repromedica.sk or in writing at the Operator’s address (below).
Who processes your personal data?
ReproMedica, s.r.o.
Búdkova 26, 811 04 Bratislava
Company ID No. 47 015 187
You can contact the data protection officer, who oversees the proper processing of personal data, at any time by email at dpo@repromedica.sk.
For what purpose and on what legal basis does the Controller process your personal data?
| Purpose of Processing | Legal Basis for Processing |
|---|---|
| Health Care | |
1Fulfilling our obligations under the contract we have entered into with you. | Performance of the ContractArticle 6(1)(b) of the GDPR |
2Administration of information related to the contractual relationship (including client identification). | Legitimate Interest of the ControllerArticle 6(1)(f) of the GDPR |
3Identification, enforcement, and defense of the Operator’s legal claims. | Legitimate Interest of the ControllerArticle 6(1)(f) of the GDPR |
4A survey of client satisfaction with the services provided so that we can improve their quality. | Legitimate Interest of the ControllerArticle 6(1)(f) of the GDPR |
5Resolving Your Complaints. | Compliance with a Legal ObligationArticle 6(1)(c) of the GDPR |
6A survey on patient satisfaction with the delivery of health care, so that we can improve the quality of care. | Legitimate Interest of the ControllerArticle 6(1)(f) of the GDPR |
7Handling requests communicated directly or submitted via contact forms, with the goal of addressing such requests regardless of whether the person making contact is a client of the Operator, in order to build the Operator’s good reputation. | Legitimate Interest of the ControllerArticle 6(1)(f) of the GDPR |
| Protecting Our Assets and the Safety of Our Employees | |
8Identifying individuals who disrupt order and security at our facilities and resolving any resulting situations. | Legitimate Interest of the ControllerArticle 6(1)(f) of the GDPR |
9Providing information to public authorities and administrative bodies so that investigations and proceedings can be conducted for the purpose of rectification or enforcement of claims. | Legitimate Interest of the ControllerArticle 6(1)(f) of the GDPR |
| Compliance with Obligations Under Specific Laws | |
10Compliance with the fundamental principles of personal data processing, implementation and maintenance of technical and organizational security measures, including, but not limited to, preventing unauthorized access to systems and information, investigating suspected or known security breaches and reporting such breaches to individuals and authorities, and processing and responding to requests and complaints from data subjects. | Compliance with a Legal ObligationArticle 6(1)(c) of the GDPR |
11Handling requests from data subjects. | Compliance with a Legal ObligationArticle 6(1)(c) of the GDPR |
12Handling inspections and requests from public authorities. | Compliance with a Legal ObligationArticle 6(1)(c) of the GDPR |
13Compliance with reporting and other obligations toward administrative and other authorities in accordance with specific regulations. | Compliance with a Legal ObligationArticle 6(1)(c) of the GDPR |
| Promotion and Marketing | |
14Raising awareness of the Controller by sending promotional materials and conducting PR and marketing activities. | Legitimate Interest of the ControllerArticle 6(1)(f) of the GDPRorConsent, if you have provided itArticle 6(1)(a) of the GDPR |
| Accounting | |
15Accounting in accordance with a special law. | Compliance with a Legal ObligationArticle 6(1)(c) of the GDPR |
| Statistics | |
16Carrying out mandatory activities under a special law or activities for the purpose of evaluating the effectiveness and quality of the services provided. | Compliance with a Legal ObligationArticle 6(1)(c) of the GDPRorLegitimate interest of the ControllerArticle 6(1)(f) of the GDPR |
For the purposes listed above, the provision of your personal data is entirely voluntary; however, it is necessary for us to process your personal data for the specified purpose, so failure to provide it may result in our inability to carry out the intended processing (for example, we would be unable to enter into a contract with you).
Right to Object
The data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data where the legal basis for the processing is a legitimate interest pursuant to Article 6(1)(f) of the GDPR.
In the event of an objection, the Controller may not continue to process personal data unless it demonstrates compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the objecting data subject, or grounds related to the establishment, exercise, or defense of legal claims.
If personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him or her for such marketing purposes, including profiling to the extent that it is related to such direct marketing. If the data subject objects to processing for direct marketing purposes, the personal data may no longer be processed for such purposes.
Voluntary Consent
If we are to process personal data based on your consent, it is entirely up to you whether or not to give us your consent, and you are under no obligation whatsoever to do so. If you do not give us your consent, there will be no consequences for you. However, in that case, we will not carry out the activities for which we need your consent.
If you have given us consent for anything, you may revoke it at any time either in writing by sending a letter to the Controller’s registered office, through our website, or by sending an email to dpo@repromedica.sk.
However, the withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal.
Categories of Personal Data in Question
Personal data necessary to identify you when providing services to you as the recipient of such services.
In the case of the provision of health care, personal data within the scope of Act No. 576/2004 Coll. and Professional Guideline No. 47/2009 of the Ministry of Health of the Slovak Republic on the Maintenance of Medical Records, which is provided to us either directly by you or by your referring health care provider.
Sharing Your Data with Other Recipients
Your personal data may be disclosed to IT service providers, attorneys, auditors, archives, and other parties that provide services to the Controller, or to public authorities and government agencies, such as courts, the Police Force, the Health Care Surveillance Authority, the Office for Personal Data Protection, and others. In any case, however, your data may only be provided to recipients who are authorized to receive your data under applicable and effective legislation.
Transfer of Your Personal Data to Third Countries
We do not intend to transfer your personal data to third countries. Should this occur, we will notify you in advance.
Retention period
The Controller retains your personal data for the duration of your contractual relationship with the Controller and, following its termination, until all obligations arising from or related to it have been settled, or until the Controller’s legitimate interest in processing them ceases to exist. If we process your data on a different legal basis, we will retain it only for the duration of that legal basis.
If the Controller processes your personal data based on your consent, your personal data will be processed for that purpose for as long as that consent remains valid or until you revoke your consent.
When processing personal data, the Controller applies the principle of data minimization, which means that as soon as the period during which it is required to retain personal data expires, it immediately anonymizes your personal data in its databases and information systems.
What are your rights regarding this processing?
Upon written request, the data subject is entitled to:
- request access to personal data,
- request the correction of personal data,
- request the deletion of personal data,
- request a restriction on processing,
- object to the processing,
- request the transfer of personal data,
- file a complaint with the Office for Personal Data Protection, Hraničná 12, Bratislava,
All of this is subject to the conditions set forth in the GDPR and, where applicable, in Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts, as amended.
Source of Your Personal Data
Your personal information was provided to us either directly by you or by your treating healthcare professional or healthcare provider, who referred you to us for medical care.
Automated Decision-Making and Profiling
No automated decision-making or profiling takes place when processing your personal data.
