For us, the protection of personal data is very important. That is why we are committed to paying close attention to how we process your personal data (hereinafter “data”). This data processing policy is designed to provide you with complete information on how data is processed by our company after accessing and using the www.vipmed.ro.
WHO IS RESPONSIBLE FOR DATA PROCESSING AND WHO CAN YOU CONTACT?
Responsible for data processing:
VIPMED INTERNATIONAL S.R.L.
Bucharest, Sector 3, Street Drumul Gura Siriului, no. 65A, et. 3, app. 18
e-mail: office@vipmed.ro
WHAT DOES THE DATA WE PROCESS COME FROM?
We process the data received from you by filling out the contact form, as well as the data contained in the documents in your medical file, which you upload to our website.
FOR WHAT PURPOSE DO WE PROCESS YOUR DATA?
We process your personal data for the purpose of concluding and executing the service provision contract, or to take steps to conclude the contract. For this purpose, we process the following categories of data:
- identification information (e.g. surname, first name, date of birth, ID series and number, signature, copy of passport – when applicable, copy of insurance policy – when applicable);
- contact information (e.g. postal address and email address, telephone number);
- special categories of personal data (e.g. analysis reports, health status, biological samples).
The identification information is necessary in order to complete and conclude the contract for the provision of services, to ensure your transport and to ensure accommodation at our partners’ locations.
- Contact information is used for the transmission of documents necessary for the conclusion, execution or termination of the contract for the provision of services, for the communication of secondary medical opinions, and for the transmission of any other necessary communications in relation to the requested services.
- Special categories of data are processed to create a medical summary and to obtain secondary medical opinions or to confirm your diagnosis.
- Your data will not be processed for any purpose other than those provided above.
- If you refuse to provide us with all the necessary data, we will find ourselves in a situation where we will not be able to provide you with the requested services.
HOW LONG DO WE KEEP YOUR DATA?
If, after the transmission of the data, you enter into a contract for the provision of services with Us, we will retain your personal data for the duration of the execution of the contract. Afterwards, we will continue to process your data in compliance with the principle of minimization and limitation to purpose, if we are obliged by a legal provision (e.g. to keep documents, records and accounting books, for a period of 5 or 10 years) or if we have a legitimate interest (e.g. for audit purposes or when that information is necessary for the conduct of investigations or legal actions).
- We will ensure the deletion of your data when its storage is no longer supported by any of the above processing grounds.
- If, after submitting the data, you do not conclude a service provision contract with Us, we will delete your data within a period of 3 years from the date on which you provided it to us.
WHO RECEIVES YOUR DATA?
As specialist medical consultations are provided by doctors from clinics abroad, your data may be transferred abroad, respectively to: Austria, Germany, France, Switzerland, Turkey and the United States of America (as applicable).
Territories outside the European Union to which we transfer your data may have different, and sometimes lower, data protection standards.
To protect the confidentiality and security of biological samples and personal data, and to reduce any risk while they are in the United States of America/Turkey/Switzerland, we have implemented appropriate measures so that biological samples and personal data are protected and processed in a secure manner.
For the provision of the requested services, your data could also be transmitted, as the case may be, to translation agencies, travel agencies, companies that provide patient transport, or the competent authorities.
Your data may also be accessible to IT service providers necessary for the operation and security of our IT systems.
In addition, Vipmed may be legally obliged to disclose your data if this is necessary to establish, exercise or defend Our rights before the competent authorities.
WHAT ARE YOUR RIGHTS AND HOW CAN YOU EXERCISE THEM?
In accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, you have, under certain conditions, the following rights:
- To access data: you can obtain information about the processing of your personal data and a copy of this personal data.
- To rectify your data: if you believe that your personal data is inaccurate or incomplete, you can request the corresponding modification of this personal data.
- To obtain data deletion: you can request the deletion of your personal data, to the extent provided by law.
- To restrict processing: you can request the restriction of the processing of your personal data.
- To object to the processing: you can contest the processing of your personal data, for reasons related to your particular situation. You have the absolute right to object to the processing of your personal data for direct marketing purposes, which includes profiling in connection with said direct marketing.
- On data portability: You have the right to request that the personal data you have provided to us be returned to you or, if possible, transferred to a third party.
Also, with regard to the data processed on the basis of your consent, you have the right to withdraw your consent at any time, without this affecting the legality of the processing previously carried out by Us.
You can exercise your rights listed above by means of a written and dated request, sent by email to the address office@vipmed.ro, or by post, to the address Strada Jean Monnet no. 44, Sector 1, Bucharest.
If you send us a request, the data contained in it will be accessible only to those persons who are authorized and involved in the settlement process.
There is a possibility that in order to determine your identity, we may request additional data, without thereby changing the purpose of the initial data processing.
In addition to the above, you also have the right to submit a complaint regarding the processing of your data to the National Supervisory Authority for the Processing of Personal Data (ANSPDCP), B-dul. G-ral. Gheorghe Magheru no. 28-30, Sector 1, postal code 010336 Bucharest, tel. 0318.059.211.
