Paediatric cardiology clinic

Who processes your data

CENTRUM MLADÉ SRDCE s.r.o., Líščie údolie 57, 842 31 Bratislava, company ID (IČO) 45569959. Contact: ivanova@mladesrdce.com, +421 2 6428 2456.

​

Booking an appointment

The data you enter when booking through the online system is processed in accordance with a separate privacy notice. It is shown to you when you book for the first time, and its full text appears below on this page.

 

Medical records

When providing healthcare we keep medical records to the extent required by Act No. 576/2004 Coll. on healthcare. This is a statutory obligation of a healthcare provider. We retain the records for the period laid down by law.

 

Email and telephone communication

If you contact us by email, we process the data you provide in your message solely in order to deal with it. We keep email correspondence for as long as the patient is on our register.

We do not record telephone calls and we keep no record of them. The data needed to reserve an appointment is entered into the scheduling system — the booking notice below applies to it.

 

Who we share data with

With health insurance companies, to the extent needed for healthcare to be reimbursed, and with other healthcare providers where this is necessary for your child's continued treatment. We never sell your data or share it for marketing purposes.

 

Your rights

You have the right of access to your data, and the right to have it corrected or erased, to have its processing restricted, to object to processing and to data portability. You also have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava. You can contact us at ivanova@mladesrdce.com.

 

 

PRIVACY NOTICE FOR ONLINE BOOKING

​

1. Controller

CENTRUM MLADÉ SRDCE s.r.o., Líščie údolie 57, 842 31 Bratislava, company ID (IČO) 45569959, registered in the Commercial Register of the City Court Bratislava III, section Sro, file no. 67364/B. Contact: ivanova@mladesrdce.com, +421 2 6428 2456.

 

2. What data we process

Your name and surname, email address and telephone number, as entered when booking an appointment. The booking form collects no other data.

​

3. Purpose and legal basis

We process the data solely in order to arrange, confirm and, where necessary, change an appointment for the provision of healthcare.

The legal basis is §13(1)(b) of Act No. 18/2018 Coll. on personal data protection (Article 6(1)(b) GDPR) — processing necessary for the performance of a contract for the provision of healthcare, or to take steps at the data subject's request prior to entering into such a contract.

Providing the data is a contractual requirement: without it we cannot reserve an appointment for you. If you book by telephone, we enter your data into the scheduling system ourselves. It is processed to the same extent and in the same way as with an online booking.

 

4. Recipients and processor

The scheduling system is operated for us by Vcita Inc., 227 Bellevue Way NE #569, Bellevue, WA 98004, USA, as our processor, under a data processing agreement concluded pursuant to §34 of Act No. 18/2018 Coll.

Vcita Inc. uses further processors to run the system, namely data centre operators and services for delivering emails and SMS messages. All of them are bound by substantially the same data protection obligations. We will provide the current list on request at ivanova@mladesrdce.com.

​

5. Transfer to a third country

Your data is transferred to the United States of America. The transfer is safeguarded by the Standard Contractual Clauses adopted by the European Commission in Decision C(2021)3972 under Article 46(2)(c) GDPR, which form part of our agreement with Vcita Inc. We will provide a copy of these safeguards on request at ivanova@mladesrdce.com.

 

6. Retention period

We keep data from the scheduling system for 18 months after the date of the examination, after which it is deleted. Data that becomes part of the medical records is retained for the period laid down by Act No. 576/2004 Coll. on healthcare. Proof of payment is retained for the period required by accounting and tax legislation.

 

7. Does a computer make decisions about you?

No. The scheduling system only stores your data and sends you a confirmation and a reminder of your appointment. No program decides anything that matters — not your appointment, your examination or your treatment; there is always a person behind those decisions. Nor do we analyse your data to predict your child's health or behaviour. The technical terms for this are automated individual decision-making and profiling; neither takes place at our clinic.

 

8. Your rights

As a data subject you have the right:

• of access to your personal data and to information about how it is processed,

• to have inaccurate data corrected and incomplete data completed,

• to erasure of your personal data,

• to restriction of processing,

• to object to the processing of your personal data,

• to data portability,

• to lodge a request to open proceedings under §100 of Act No. 18/2018 Coll.

 

You can exercise your rights at ivanova@mladesrdce.com or in writing at the clinic's address. We will reply within one month of receiving your request at the latest.

​