Data management information, general terms and conditions

(Privacy statement and privacy policy)

Csalogány Medical Center / Privátmed Kft., Budapest Skin Kft.

Headquarters: 1027 Budapest, Csalogány utca 3. Building D. 1st em. 2.

The purpose of this Data Management Notice (hereinafter: Regulations) is to uniformly, comprehensibly and transparently regulate data management during the operation of the Csalogány Medical Center operated by Privátmed Kft. and Budapest Skin Kft. (hereinafter: Privátmed and Budapest Skin), which based on is fully compliant with current Hungarian legislation.

Privátmed and Budapest Skin consider it important to comply with the provisions of the data protection legislation, which is why they have created these Regulations, which provide patients with information on the main rules related to data management, the scope of the managed data, the method and purpose of the treatment, and other issues related to data management.

Privátmed and Budapest Skin comply with the applicable legislation, such as CXII of 2011 on the right to self-determination of information and freedom of information. complying with their obligations under the Act (hereinafter referred to as the Data Protection Act), they inform their patients about data management below.

1. The data controller

Privátmed Kft. (head office: 1027 Budapest, Csalogány utca 3. D. ed. 1. fl. 2.), Budapest Skin Kft. (head office: 1027 Budapest, Csalogány utca 3. D. ed. 1. fl. 2.) .

2. Scope of managed data

The data managed by Privátmed and Budapest Skin includes the following data:

a.) health data: related to the physical, mental and spiritual condition of the person concerned, his pathological passion, the circumstances of the illness or death, the cause of death, communicated by him or about him by another person, or detected, examined, measured by the health care network , mapped or derived data; in addition, all data that can be linked to the previous ones and influence them (e.g. behavior, environment, occupation);

b.) personal identification data: family name and surname, maiden name, gender, place and time of birth, mother's maiden surname and maiden name, place of residence, place of residence, social security identification number (hereinafter: TAJ number) together or any of these, if it is suitable or can be suitable for identifying the data subject;

c.) voluntarily provided data: telephone number, e-mail address.

3. Purpose of data management

Before recording the data, Privátmed and/or Budapest Skin informs the data subject whether the provision of data is voluntary or mandatory. The purpose of handling the mandatory personal data provided on the individual forms is to use the services of Privátmed and/or Budapest Skin, to identify the patient, and to ensure the possibility of communication and contact between Privátmed and/or Budapest Skin and the user of the service.

In the case of health and personal identification data, Privátmed and Budapest Skin comply with Act XLVII of 1997 on the management and protection of health and related personal data. they act according to the law.

The purpose of handling health and personal identification data:

• promoting the preservation, improvement and maintenance of health,

• facilitating the effective medical treatment activities of the patient care provider, including professional supervision,

• monitoring the state of health of the person concerned,

• taking the necessary measures in the interest of public health [§16], public health and epidemiology,

• enforcement of patient rights.

The purpose of handling optional data is to make these data available to Privátmed and/or Budapest Skin based on the patient's voluntary and decisive decision. Without the patient's prior informed consent, we do not use personal data for purposes other than those indicated, and we do not transfer data to third parties. The data provided is processed with the voluntary consent of the patient.

During the registration - and thus in connection with the use of the service - it is mandatory to provide certain data, which are essential for the use of the service, without which the registration cannot take place successfully. The range of mandatory data is as follows: name, place and time of birth, social security number, residential address, mother's name, phone number.

Privátmed and Budapest Skin do not enforce any sanctions against patients and do not discriminate against patients who refuse to provide non-mandatory data. The data management of Privátmed and Budapest Skin included in these regulations covers all data provided by the patient.

4. Information on data management, duration of data management

We inform our patients clearly and in detail about all the facts related to the processing of personal data specified in point 2, so in particular the purpose and legal basis of the data processing, the person authorized for data processing and data processing, the duration of the data processing, and who can see the data. The information provided by Privátmed and Budapest Skin also covers the rights and legal remedies of the data subject.

Upon request, the data controller provides written information to the data subject within 30 days about the data it manages, the purpose, legal basis, duration of the data processing, the name, address (headquarters) of the data processor and its activities related to data processing, as well as who and for what purpose it is or was received. the data. Anyone can request information at the data controller's mailing address by entering their mailing address.

At the request of our patient, we modify, correct, lock or delete his personal data from our system. Send your requests in this direction by letter to the following mailing address: 1027 Budapest, Csalogány utca 3. D. ép. 1st em. 2. or by e-mail at the e-mail address info@csaloganyorvosikozpont.hu. We would like to inform you that data management based on consent is managed until the patient's consent is withdrawn.

5. The scope of those who have access to the data, data processors

Only designated employees of Privátmed and Budapest Skin can access personal, non-public data provided by patients. Privátmed and Budapest Skin will not transfer the personal data they handle to a third party or persons under any circumstances, except in the mandatory cases provided for in the applicable legislation, or without the consent of the person concerned.

Our company takes the appropriate measures in order to safely store the processed personal data, as well as to avoid its unauthorized use and related abuses.

Privátmed and Budapest Skin are aware that the data controller and the data processor are obliged to ensure the security of the data in their field of activity, and are also obliged to take the technical and organizational measures and establish the procedural rules that this law and other data and are necessary to enforce confidentiality rules.

The data - especially personal data classified as state secrets and service secrets - must be protected in particular against unauthorized access, alteration, disclosure or deletion, as well as against damage or destruction.

The data can be forwarded and the different data processes can be connected if the data subject has consented to it, or if the law allows it, and if the conditions for data management are met for each individual piece of personal data.

6. Patients' rights related to the management of their personal data, data deletion

Privátmed and Budapest Skin undertake to publish a clear, attention-grabbing and unequivocal statement informing them of the method, purpose and principles of data collection before recording, recording or processing any of their patients' data.

In addition to all of this, Privátmed and Budapest Skin draw the attention of their patients to the voluntary nature of data provision in all cases where data collection, processing, and recording are not required by law. In the case of mandatory data provision, the legislation ordering data management must also be indicated.

Delete data:

XLVII of 1997 on the management and protection of health and related personal data. by law, the health documentation shall be kept by the body that assesses occupational and professional suitability in the first instance for at least 30 years from the date of data collection - for 40 years in the case of an employee exposed to the effects of biological factors according to separate legislation."

7. Remedial information and legal enforcement options

We ask our patients, if they feel that Privátmed and/or Budapest Skin have violated their right to the protection of personal data, to contact us so that we can rectify the possible violation.

We inform our patients that in the event of a possible violation of the law, CXII of 2011 on the right to self-determination of information and freedom of information. based on the provisions of the law, they can apply to the National Authority for Data Protection and Freedom of Information, and they can assert their claim in court. The detailed legal provisions regarding this, as well as the obligations of the data controller, can be found in Act CXII of 2011 on the right to self-determination of information and freedom of information. contained in the law.

The contact details of the National Data Protection and Freedom of Information Office are as follows:

Mailing address: 1534 Budapest, Pf.: 5.

Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c

Phone: +36 (1) 391-1400

Fax: +36 (1) 391-1410

Website: http://www.naih.hu

Email: ugyfelszolgalat@naih.hu

Below, we inform our patients about additional guarantees protecting the data subject:

Everyone has the right to learn about the automated file of personal data, its main purposes, as well as the person and location of the data file manager.

Everyone also has the right to be informed at reasonable intervals and without excessive delay or cost, whether their personal data is stored in an automated data file, and to be informed about this data in a form that they can understand; in justified cases, correct or delete this data in the simplest and fastest possible way; can avail of legal remedies if his request for information or, in justified cases, communication, correction or deletion, as stipulated in the legislation, is not fulfilled. At the request of the data subject, the data controller provides information about the data it manages or processes by the processor commissioned by it, the purpose, legal basis, duration of the data processing, the name, address (headquarters) of the data processor and its activities related to data processing, as well as who and for what purpose receive or have received the data.

The data controller is obliged to provide the information in writing in an understandable form as soon as possible, but no later than 30 days after the submission of the request. In case of violation of the data subject's rights, the data controller may go to court against the data controller. The data controller is obliged to compensate the damage caused to others by the illegal processing of data of the data subject or by violating the requirements of technical data protection.

The data controller is also liable to the data subject for the damage caused by the data processor. The data controller is released from liability if it proves that the damage was caused by an unavoidable cause outside the scope of data management. There is no need to compensate the damage if it resulted from the intentional or grossly negligent behavior of the injured party.

8. Others

Privátmed and Budapest Skin reserve the right to change their privacy statement. This can be done especially if the law makes it mandatory. A change in data management must not mean that personal data is handled for a different purpose.

In all cases, the data is based on CXII of 2011. We handle it on the basis of Section 5 (1) point a) and (2) point a) of the Act.

Privátmed and Budapest Skin undertake to

• ensure the security of the data, take the technical and organizational measures and establish the procedural rules that ensure that the recorded, stored and managed data are protected and prevent their destruction, unauthorized use and unauthorized alteration,

• all third parties to whom the data may be forwarded or transferred are also called upon to fulfill their obligations in this regard.

Privátmed and Budapest Skin hereby publish their data protection and management principles and policy, which they recognize as binding on themselves. When developing these rules, we took into account the CXII of 2011. Act on the right to informational self-determination and freedom of information, Act VI of 1998. Act on the Protection of Individuals during the Machine Processing of Personal Data, the provisions of the Convention on the Promulgation of the Convention dated January 28, 1981 in Strasbourg. The purpose of these regulations is to ensure that in all areas of our services, for all individuals, regardless of their nationality or place of residence, their rights and fundamental freedoms, especially their right to privacy, are respected during the machine processing of their personal data (data protection).

Privátmed and Budapest Skin are also aware of the personal data requirements set out below during machine processing

1. the data may only be obtained and processed fairly and legally;

2. the data may only be stored for a specific and legal purpose and may not be used in any other way;

3. the data must be proportionate to the purpose of their storage and must meet this purpose, they cannot expand beyond it;

4. the data must be accurate and, if necessary, timely;

5. the data storage method must be such that the data subject can be identified only for the time necessary for the purpose of storage;

6. personal data on racial origin, political opinion, religious or other beliefs, as well as health and sexual life cannot be processed by machine, unless the domestic law provides adequate safeguards;

7. Adequate security measures must be taken to protect personal data stored in automated data files, to prevent accidental or unlawful destruction or accidental loss, as well as unlawful access, alteration or distribution.

8. Exclusion of liability of Privátmed and Budapest Skin:

If Privátmed and/or Budapest Skin becomes aware that your patient provides personal data of another person during registration in a manner that violates these regulations, the rights of a third party, or otherwise violates the law, publicly accessible or illegally obtained personal or other data uses the rights of third parties or violates the law (for example for direct marketing purposes), or otherwise violates the provisions of this data protection policy, or causes damage in any sense during registration, Privátmed and/or Budapest Skin will take the necessary legal measures in order to compensate for the damage caused, as well as to hold the perpetrator legally responsible. In such cases, Privátmed and/or Budapest Skin will provide all possible assistance to the acting authorities in order to establish the identity of the person violating the law and hold them accountable.

Last modification: August 9, 2018