Dear clients and visitors,
The purpose of this document is to inform you about how EUNOMA Clinic, s.r.o. collects, uses, protects, and transfers your personal data and how you can exercise your rights.
Personal data means information relating to an identified or identifiable natural person. Personal data includes, for example, name, identification number, location data, network identifier, or one or more special elements of the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
The controller of personal data under Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter " GDPR ") is EUNOMA Clinic, s.r.o., with registered office at Školská 660/3, 110 00 Prague 1, ID No.: 237 760 64 (hereinafter " Controller ").
If you need any part of the text explained, advice, or to discuss further processing of your personal data, you can contact us at any time at the email address: malinovska@adiporadna.cz or send your query to the Controller's address: Lípová 511/15, 120 00 Prague 2.
The Controller has not appointed a data protection officer.
We process the following categories of your data:
Payment and billing data (account number, billing terms). We process this data so that we canprocess your payments for our services.
All data is obtained directly from you by filling it in on the portals adiporadna.cz, eunoma.cz, and eunomaclinic.cz or by providing it during personal, email, or telephone contact.
The legal basis for processing personal data is primarily the performance of a contract under Article 6(1)(b) GDPR – i.e.,performance of the contract concluded between us and you for the provision of counseling (addiction, psychological, nutritional) and consulting services.
We also process payment data and billing data for the purpose of fulfilling the Controller's legal obligations within the meaning of Article 6(1)(c) GDPR, in particular for the purpose of fulfilling accounting and tax obligations.
We process data on visits to our websites for the purposes of the Controller's legitimate interests, which are given by the interest in IT security, processing for statistical purposes, and further development of the Controller's services.
The Controller does not carry out automated individual decision-making or profiling within the meaning of Article 22 GDPR.
As the Controller, we may transfer your personal data for the above-mentioned purposes to the necessary extent to third parties, in particular:
external experts providing addiction, nutritional, orpsychological counseling within the EUNOMA Clinic workplace;
The Controller has concluded written agreements on the processingof personal data with all these entities, in which the entities havecommitted to protecting personal data and complying with GDPRrules.
Personal data may be transferred upon request or in the event ofsuspected unlawful conduct to public administration authorities.
In the case of payment transactions, banks or payment serviceproviders on the Internet may obtain some data in the usual scope.
The Controller does not transfer personal data to a third country (to a country outside the EU) or to an international organization.
The Controller retains personal data for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the Controller and to assert claims from these contractual relationships, but no longer than 10 years from the termination of the contractual relationship.
If personal data is processed on the basis of consent, the Controller processes it for the period until the consent to the processing of personal data is withdrawn, but no longer than 3 years.
After the expiry of the personal data retention period, the Controller deletes the personal data.
In relation to our processing of your personal data, you have the following rights:
Your rights are explained below so that you can get a clearer idea of their content.
The right of access means that you can at any time request our confirmation as to whether personal data concerning you are or are not being processed, and if so, for what purposes, to what extent, to whom they are made available, how long we will process them,whether you have the right to rectification, erasure, restriction of processing or to object, from where we obtained the personal data. You also have the right to obtain a copy of your personal data, with the first provision being free of charge; for further provision, we may require a reasonable fee for administrative costs.
The right to rectification means that you can at any time ask us to correct or supplement your personal data if it is inaccurate or incomplete.
The right to erasure means that we must delete your personal data if (i) they are no longer necessary for the purposes for which they were collected or otherwise processed, (ii) you withdraw the consent on the basis of which we process the data, (iii) you submit objections to the processing in writing or by email and there are no overriding legitimate grounds for processing, or (iv) we are required to do so by legal obligation, etc.
The right to restriction of processing means that until we resolve any disputed issues regarding the processing of your personal data, we must restrict the processing of your personal data so that we can only have them stored and possibly use them for the purpose of establishing, exercising, or defending legal claims.
The right to data portability means that you have the right to obtain your data that we process in a structured, commonly used, and machine-readable format, and the right to transfer this data to another controller.
The right to object means that you can, for reasons relating to your particular situation, object. We will then not be able to process your data unless we demonstrate compelling legitimate grounds for processing.
All your rights can be exercised by contacting us at the email address: malinovska@adiporadna.cz or by sending your request to the address Lípová 511/15, 120 00 Prague 2.
If you believe that the processing of personal data violates GDPR, youhave the right to lodge a complaint with the Office for Personal DataProtection (www.uoou.cz).
