Privacy Policy
EUNOMA Clinic

Dear clients and visitors,

The purpose of this document is to inform you about how EUNOMA Clinic, s.r.o. collects, uses, protects, and transfers your personal data and how you can exercise your rights.

Personal data means information relating to an identified or identifiable natural person. Personal data includes, for example, name, identification number, location data, network identifier, or one or more special elements of the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

Controller and Contact

The controller of personal data under Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter "GDPR") is EUNOMA Clinic, s.r.o., with registered office at Školská 660/3, 110 00 Prague 1, Company ID No.: 237 760 64 (hereinafter "Controller").

If you need any part of the text explained, advice, or to discuss further processing of your personal data, you can contact us at any time at the email address:

malinovska@adiporadna.cz

or send your query to the Controller's contact address: Lípová 511/15, 120 00 Prague 2.

The Controller has not appointed a data protection officer.

What Data We Process and for What Purpose

We process the following categories of your data:

• Identification and Contact Data– Name, surname, date of birth, residential address, correspondence address, email address, and telephone number. We process this data so that we can unambiguously identify and contact you, schedule consultation appointments, provide addiction counseling, psychological and nutritional counseling consultations, issue and send you consultation reports, and record and respond to your potential queries.
• Payment and Billing Data– Account number, billing terms. We process this data so that we can process your payments for our services.
• Website Visit Data– IP addresses and cookies. We process this data to ensure your access, availability, and security of the portals adiporadna.cz, eunoma.cz, and eunomaclinic.cz (necessary cookies). Depending on your preference settings, we may also process cookies for the purpose of setting your preferences and displayed content (preference cookies), statistical analysis of visits and use of our websites (analytics cookies), and providing targeted advertising messages from third parties (marketing cookies).
• Special Categories of Personal Data under Article 9
  GDPR– Health status data. We process this data for the purpose of providing our services according to your individual health needs. You are not obliged to provide this data; the provision of this data is voluntary, and you can withdraw your consent to its provision at any time

All data is obtained directly from you by filling it in on the portals adiporadna.cz, eunoma.cz, and eunomaclinic.cz or by providing it during personal, email, or telephone contact.

What is the Legal Basis for Processing Your Data

• The legal basis for processing personal data is primarily the performance of a contract under Article 6(1)(b) GDPR – i.e., performance of the contract concluded between us and you for the provision of counseling (addiction, psychological, nutritional) and consulting services.
• We also process payment data and billing data for the purpose of ful lling the Controller's legal obligations within the meaning of Article 6(1)(c) GDPR, in particular for the purpose of fulfilling accounting and tax obligations.
• We process data on visits to our websites for the purposes of the Controller's legitimate interests, which are given by the interest in IT security, processing for statistical purposes, and further development of the Controller's services.

The Controller does not carry out automated individual decision making or pro ling within the meaning of Article 22 GDPR.

Who Has Access to Your Personal Data

• external experts providing addiction, nutritional, or psychological counseling within the EUNOMA Clinic workplace
• external accounting and tax advisors
• processors who provide us with server, web, cloud, or IT services

The Controller has concluded written agreements on the processing of personal data with all these entities, in which the entities have committed to protecting personal data and complying with GDPR rules. Personal data may be transferred upon request or in the event of suspected unlawful conduct to public administration authorities. In the case of payment transactions, banks or payment service providers on the Internet may obtain some data in the usual scope. The Controller does not transfer personal data to a third country (to a country outside the EU) or to an international organization

Personal Data Retention Period

• The Controller retains personal data for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the Controller and to assert claims from these contractual relationships, but no longer than 10 years from the termination of the contractual relationship
• If personal data is processed on the basis of consent, the Controller processes it for the period until the consent to the processing of personal data is withdrawn, but no longer than 3 years.

After the expiry of the personal data retention period, the Controller deletes the personal data.

Your Rights Arising from the Processing of Personal Data

In relation to our processing of your personal data, you have the following rights:

• the right of access to personal data under Article 15 GDPR
• the right to rectification of personal data under Article 16 GDPR
• the right to erasure of personal data under Article 17 GDPR ("right to be forgotten")
• the right to restriction of data processing under Article 18 GDPR
• the right to data portability under Article 20 GDPR
• the right to object to processing under Article 21 GDPR
• the right to lodge a complaint regarding the processing of personal data under Article 77 GDPR

Explanation of your rights:

Right of Access– The right of access means that you can at any time request our confirmation as to whether personal data concerning you are or are not being processed, and if so, for what purposes, to what extent, to whom they are made available, how long we will process them, whether you have the right to rectification, erasure, restriction of processing or to object, from where we obtained the personal data. You also have the right to obtain a copy of your personal data, with the first provision being free of charge; for further provision, we may require a reasonable fee for administrative costs.

Right to Rectification– The right to rectification means that you can at any time ask us to correct or supplement your personal data if it is inaccurate or incomplete.

Right to Erasure– The right to erasure means that we must delete your personal data if (i) they are no longer necessary for the purposes for which they were collected or otherwise processed, (ii) you withdraw the consent on the basis of which we process the data, (iii) you submit objections to the processing in writing or by email and there are no overriding
legitimate grounds for processing, or (iv) we are required to do so by legal obligation, etc.

Right to Restriction of Processing– The right to restriction of processing means that until we resolve any disputed issues regarding the processing of your personal data, we must restrict the processing of your personal data so that we can only have them stored and possibly use them for the purpose of establishing, exercising, or defending legal claims.

Right to Data Portability– The right to data portability means that you have the right to obtain your data that we process in a structured, commonly used, and machine-readable format, and the right to transfer this data to another controller.

Right to Object– The right to object means that you can, for reasons relating to your particular situation, object. We will then not be able to process your data unless we demonstrate compelling legitimate grounds for processing

All your rights can be exercised by contacting us at the email address: malinovska@adiporadna.cz or by sending your request to the address Lípová 511/15, 120 00 Prague 2.

If you believe that the processing of personal data violates GDPR, you have the right to lodge a complaint with the Office for Personal Data Protection (www.uoou.cz).