GDPR

Personal data processing

Information on the processing of personal data is compiled on the basis of article 12 of the EU General Regulation 2016/679 on the protection of personal data Clear information, notification and implementation of data subject’s rights”to inform individuals about the principles of processing personal data and ensuring the rights of persons.

1.1. Personal data is different information about an established or unidentified physical person (data subject). First of all, a natural person is identified on the basis of an identity (name, personal code, place of residence, location, e-mail address, telephone number, network identifier) or on one or more physical, physiological, genetic, mental, economic, cultural or social characteristics.

1.2. Personal data of a special kind are personal data that contain racial or ethnic origin, political opinions, religious or philosophical convictions or membership of a trade union, Genetic data used to establish the uniqueness of an individual biometric data, health data or data on the sexual life and sexual orientation of an individual.

1. Collection and processing of personal data

The personal data you provide to us when making a purchase are: your name and contact details (e-mail address, phone number). We also process your order information (including order content, notification and correspondence, claims and order history). Your personal data is processed pursuant to Articles 6 (1) b) (processing of personal data necessary to fulfil contractual obligations) and 6 (1) c) (to fulfil obligations, arising from legislation) of the General Data Protection Regulation (GDPR) European Union. We may also process your personal data on the basis of our justified interests (Art. 6 (1) f) GDPR, for example, for compiling statistics.

2. Transfer of personal data

Personal data will not be transferred outside the European Economic Area.

In certain cases, the responsible processor may transfer your personal data to third parties if it is necessary, for example, to:

to fulfil its obligations under the law; ř to protect its property and rights;
protect itself from legal actions;
prevent or investigate possible offences.

The responsible processor should keep a register of complaints about medical equipment. The register records complaints and notices about inappropriate equipment, its withdrawal and return, and this information is sent to the manufacturer / the authorized representative of the manufacturer.

3. Security of personal data

We shall take appropriate technical and organizational measures to protect your personal data, taking into account primarily the risks arising from the processing of personal data, in particular the risks of accidental or unlawful destruction, Loss, alteration or unauthorized disclosure or provision of access to transferred, stored or otherwise processed personal data.

4. Preservation of personal data

We process your personal data during the performance of a contract or other agreement and then store your personal data for as long as is necessary to fulfil the purpose for which we collected it, including the performance of legal or accounting obligations applicable to us.

Personal data related to contracts and/or transactions are part of our accounting and business records and are kept for 7 years after the end of the year in which they were recorded. The retention period may be extended if the processing of your personal data is required to meet other requirements related to our core business (such as making or fulfilling claims). After expiry of the retention period, we delete or anonymize personal data.

5. Your rights

In accordance with GDPR and applicable legislation, you have the following rights with respect to your personal data:

the right to request access to your personal data;
the right to request corrections to their personal data. Please note that we may need to verify the accuracy of the information provided by you;
the right to request the deletion of your personal data. Please note that, for legal reasons, we are not always obliged to comply with your request (for example, if personal data is required for the purpose of compiling, presenting or protecting a claim), as we will inform you in our response to your request.

In certain circumstances, you may also have the right to request the transfer of your data or to restrict the processing of your personal data, or to object to the processing of your personal data.

You may exercise your rights in accordance with the requirements of the General Regulations and the legislation in force.

To exercise your rights, please contact us at [email protected]. When sharing information about your rights regarding the processing of your personal data, we may need to ask you for certain information or documents to identify you. This is necessary to ensure that personal data is not disclosed to any person who is not you or who is not entitled to receive your personal data.