As we have your data, you are entitled to the processing rights provided for in the GDPR. Please find below all the necessary information on how to submit and execute requests to exercise your rights.
- How can I submit a request to exercise my rights regarding the processing of personal data?
You can do this in a couple of ways:
- by regular mail: Medicover Sp. z o.o., Al. Jerozolimskie 96, 00-807 Warszawa
- in an electronic format:
to this email address: firstname.lastname@example.org
through a contact form in the Contact tab
- by calling +48 500 900 500
- in person at each centre
- directly to our data protection officer: email@example.com
- What can I apply for?
You have the following rights with respect to the processing of personal data:
- the right to object to the processing of data for marketing purposes;
- the right to object to the processing of data on the basis of your particular circumstances, in cases where we process your data on the basis of our justified interest;
- the right to withdraw your consent;
- the right to access your personal data;
- the right to request to amend your personal data;
- the right to demand the deletion of your personal data only if we are not required by law to process them;
- the right to request that the processing of your personal data be restricted;
- the right to transfer your personal data, i.e. the right to receive your personal data from us in a structured, commonly used and machine-readable computer format. You may transfer your data to another data controller or request that we transfer your data to another data controller. However, we will only do so if this transfer is technically possible.
- What information should I provide in my application?
In order to be able to accept your application and investigate it, as well as to prepare our response, we need to know:
- who you are;
- which right and what range of this right shall be applied;
- what is the preferred feedback communication channel.
- How long will I wait for the response / for the requested action?
In order to thoroughly investigate your case and to be able to fulfil your request in justified cases, we have adopted the following time limits:
Subject of request
the right to object to the processing of data for marketing purposes
the right to object to the processing of data on the basis of a particular situation
the right of access the data
the right to request amendments
the right to request restrictions on the processing of personal data
the right to request erasure of data ('the right to be forgotten')
the right to transfer data
- Will I be covered with any costs of executing my rights?
The execution of the rights of the persons whom the data apply to shall be free of charge. In the case of the right to access the data, however, in accordance with the provisions of law, we reserve the right to charge a fee for provision of copies of the data resulting from the exercise of the right as specified in Art. 15 of the GDPR.
- Will each of my requests be fulfilled?
Any request you make will be forwarded to our data protection officer for review and will result in a response to your request about its implementation – the answer will come from us.
At the same time, we would like to inform you that the result of the analysis may be a refusal to fulfil your request in the event that it proves to be unjustified from the perspective of applicable provisions of law.
An example of this is the inability to exercise the right to delete the data ("the right to be forgotten") in the case of having medical records created at [company name], when as a healthcare entity we are obliged by law to process the data contained in medical records as a rule for the period of 20 years (Patients' Rights and Patient's Ombudsman Act).
- How can I withdraw my marketing consent?
You can cancel your marketing consents by contacting our Customer Service at +48 500 900 500 or by sending an email to firstname.lastname@example.org.