GDPR regulation

PERSONAL DATA PROTECTION POLICY

Vougiouklakeio General Clinic ensures the protection of personal data, prioritizing their proper management and processing by our staff.

At the Vougiouklakeio clinic, we are committed to fully complying with its requirements

General Data Protection Regulation (EU) 2016/679 of the European Union,
but also the applicable national legislative framework for the processing of personal data.

1. CONTROLLER – CONTACT DETAILS

The General Clinic of West Attica Vougiouklakeo acts as the Data Controller for all personal data that it collects, registers, organizes, structures, stores, changes, retrieves, processes, transmits, restricts or deletes.

General Clinic West Attica - Vougiouklakeio
D. Smyrnis 36 Egaleo, 12242
Tel. : 210 5906611 -15
E-mail: [email protected]

For issues related to the processing and management of personal data in general, you can contact the Clinic's Data Protection Officer at [email protected].

2. WHAT DATA WE COLLECT AND PROCESS

The Vougiouklakeio clinic collects and manages personal data exclusively for the provision of diagnostic, therapeutic, interventional and nursing procedures to its clients/patients.

For the implementation of the above actions, the clinic collects personal data such as first name, patronymic, patronymic, marital status, citizenship, year and place of birth, residential address, telephone, email, no. identity card / no. passport, AMKA, insurance fund and no. Record this, medical history / previous test results.

3. WHERE WE COLLECT DATA FROM

The General Clinic of West Attica Vougiouklakeio processes personal data provided by the client/patient upon arrival, either for the purpose of hospitalization or for conducting diagnostic tests.

In case of incapacity of the natural person, it is possible for some of the data to be given by his companion and/or by the patient's doctor, if he is referred to the clinic.

Some personal data may also be obtained from third-party sources (e.g. ECA coordination center or from other health organizations, e.g. in case of transfer of the patient to the clinic).

4. PURPOSES OF PROCESSING & LEGAL BASIS OF PROCESSING

All the above personal data are collected and subject to processing for the purpose of providing diagnostic, therapeutic, interventional and nursing procedures to our clients/patients. Some contact details may also be used for the purposes of informing and promoting the services of the Vougiouklakeio clinic, always provided that the relevant consent of the natural persons has been given.

Legal bases for data processing may be as the case may be: i. The provision of all the Clinic's medical services to its clients/patients and ii. in order for the WHITE CROSS Clinic to comply with its legal obligations, during its operation.

5. WHO ARE THE RECIPIENTS OF THE PERSONAL DATA

The employees of the General Clinic of West Attica Vougiouklakeio may have access to your data on a case-by-case basis, exclusively in the context of their duties.

In addition, your personal data may be transmitted to third party recipients. Possible recipients are mentioned indicatively:

  • Your insurance fund
  • Your private insurance company, in case you notify us that you want to use it
  • Collaborating specialist laboratories
  • Scientific interconnected hospitals
  • Material supplier companies, when required
  • External partners who process personal data on behalf of Vougiouklakeio Clinic
  • To audit and other public bodies, as long as this is required by the applicable legislative, regulatory and regulatory framework.

    6. DATA RETENTION PERIOD

    The Vougiouklakeio clinic keeps your personal data for a period of 10 years if it is for diagnostic tests and for 20 years, in case of your hospitalization, in accordance with Law 3418/2005 and they are kept in a protected file with controlled access.

    If there is your consent that defines a different retention period of your personal data, then they are kept until this consent is revoked. It is emphasized that in this case, the withdrawal of consent does not negate the legality of the processing that was based on consent before its withdrawal.

    Vougiouklakeio Clinic ensures the legal and appropriate use of the personal data it collects, applies all appropriate technical and organizational measures to ensure their protection and the prevention of any unauthorized access to this data.

    7. RIGHTS OF SUBJECTS IN RELATION TO THEIR PERSONAL DATA

    Regarding the processing of your personal data you can exercise the following rights:

    Right of access
    You retain the right to be informed of your data that we hold and process, the reason and other additional information about it, and you can also ask us for a copy of it.

    Right to rectification You have the right to request the correction, modification and/or completion of your personal data.

    Right to erasure ("right to be forgotten")
    You can request the deletion of your personal data after it has been processed with your consent. In cases where the processing is based on another legal basis (such as, for example, the performance of a contract, a legal obligation or the protection of the company's legal interests, etc.) your right may be subject to limitations or may not exist.

    Right to restriction of processing
    You have the right to request the restriction of the processing of your personal data
    when their accuracy is disputed and until the relevant verification is done, as an alternative to their deletion.

    Right to object to processing
    You have the right to object to the processing of your personal data when it is done with a legitimate interest, as well as for direct marketing and profiling purposes.

    Right to portability
    You have the right to request and receive your personal data in a form that will allow you to easily access it, use it and process it with commonly used processing methods. In addition, for your data that we process by automated means and based on your consent or for the performance of a contract, you can ask us to transfer it directly to another Data Controller, if this is technically possible.

    Right to withdraw consent
    When the processing of your data is based on your consent, you have the right to withdraw it at any time. The withdrawal of your consent does not affect the lawfulness of the processing of your data before its withdrawal.


    8. COMPLAINT RIGHTS TO THE AUTHORITY FOR THE PROTECTION OF PERSONAL DATA (APDPH)


    You reserve the right to file a complaint with the Personal Data Protection Authority (www.dpa.gr) regarding matters concerning the processing of your personal data.