INFORMATION ON PERSONAL DATA PROCESSING BY MEDI PARTNER SP. Z O.O.
1. Personal data controller
The administrator of your personal data will be Medi Partner Sp. z o, 36 Rakowiecka Street, 02-532 Warsaw (hereinafter: We). You can contact Us as follows:
- by letter to the address: Invimed, 36 Rakowiecka Street, 02-532 Warsaw - via contact form at www.invimed.pl/kontakt/
- via email: invimed@invimed.pl
- by telephone: 500 900 888
2. Data Protection Officer
We have appointed a Data Protection Officer. This is the person you can contact on all matters concerning the processing of your personal data and the exercise of your rights in relation to data processing. You can contact the Supervisor as follows:
- by mail to the following address: Medi Partner sp. z o.o., Al. Jerozolimskie 96, 00-807 Warsaw, marked Data Protection Officer
- via email: IOD@medipartner.pl
The function of Data Protection Officer is performed by Ms Barbara Murdza.
3. the purposes of processing your personal data and the legal basis for the processing
We will process your personal data in order to:
- to provide you with medical services, including the provision of services under contract with the Ministry of Health and local authorities, and to manage the services we provide - as part of this purpose, we will process your data in order to, inter alia, verify your identity, keep the medical records required by law or contact you in relation to the service provided (e.g. to remind you of an appointment, inform you of the possibility of collecting test results)
- execute contracts for storage and/or transport of reproductive cells and embryos
- handle complaints, opinions and reports submitted, including the fulfilment of requests concerning the exercise of your rights under data protection legislation
- provide you with information material on how to use our services, e.g.: on improvements/obstacles to accessing services, on the need to prepare for a survey,
- archive your data upon completion of the services provided to you,
- establish, assert and defend against potential claims,
- ensure the security of persons and property, in particular through the use of video surveillance,
- conduct quality and satisfaction surveys (including based on profiling),
- provide you with materials to promote products and services (including using profiling) - only if you have consented to this.
The legal bases for processing your data are:
- providing you with health care and medical services, protecting your health, health prevention, treatment and managing the provision of these services - such processing is regulated by law, in particular: the Act on Medical Activity, the Act on Patient's Rights and Patient's Ombudsman and, within the scope of services provided on the basis of contracts concluded with the Ministry of Health, also the Act on healthcare services financed from public funds (6 1 C RODO and Article 9(2) H RODO),
- performance of the contract between us for the provision of services for the transport or storage of reproductive cells and embryos (Article 6(1)(B) RODO),
- Your consent to the processing of personal data for the purpose specified directly in the content of the consent (Article 6(1)(A) RODO or/and other legal basis under specific legislation, e.g. Article 398 of the Electronic Communications Act),
- our legitimate interest, in relation to 6(1)(F) of the RODO consisting of:
about a satisfaction and feedback survey on the use of Our Services,
on the establishment, investigation and defence of claims,
on the handling of submitted complaints, requests and opinions,
on ensuring the security of persons and property, in particular through the use of video surveillance,
to provide information material on how to use our services
In situations where the establishment, investigation and defence of claims will require the processing of special categories of personal data (e.g. information about your health condition) we will act on the basis of Article 9(2)(F) of the DPA;
- applicable legislation, (Art. 6 1(C) RODO) concerning, among other things, the keeping of financial and tax accounts and the archiving of such data in particular in connection with the Accounting Act, the exercise of your rights arising directly from the RODO;
- taking action for the prevention of diseases in connection with a task carried out in the public interest in the field of health (Article 6(1)(E) and Article 9(2)(I) of the DPA)
5 Information on profiling
On the basis of your personal data, we may carry out profiling, i.e. the automated assessment of certain personal factors concerning you. We indicate below in which situations profiling may occur.
We carry out profiling to:
- We use data such as patient number, first name, last name, age, gender, language, date of birth, city, facilities visited, type of product purchased, and source of data. In addition, we may also take into account statistical data about behaviour on websites and mobile applications, use of the Patient Portal and preferences expressed on Medi Partner services.
6 Period of retention of your personal data
We will process your data as a general rule:
- for 90 years - in relation to the maintenance and archiving of medical records for infertility treatment from the start of their maintenance,
- for 20 years in connection with the keeping and retention of medical records - the period is calculated from the last entry made in them; subject to the exceptions set out in Article 29(1) of the Act on Patient Rights and Patient Ombudsman
- for 6 years - in connection with the investigation and defence of claims in relation to the services provided;
- for 5 years - for accounting purposes and for tax reasons, the period is calculated from the end of the calendar year in which the tax liability arose;
- for 2 years - in connection with the recording of calls on Our hotline;
- for 30 days - in connection with video monitoring;
- until you object or withdraw your consent to the processing of your personal data, if we processed your data on such a basis.
7 Recipients of your personal data
We will transfer your personal data::
- entities authorised by law, in particular:
o medical entities to ensure continuity of treatment and availability of healthcare,
o insurance companies,
o to public authorities entitled to obtain your data,
- to entities authorised by you;
- entities that process data on our behalf and in accordance with our instructions, to whom we outsource services such as IT and marketing;
- to entities that provide us with legal services (where this proves necessary for the establishment, investigation or defence of claims).
8. Your rights in relation to the processing of personal data
You have the following rights in relation to the processing of your personal data:
1. the right to object to the processing of your data for marketing purposes or quality and satisfaction surveys - as we are processing your data on the basis of a legitimate interest,
2. the right to object to the processing on grounds of your particular situation - in cases where we process your data on the basis of our legitimate interest for purposes other than a). above,
3. the right to access your personal data,
4. the right to request the rectification of your personal data,
5. the right to request the deletion of your personal data, only if we are not obliged by law to process it,
6. the right to request the restriction of the processing of your personal data,
7. the right to portability of your data
To exercise the above rights, please contact us or our Data Protection Officer (contact details at 1 and 2 above).
Right to lodge a complaint with an authority
You also have the right to lodge a complaint with the supervisory authority in charge of personal data protection, i.e. the President of the Data Protection Authority.
Right to withdraw consent to the processing of personal data
If your data is processed based on your consent, you have the right to withdraw it at any time without negative consequences. This does not affect the lawfulness of the processing carried out before the withdrawal of consent.
9. Transmission of data to third countries
In order to ensure the highest possible quality of our services, we use other suppliers, e.g. for IT support. Accordingly, your personal data may be transferred outside the European Union. We assure you that, in such a case, the transfer of data will be based on an appropriate contract between us and such entity, containing standard data protection clauses adopted
by the European Commission, or on the basis of a corresponding European Commission decision.
10 Obligation to provide data
When using medical services, the provision of personal data is a legal requirement. The provision of data for the use of other types of services or for the conclusion of a contract is voluntary, although failure to provide data will prevent the performance of services or the conclusion of a contract.
Update: 1.09.2025.