Pursuant to Article 13 of Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) (hereinafter referred to as “GDPR”) <\/p>\n\n
The providers of healthcare and non-healthcare services at the private healthcare facility ToBe s.r.o., with its registered office at Stromov\u00e1 7, 831 01 Bratislava, Company ID: 53 509 323, are joint controllers (hereinafter referred to as “controllers”) in accordance with Article 26 of the GDPR and process clients’ personal data under the conditions specified below: <\/p>\n\n
The controllers process clients’ personal data for the following purposes:<\/p>\n\n
Client’s personal data is processed without their consent. The legal basis is the fulfillment of the controller’s legal obligations (Article 6(1)(c) GDPR), particularly obligations under the following legal regulations: <\/p>\n\n
The provision of personal data for this purpose is required by relevant legal regulations (legal obligation); if the client does not provide the requested personal data, it may result in the refusal to provide healthcare.<\/p>\n\n
The legal basis is the performance of a contract and pre-contractual measures (Article 6(1)(b) GDPR), i.e., the fulfillment of the controller’s obligations arising from the service agreement concluded between the controller and the client. When processing personal data in connection with a concluded contract for tax, accounting, and potentially audit purposes, the legal basis is the fulfillment of the controller’s legal obligations (Article 6(1)(c) GDPR), particularly obligations under the following legal regulations: <\/p>\n\n
The provision of personal data, which is necessary for the conclusion and subsequent performance of the contract and\/or required by legal regulations, is a contractual and\/or legal requirement; if the client does not provide the requested personal data, it may result in the non-provision of the service.<\/p>\n\n
If, during the provision of non-healthcare services, so-called special categories of personal data (i.e., sensitive personal data, e.g., related to health) are to be processed, the legal basis is the client’s consent (Article 6(1)(a) and Article 9(2)(a) GDPR), which the client grants in writing in advance. <\/p>\n\n
The legal basis is the client’s consent, which they grant in writing or electronically via the controllers’ website (newsletter subscription).<\/p>\n\n
No automated decision-making, including profiling, occurs during the processing of personal data.<\/p>\n\n
Personal data is stored for no longer than is necessary to achieve the purpose for which the personal data is processed.<\/p>\n\n
Personal data processed for the purpose of providing healthcare is retained by the controllers in accordance with \u00a7 22(2) of Act No. 576\/2004 Coll. for 20 years from the last provision of healthcare to the client. <\/p>\n\n
Personal data processed for the purpose of fulfilling contractual obligations is retained by the controllers for the duration of the contract and subsequently only for such period as is necessary to settle mutual rights and obligations, e.g., for the purpose of potential claims arising from liability for defects (complaints). <\/p>\n\n
Personal data whose processing is based on the client’s consent is retained by the controllers for the duration of the granted consent. If the client wishes to terminate this processing, they may withdraw their consent at any time by delivering a written withdrawal of consent to the controllers. Consent granted for marketing purposes can also be withdrawn by clicking on the relevant link in each email newsletter. In the event of withdrawal of consent, the controllers will cease processing the relevant personal data, unless there is another legal basis for their further processing. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. <\/p>\n\n
The controllers do not provide or make clients’ personal data accessible to any third party, except for persons designated by law and processors who ensure the fulfillment of legal and contractual obligations for the controllers and have concluded a personal data processing agreement. These persons will have access to personal data necessary for carrying out the agreed activities, but they cannot use it for any other purposes and are obliged to process this personal data in accordance with applicable legal regulations. <\/p>\n\n
The transfer of personal data to third countries (i.e., outside the EU) or international organizations is not carried out.<\/p>\n\n
The client, as the data subject, has the following rights:<\/p>\n\n
If the client believes that the processing of their personal data is in violation of the GDPR, they have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, with its registered office at Hrani\u010dn\u00e1 12, 820 07 Bratislava 27, www.dataprotection.gov.sk<\/a>.<\/p>\n\n In case of questions or ambiguities regarding the processing of personal data or for the purpose of exercising the data subject’s rights, the client may contact any of the controllers via email or by sending a written letter to the address of the healthcare facility. Current contact details are published on the website www.tobe.sk. <\/p>\n\n This Privacy Policy is valid from June 1, 2026.<\/p>\n\n The controllers regularly review and revise personal data processing and protection processes, and therefore, this Privacy Policy may be updated. If such an update involves significant changes, the controllers will inform clients about it. The currently valid version of the Privacy Policy will always be published on the healthcare facility’s website. <\/p>\n","protected":false},"excerpt":{"rendered":" Pursuant to Article 13 of Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) (hereinafter referred to as “GDPR”) The providers of healthcare […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"inline_featured_image":false,"footnotes":""},"class_list":["post-11488","page","type-page","status-publish","hentry"],"blocksy_meta":[],"_links":{"self":[{"href":"https:\/\/tobe.sk\/en\/wp-json\/wp\/v2\/pages\/11488","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tobe.sk\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/tobe.sk\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/tobe.sk\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tobe.sk\/en\/wp-json\/wp\/v2\/comments?post=11488"}],"version-history":[{"count":1,"href":"https:\/\/tobe.sk\/en\/wp-json\/wp\/v2\/pages\/11488\/revisions"}],"predecessor-version":[{"id":11489,"href":"https:\/\/tobe.sk\/en\/wp-json\/wp\/v2\/pages\/11488\/revisions\/11489"}],"wp:attachment":[{"href":"https:\/\/tobe.sk\/en\/wp-json\/wp\/v2\/media?parent=11488"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}\n