MC "DR. STEFAN CHERKEZOV" EOOD - VELIKO TARNOVO

5000 V. Tarnovo, 1 Nish Str. Tel: (062) 64-38-59

 Registry: tel: (062) 678900335 GSM: 0884929198

E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.

 

PRIVACY POLICY

With the current privacy policy we, DIAGNOSTIC-CONSULTATIVE CENTER "DR. STEFAN CHERKEZOV" EOOD, UIC 201400871, with address: Veliko Tarnovo, 1 Nish Str., aim to inform you how we process your personal activities in carrying out our daily activities data.

This policy does not apply to the processing of personal data of our employees and contractors under civil contracts. The rules in connection with the collection and processing of this type of data are described in detail in the approved by MC "Dr. Stefan Cherkezov" EOOD "Internal policy for personal data processing".

1. PROCESSING OF PERSONAL DATA. PERSONAL DATA ADMINISTRATOR

MC 1 is a personal data administrator according to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27.04.2016. on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (hereinafter referred to as Regulation 2016/679 or the Regulation). MC "Dr. Stefan Cherkezov" Ltd. carries out its activities in full compliance with the requirements of the Regulation and takes all necessary measures to protect and safeguard personal data.

The data of the personal data controller are the following:

  1. a) name: MC "Dr. Stefan Cherkezov" EOOD;
    b) UIC 201400871;
    c) address: Veliko Tarnovo, 1 Nish Str .;
    d) e-mail address:This email address is being protected from spambots. You need JavaScript enabled to view it.
    e) contact details of the data protection officer:This email address is being protected from spambots. You need JavaScript enabled to view it.

2. WHAT INFORMATION DO WE AGGREGATE ABOUT YOU?

2.1. In connection with our activities (patient data)
MC "Dr. Stefan Cherkezov" Ltd. collects and processes your personal data in cases where you wish to use our services. We collect and process the following data:

  • three names;
  • unified civil number (PIN);
  • address (when necessary);
  • information about your health insurance status;
  • data on your health.

MC "Dr. Stefan Cherkezov" Ltd. collects and processes the above data only for the implementation of its activities by law. We need this data in order to be able to provide quality and timely services, as well as to comply with the legal provisions in force in the field of healthcare.

2.2. In connection with the maintenance of our website

MC "Dr. Stefan Cherkezov" Ltd. uses your personal data when filling out the contact form on our website - www.dkcvt.com In this case, we collect and process the following data:

  • name - when you want to contact us through the contact form;
  • phone - when you want to contact us through the contact form;
  • email - again when contacting us through the contact form;

When using the above contact form, you send us a message to which you will receive a reply within a reasonable time. Please do not provide sensitive information in the communication (racial or ethnic origin, political views, religious or philosophical beliefs or trade union membership, as well as the processing of genetic data, biometric data for sole identification purposes, health data or data for sexual life or sexual orientation). For questions that suggest such content in their content, please visit us in person at: Veliko Tarnovo, 1 Nish Street, to refer you to the appropriate specialist. We would like to inform you that all messages containing sensitive information will be deleted upon entering our system and will not receive a response.

  • Data of customers and suppliers

In carrying out our activities, mainly in order to comply with the requirements of tax and accounting legislation, we collect and process the following data of our customers and suppliers:

  • name;
  • address;
  • telephone (if necessary).

2.4. Data of job candidates

As an employer, MC "Dr. Stefan Cherkezov" Ltd. conducts competitions for employment. We collect the following personal data from job applicants:

  • name;
  • date of birth;
  • telephone;
  • address (if the person provided it when preparing his / her CV);
  • work experience until the date of submission of the application;
  • education (the person should indicate the education relevant to the position for which he / she is applying).


3. HOW DO WE USE YOUR PERSONAL DATA AND ON WHAT LEGAL BASIS DO WE PROCESS THEM?

3.1. Legality of the processing

We process your personal data on the following two grounds: in

  • order to fulfill a contract to which you are a party - MC "Dr. Stefan Cherkezov" Ltd. performs its services on the basis of a request received by you to perform the relevant examinations and health interventions. MC "Dr. Stefan Cherkezov" Ltd. reserves the right to refuse to provide, use or store your personal data not to provide the relevant health service. The personal data provided so far will be processed and stored only with a view to complying with the legislation in the field of healthcare;
  • in order to comply with legal obligations that apply to us - compliance with health, accounting and tax legislation;
  • with the consent of the data subject when using our contact form on our website.

3.2. Principles we follow when processing your data

When collecting, processing and storing your personal data, we follow the following principles set out in REGULATION (EU) 2016/679:

  • principle of "legality, good faith and transparency" - we process your personal data lawfully , in good faith and in a transparent manner with regard to the data subject;
  • the principle of "limitation of objectives" - we collect data for specific, explicitly stated and legitimate purposes and are not further processed in a way incompatible with these objectives;
  • the principle of "data minimization" - we process so much personal data, relevant, relevant and limited to what is necessary in relation to the purposes for which it is processed;
  • principle of "accuracy" - we process and keep the data up to date, taking all reasonable measures to ensure the timely deletion or correction of those data that have not been found to be inaccurate. Each of our clients is obliged to provide accurate and up-to-date personal data and to inform us in a timely manner in the event of a change in the process data;
  • principle of "storage restriction" - the data processed by MC "Dr. Stefan Cherkezov" EOOD are stored for a period not longer than necessary for the purposes for which they are processed. When storing and archiving data, we fully comply with the current regulations - Regulation 2016/679, the Personal Data Protection Act and a number of special laws in force in the field of healthcare and accounting;
  • Principle of "integrity and confidentiality" - MC "Dr. Stefan Cherkezov" Ltd. processes your personal data in a way that ensures an appropriate level of security, taking a number of means and applying appropriate technical and organizational measures to protect against unauthorized or illegal processing and against accidental loss.

3.3. Purposes of personal data processing and retention period

3.3.1. Patient data

Objectives- MC "Dr. Stefan Cherkezov" Ltd. processes the data of its patients in order to provide health (medical) services in compliance with the requirements of laws and regulations governing the field of health care.

Retention period- in determining the terms for storage of information, the criteria used are the regulations in force in the field of healthcare, such as (but not only) the Health Act, the Medical Establishments Act, the Blood, Blood Donation and Blood Transfusion Act, the for transplantation of organs, tissues and cells, etc. The storage periods are different, depending on the type of data and the medical documentation in which these data are contained.

3.3.2. Data obtained from the contact form on our website

Objectives- when using our website, you can contact us by filling out the contact form. The purpose of collecting and processing your personal data is to facilitate communication between patients and MC "Dr. Stefan Cherkezov" Ltd. Using the contact form, you provide your personal data with voluntary consent.

Retention period- the data received from the contact form is stored until the moment you receive our response, after which it is deleted. In any case, these data shall not be stored for more than 30 thirty days.

3.3.3. Data of customers and suppliers

Objectives- the processing and storage of data of our customers and suppliers is carried out in order to comply with the resulting contractual obligations and the provisions of tax and accounting legislation.

Term for storage- in determining the terms for storage of information for criteria, the normative acts in force in the field of tax law and accounting have been used, such as (but not only) the Law on Accounting, the Law on Cooperative Income Taxation, etc. The retention periods are different, depending on the type of data and the documentation in which these data are contained.

3.3.4. Data of job candidates

Objectives- MC "Dr. Stefan Cherkezov" Ltd. processes personal data of persons applying for jobs in the company, in order to make a selection, conduct a job interview and others.

Retention period- the personal data of the job applicants are stored until the end of the term for the competition / interview, after which they are deleted. MC "Dr. Stefan Cherkezov" Ltd. stores personal data in this category only if the person has explicitly requested this, in order to use the data in subsequent job vacancies. In his request, the job applicant shall explicitly indicate the period until which his / her data may be kept, and the procedural request may be withdrawn at any time by the person who submitted it.

4. TO WHOM DO WE PROVIDE YOUR PERSONAL DATA?

4.1.MC "Dr. Stefan Cherkezov" Ltd. provides your personal data to third parties pursuant to Art. 28 of the Health Act. According to the cited legal norm, health information may be provided to third parties when: the

  • treatment of the person continues in another medical institution;
  • there is a threat to the health or life of others;
  • is necessary to identify a human corpse or to establish the cause of death;
  • is needed for the needs of state health control to prevent epidemics and the spread of infectious diseases;
  • is necessary for the needs of medical expertise and social security;
  • is necessary for the purposes of medical statistics or medical research after the patient identification data has been deleted;
  • is needed for the needs of the Ministry of Health, the National Center for Health Information, the National Health Insurance Fund, the regional health inspectorates and the National Statistical Institute;
  • is necessary for the needs of an insurer licensed under Section I of Annex № 1 or item 2 or under items 1 and 2 of Section II, letter "A" of Annex № 1 to the Insurance Code.

4.2.In view of the purposes of diagnostics and / or treatment and / or by virtue of contractual relations to which the Company is a party, MC "Dr. Stefan Cherkezov" Ltd. sends materials for diagnosis and analysis, accompanied by other personal data of the subject to third parties - laboratories and / or other providers of medical care, whose seat, address of management and address of carrying out the activity may be located on the territory of Bulgaria, outside the territory of Bulgaria, but within the territory of the EU or outside the territory of the EU. In these cases, the Company notifies the data subject in advance of this need, which, if it does not wish to make the transfer, should notify MC "Dr. Stefan Cherkezov" EOOD. In case of refusal to provide data to third parties and if the patient's treatment directly depends on sending his data to the third party, MC "Dr. Stefan Cherkezov" Ltd. has the right to refuse to provide health services, notifying patient.

When providing personal data to third parties, MC "Dr. Stefan Cherkezov" Ltd. takes all measures to protect personal data by concluding agreements with process third parties, implementation of technological and organizational tools and more.

4.3.MC "Dr. Stefan Cherkezov" Ltd. may provide personal data to third parties and when required by another regulation and / or contractual obligation. In this case, the company shall notify the data subject in writing or orally. The person has no right to refuse to provide the data if such provision is required by law or regulation.

5. AUTOMATED DECISION MAKING

MC "Dr. Stefan Cherkezov" Ltd. does not make decisions in relation to the data subject, based solely on automated processing, including profiling

6. WHAT ARE YOUR RIGHTS?

In connection with the processing of your personal data, you have the following rights:

6.1. Right of access to your personal data.

Each person has the right to receive from MC "Dr. Stefan Cherkezov" Ltd. information about whether personal data are processed related to him and if the company actually processes your personal data, to access them and get information about: the

  • purpose of processing;
  • the type of data being processed;
  • whether your personal data is provided to other persons and if so - to whom;
  • what are the criteria in connection with which the data retention period is determined, and in case there is a fixed retention period - what is it;
  • what are your rights in relation to the correction and deletion of your personal data;
  • what is your right to appeal against the data processing and who is the competent authority to which you should address your complaint;
  • whether there is automated decision-making regarding the processing of your personal data, including profiled.

Note! If the answers or part of the answers to the questions are in the one prepared by MC "Dr. Stefan Cherkezov" EOOD. Privacy Policy, the company has the right to refer directly to the policy and not to re-submit information. For this purpose, the company is obliged to indicate in which point and sub-item of the policy the answers to the questions asked by you are contained.

6.2. Right to rectify the data and object to the processing.

Each person has the right to request from the company to correct inaccurate personal data related to him or to request the completion of incomplete personal data, if applicable, as well as to object to the processing of data if such processing is based on Art. 6, para. 1, letter e and f of Regulation 2016/679.

6.3. Right to delete personal data.

Where applicable, the subject of personal data has the right to request from MC "Dr. Stefan Cherkezov" EOOD to delete all personal data that the company processes and stores.

This right can be used only in the provisions of the Regulation and the Personal Data Protection Act and is derogated from in cases where the personal data controller has grounds to refuse to delete the data provided in the Regulation and the Act (see Article 17 of Regulation 2016). / 679). For example, MC "Dr. Stefan Cherkezov" Ltd. has the right to refuse to delete your data if the statutory period in which these data should be stored has not expired or if the storage of data is necessary for the establishment, exercise or protection of our legal claims / interests. These cases are not exhaustive, but are only exemplary situations.

6.4. Right to limit processing.

Every person, subject of the data, has the right to request from MC "Dr. Stefan Cherkezov" EOOD to limit the processing. The restriction of the processing is allowed only in the statutory cases, provided in art. 18 of Regulation 2016/679.

6.5. Right to data portability

In the event that we process your personal data on the basis of the consent of the subject or a contractual obligation and the processing of data is carried out automatically, you have the right to receive your personal data and transfer them to a third party. and the format in which they will be provided to you. If MC "Dr. Stefan Cherkezov" Ltd. can not provide the data in the manner / format specified by you for objective reasons, they will become available to you in a manner and format specified by the company, for which you will be explicitly informed.

6.6. Right to withdraw consent for the processing of your personal data

This right can only be exercised in cases where your personal data is processed on the basis of your consent (see item 3 of this Privacy Policy). Withdrawal of consent can be made at any time in the manner described below ("How do you exercise your rights"?).

How to exercise your rights?

In accordance with the Personal Data Protection Act, the above rights may be exercised by submitting a written application to the address: Veliko Tarnovo, 1 Nish Street. The application can also be submitted electronically in accordance with the Electronic Document and Electronic Certification Services Act at the e-mail address: This email address is being protected from spambots. You need JavaScript enabled to view it.

The application must contain:

  1.  name, address and other data for identification of the respective natural person;
  2.  description of the request;
  3.  preferred form for providing the information;
  4.  signature, date of submission of the application and address for correspondence.
  5.  a notarized power of attorney, when submitted by an authorized person.

The Company prepares a written response to the application within 14 working days from the day of its receipt by the Company, unless additional opinions and / or studies are required before a final response is given. In these cases DCC "Dr. Stefan Cherkezov" EOOD notifies the applicant within 14 days that for objective reasons the deadline for ruling is extended, explicitly indicating the new deadline.

The answer is received personally by the subject or his representative (regularly authorized) at the registered office of the Company, Registry Department after verification of the identity of the person by reference to an identity document. The applicant signs a copy of the Response, which remains with the Company.

7.COMPLAINT TO THE SUPERVISORY AUTHORITY.

Everyone has the right to complain about the way their personal data is processed. The complaint shall be filed with the Commission for Personal Data Protection in accordance with the procedure specified in the Personal Data Protection Act. The Commission for Personal Data Protection has the following coordinates:

address: Sofia 1592, bul. "Prof. Tsvetan Lazarov ”№ 2;

tel .: 02/915 35 18, 02/915 35 15, 02/915 35 19, fax: 02/915 35 25;

email: This email address is being protected from spambots. You need JavaScript enabled to view it.;

web site: www.cpdp.bg.

  1. FINAL PROVISIONS

This privacy policy has been prepared on the basis of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27.04.2016. on the protection of individuals with regard to the processing of personal data and on the free movement of such data.

The policy can be made available to you at the registry of DCC "Dr. Stefan Cherkezov" EOOD and through the company's website.

This policy has been approved by the manager of DCC "Dr. Stefan Cherkezov" EOOD.