Draft on the protected staging site for review by the clinic and its legal adviser. Not approved for public use. This draft follows the current Czech policy where its facts are clear and adds the website enquiry form, which the existing text does not describe precisely.
Controller and contact
MACIMEX s.r.o., company ID 49355864, registered under file C 19751 at the Municipal Court in Prague, registered office Makovského 1339/16, 163 00 Prague 6, Czech Republic. The clinic and correspondence address is Kateřinská 487/18, Prague 2, Czech Republic. The company is represented by Lila Doneva, managing director. You can contact us at [email protected] or +420 775 785 222.
REVIEW: Confirm the company details, the data protection contact and whether a data protection officer has been appointed.
What information we use and why
When you contact us through the website, we receive the name, telephone number, email address and any service preference or message you enter. We use these details to respond to your enquiry and arrange an appointment. Please do not include detailed medical history in the message field unless it is needed for your enquiry.
When you become a patient, we process identification and contact details, information from your medical history questionnaire and records relating to the care we provide. The clinic may also use a recorded CCTV system at its premises to protect people and property; notices at the premises provide further details.
REVIEW: Specify the legal basis for each purpose, including health data, the website enquiry form and CCTV. The present Czech policy refers generally to legal grounds and legitimate interests; that wording needs confirmation before it is reused. Confirm whether CCTV is currently operating and the exact purposes, coverage and retention of footage.
Who receives information
Depending on the care you receive, relevant information may be shared with your health insurer and with service providers used by the clinic. The current Czech policy names MEDIC plus, s.r.o. for insurance reporting, CompuGroup Medical Česká republika s.r.o. for the PC Dent system and an external accounting provider. Information may also be disclosed where required or permitted by law.
REVIEW: Confirm that these providers and roles are current. Add the actual hosting, website form and email service providers, and identify any other recipients or processors that must be disclosed. Confirm whether any data is transferred outside the EEA and, if so, what safeguards apply. The existing Czech policy states that all data stays in the EEA; this has not been independently verified for the current website services.
How long information is kept
We keep personal information only for the periods applicable to each purpose and any legal record-keeping obligations. REVIEW: Insert the actual periods or criteria for appointment enquiries, clinical records, accounting data and CCTV footage. The current Czech policy does not give usable periods for these categories.
Security and automated decisions
We use appropriate technical and organisational measures to protect personal information. The current Czech policy states that the clinic does not use automated decision-making or profiling for the processing described above. REVIEW: Confirm both statements against current practice.
Online booking form
When you book through the form on the website, we process your name, phone number, e-mail, the service you choose, whether you have visited us before and the text of your message. We use this data only to contact you and arrange an appointment.
The legal basis is handling your request before providing care, under Article 6(1)(b) GDPR. If you include information about your health in the message, we process it with your explicit consent, which you give by ticking the box in the form (Article 9(2)(a) GDPR).
The message is sent by e-mail to our reception and is also stored on the website so that it is not lost if the e-mail does not arrive. The website runs on servers of netcup GmbH in Germany; our e-mail is provided by Seznam.cz, a.s. in the Czech Republic. Messages stored on the website are deleted automatically after 12 months.
Website analytics and advertising
If you consent in the cookie bar, we use Google Analytics 4 and Google Ads on the website. This lets us measure website traffic and the effectiveness of our advertising, such as which pages you view, where you came from and whether you clicked a phone number or sent a form. For this we process online identifiers stored in cookies, device and browser information and an approximate location derived from your IP address. We evaluate the results in aggregate, not for individual people, and we do not use Google signals.
The legal basis is your consent under Article 6(1)(a) GDPR and Section 89(3) of the Czech Electronic Communications Act (No. 127/2005 Coll.). Without consent, these services do not run. You can withdraw your consent at any time on the cookie policy page or with the Cookie settings button at the bottom of the screen. Withdrawal does not affect processing carried out before it.
The services are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For Google Analytics, Google acts as our processor. For measuring and targeting advertising in Google Ads, Google also processes some data as an independent controller under its own privacy policy. Data may be transferred to Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework. The European Commission has decided that this framework ensures an adequate level of protection.
We keep data in Google Analytics for 14 months. Google Analytics cookies are valid for up to 13 months, Google Ads cookies for 90 days. A detailed list of cookies is in the cookie policy.
Your rights
Depending on the circumstances and the applicable legal basis, you may request access to your information, correction, erasure, restriction of processing or data portability. You may object to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent without affecting processing carried out before withdrawal. You may lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů). Contact us using the details above if you wish to exercise your rights. A copy of your information is normally provided without charge.
Cookies and changes
Information about cookies used by this website is in the cookie policy. If we change this policy, the updated version will appear on the website. We will draw attention to significant changes where appropriate.