POLICY ON THE PROTECTION AND CONFIDENTIALITY OF PERSONAL DATA
Mindfulness Activism (“Operator”) based in Bucharest, 16 Puțul lui Zamfir Street, registered with the Trade Register under number J40/8590/2007, C.U.I. RO 17981281, in order to provide medical services, collects and processes personal data complying with EU Regulation no. 679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and the free movement of such data (“GDPR”). With this information we explain to you how your personal data are used by the Clinic and the purpose for which they are used.
What does personal data mean?
Personal data is any information about a natural person that is identified or identifiable.
Source and types of personal data collected
The clinic collects personal data directly from you, from clients or from third parties. If we have to process personal data obtained from third party legal entities, the latter are obliged to provide you with the necessary information regarding the use of the personal data transmitted.
The clinic, in its activity, processes the following types of personal data:
Personal details, such as: name, surname, CNP, sex, age, video recordings from the surveillance cameras inside the offices.
Contact details such as: home address, residence address, telephone number, e-mail address, fax number.
Payment details, such as: bank account number, name and surname of the bank account / card holder in case the payment is made by another person.
Purposes and grounds for processing personal data
The Provider processes your personal data as follows:
for the purpose of providing E-learning services and E-commerce services according to the specific situation of the client, in accordance with 9 paragraph 2) letter h) of the GDPR.
for the purpose of managing the office’s relations with you, including the transmission of information about the Clinic’s offers according to Article 6 paragraph 1) letter f) of the GDPR, respectively in the legitimate interest of the Clinic (eg record of appointments in the IT application, management of regular correspondence, for video surveillance of the office space for ensuring the security of goods and persons, marketing and advertising activity).
for the purpose of providing educational services – research and documentation according to Article 6 paragraph 1) letter a) of the GDPR, respectively based on the free agreement expressed by the client / collaborator (eg recording / photographing various courses and using images to promote the services of Mindfulness Activism by posting in the virtual space or on promotional materials).
In order to comply with specific financial and financial obligations under Article 6 paragraph 1) letter c) of the GDPR, respectively in order to fulfill a legal obligation (preparation of tax documents and collection of medical services from individual clients).
If in the future we intend to process your personal data for purposes other than those for which it was collected, we will provide you with information about the new purposes as well as any other relevant information.
In order to facilitate the provision of educational services and in order to fulfill legal obligations, Mindfulness Activism may communicate personal data to proxies, third parties or to public authorities. The provision of information to proxies and / or third parties will be done in compliance with the legal provisions on data protection and confidentiality.
Mindfulness Activism staff members will delete your personal data as soon as it is no longer needed for the purposes stated above. Personal data on health status will be kept for the entire period of time provided by the legal provisions in the field of health.
The right to information, respectively the right to receive details regarding the processing activities performed by Mindfulness Activism;
The right to access data, respectively the right to obtain confirmation from regarding the processing of personal data, as well as details regarding the processing activities;
The right to rectification, respectively the right to obtain the rectification of inaccurate data, as well as the completion of incomplete data;
The right to erasure of data (“right to be forgotten”), provided that the conditions laid down by law are met;
The right to restrict processing to the extent that the conditions provided by law are met;
The right to data portability, namely (i) the right to receive personal data in a structured, commonly used and easy-to-read format, and (ii) the right to have such data transmitted by Mindfulness Activism to another data controller, insofar as the conditions provided by law are met. This right may be exercised only to the extent that the processing of the data provided has been carried out exclusively by automatic means and only in cases where their extraction is feasible in terms of the technical capabilities used by Mindfulness Activism.
The right to object – in respect of processing activities carried out for direct marketing purposes, including profiling activities; the right of opposition may be exercised at any time by submitting a request as indicated below;
The right of withdrawal of consent – if the processing is based on your consent, you have the right to withdraw it at any time. Withdrawal of consent shall not affect the lawfulness of the processing carried out on the basis of the consent before its withdrawal.
The right not to be subject to an individual automatic decision, respectively the right not to be the subject of a decision taken solely on the basis of automatic processing activities;
the right to address the National Authority for the Supervision of Personal Data Processing by accessing the website www.dataprotection.ro or the competent courts, to the extent deemed necessary.
For more details on the processing activities performed by the Mindfulness Activism team members, as well as on the rights you enjoy in this context and how to exercise them, you can send a request to our headquarters or in electronic format to firstname.lastname@example.org.
We may periodically update this policy, and we will keep you informed whenever necessary. This version of the personal data processing policy was published on *Insert date*.