Private policy
1. What does this Privacy Policy mean?
In this privacy policy (hereinafter referred to as the “Privacy Policy”), we provide you with information on how the data processor Kristina Korsakė processes your personal data obtained by: www.korsake.lt in the performance and execution of contracts concluded between natural, institutional and legal persons; in order to promote the visibility of www.korsake.lt; when you visit the website of www.kristinakorsake.com or social media accounts; when you make inquiries, etc. All the following persons whose data is processed by the Manager Kristina Korsakė are referred to below as “Data Subjects”.
2. About the Data Processor
The data processor is Kristina Korsake, MVZ PI Am Wollmatinger Ried 1 78479 Reichenau, Germany, data www.korsake.lt is collected and stored. Contact email for personal data protection issues kristina.korsake@clinic-pi.de.
3. What is personal data?
Personal data is information collected about a Data Subject that can be used to identify the Data Subject and is stored electronically or otherwise.
Personal Data includes any information, including the Data Subjects name, address, telephone number, information about your work interests, etc., that is collected about Data Subjects for the purposes set out in this Privacy Policy or in the Data Subjects separate consent or agreement with the Data Processor.
4. Processing of personal data in connection with the registration of persons for a visit
| Categories of data subjects | Legal basis for data processing (Article 6 BDAR) | Categories of personal data | Data recipients (controllers) | Data recipients (processors) | Data storage, deletion periods |
|---|---|---|---|---|---|
| Registering a person for a visit to the Clinic | |||||
| People who register for a visit | Article 6(1)(a) GDPR (consent) | Name, surname, date of birth, age, email address, telephone number, special categories (health) data (as much as the person chooses to provide). | None | IT equipment administrators and suppliers | Before the start of the registered visit |
| Representatives of persons who register for a visit | Article 6(1)(c) GDPR (legal obligation) | Name, surname, email, telephone number, contact person (basis for representation) | None | IT equipment administrators and suppliers | Before the start of the registered visit |
5. Awareness raising and marketing, publicising customer feedback
| Categories of data subjects | Legal basis for processing (Article 6 GDPR) | Categories of personal data | Data recipients (controllers) | Recipients (processors) | Data retention, erasure periods |
|---|---|---|---|---|---|
| PAwareness raising and marketing, publicising customer feedback | |||||
| People who have consented to the disclosure of their personal data by the Company | Article 6(1)(a) GDPR (consent) | Name, surname, testimonial about the services provided, other information that the person chooses to make public, email address, signature, date of consent. | Visitors to www.kristinakorsake.com | Website administrator | 5 years after receipt of consent |
6. Direct marketing
| Categories of data subjects | Legal basis for processing (Article 6 GDPR) | Categories of personal data | Data recipients (controllers) | Recipients (processors) | Data retention, erasure periods |
|---|---|---|---|---|---|
| Direct marketing (service offers, reminders to visit, etc.) | |||||
| People who have consented to direct marketing to them | Article 6(1)(a) GDPR (consent) | Name, surname, email address, telephone number | None | Marketing service provider | Personal data stored for 2 years after consent is given |
7. Drawing up and executing contracts with legal entities and natural persons as counterparties
| Categories of data subjects | Legal basis for processing (Article 6 GDPR) | Categories of personal data | Data recipients (controllers) | Recipients (processors) | Data retention, erasure periods |
|---|---|---|---|---|---|
| Drawing up and executing contracts with legal entities and natural persons | |||||
| Employees of the legal entity of the counterparty | Article 6(1)(f) GDPR (legitimate interest in relation to the counterparty`s employees), Article 6(1)(b) GDPR (contract in relation to an employee) | Name, surname, e-mail address, telephone number, content of correspondence | Supplier legal person | None | 10 years after expiry of the contract |
| Contractor | Article 6(1)(b) GDPR (contract) | Name, surname, personal identification number, contact details (telephone number, e-mail), individual activity number, bank account details, other information specified in the contract with the natural person | None | None | 10 years after expiry of the contract |
8. Protecting legitimate interests
| Categories of data subjects | Legal basis for processing (Article 6 GDPR) | Categories of personal data | Data recipients (controllers) | Recipients (processors) | Data retention, erasure periods |
|---|---|---|---|---|---|
| Protection of rights and interests | |||||
| Other party to the dispute, employees of the party to the dispute | Article 6(1)(f) GDPR (legitimate interest) | Name, surname, position, date, circumstances of the dispute, other information relevant to the dispute | Law enforcement authorities, lawyers, courts, bailiffs | None | 5 years from the date of entry into force of the judgment |
9. Contact us
There are several ways in which you can contact the Data Processor: by phone, by email. We receive, review and respond to all communications ourselves. If you contact us, we may process the data you provide to us, i.e. name, email address, telephone number, the content of the request (information you choose to provide to us).
Such data will be processed in order to answer your questions and to process your suggestions. If you do not provide your contact details, we will not be able to contact you and respond to you.
The personal data provided will be stored for 1 year from the date of receipt of the enquiry and/or request, except for information for which other time limits are set out in this Privacy Policy or by law.
Any personal data that you provide when you communicate with us is used only for the purposes set out above.
Please note that we may need to contact you by post, email or telephone. Therefore, please notify us of any changes to your personal data.
10. Website
Our website www.kristinakorsake.com uses cookies. A cookie is a small file made up of letters and numbers that we place on your browser or on your computers hard drive with your consent. We use different cookies for diffdifferent cookies for different purposes. Cookies also help us to distinguish you from other users of the website, thus ensuring a more pleasant experience and allowing us to improve the website.
Most browsers allow you to reject all cookies and some browsers only allow you to reject third party cookies. You can therefore take advantage of these options. However, please note that blocking all cookies will have a negative impact on the use of the Website and without cookies you will not be able to use all the services provided by the Website. Further information is available at AllAboutCookies.org or www.google.com/privacy_ads.html.
We may use the following cookies:
| Cookie name | Purpose of processing | Nature of the cookie (necessary, analytical, functional, commercial) | Period of validity |
|---|---|---|---|
| _ga | This cookie is set by Google Analytics. The cookie collects information about user behaviour on the website and is used to store statistical information | Analytical | 2 years |
| _gid | This cookie is set by Google Analytics. The cookie collects information about user behaviour on the website and is used to store statistical information | Analytical | 1 day |
| _gat | Cookie used to manage enquiry traffic | Analytical | 1 year |
| _cookie_notice_accepted | Saves the cookie acceptance status of the current domain user | Required | 1 year |
15. Social media
The information you provide to us via social media (including notifications, use of the "Like" and "Follow" fields and other communications) is controlled by the social network manager.
Our Website provides links to our social media accounts. We currently have accounts on the following social networks: Facebook and Instagram.
We process the information contained in our accounts for the purpose of administering our accounts on the basis of your consent.
We recommend that you read the privacy notices of third parties and contact the service providers directly if you have any questions about how they use your personal data.
16. Receipt and disclosure of data
We receive your data from you, your legal representatives, your devices, our employees, banks and our contractual counterparties.
We may disclose information about you to our employees, service providers such as IT professionals, website administrators, etc., if reasonably necessary for the purposes set out in this Privacy Policy, as well as to banks and other recipients specified in the Policy.
In addition, we may disclose information about you:
- if we are required to do so by law;
- if we intend to sell the Clinic’s business (shares) or an interest in its assets by disclosing your personal data to a potential buyer of the business (shares) or an interest in the Clinic;
- in the event of a sale of the Clinic’s business (shares) or a substantial part of its assets to a third party.
Except as provided in this Privacy Policy, we do not provide your personal data to any third parties.
The list of recipients or categories of recipients referred to in this Privacy Policy may change, so we recommend that you check this Privacy Policy regularly for any changes.
13. Security of your personal data
Your personal data will be processed in accordance with the General Data Protection Regulation (EU) 2016/679 and other statutory requirements. When processing your personal data, we implement organisational and technical measures to ensure the protection of personal data against accidental or unlawful destruction, alteration, disclosure, as well as against any other unlawful processing.
14. Your rights
In this section, we provide information about your rights in relation to our processing of your personal data and when you can exercise these rights.
The Clinic will provide you with information about the action taken following your request to exercise your rights without undue delay, but no later than 1 (one) month after receipt of your request. Depending on the complexity of the request and the number of requests received, the aforementioned time limit may be extended for a further 2 (two) months. In this case, we will inform you within 1 (one) month of receipt of the request of such extension and the reasons for it. The Clinic will only refuse to exercise your rights in cases provided for by law.
15. Right of access to your personal data
15.1. Right to withdraw consent
If you have given us your explicit consent to the processing of your data, you may withdraw it at any time. You can provide us with information about withdrawing your consent by contacting us at the email address specified in this Privacy Policy.
15.2. Additional rights
Please see below for information about additional rights that you may have, which you can exercise by following the procedures described below.
- You have the right to ask us to correct any inaccuracies in the data we hold. In this case, we may ask you to confirm the corrected information.
- You have the right to ask us to delete your personal data. This right shall be exercised in the cases provided for in Article 17 of the General Data Protection Regulation (EU) 2016/679.
- You have the right to ask us to restrict or not to process your personal data:
- the period of time necessary to verify the accuracy of your personal data when you make a complaint about the accuracy of the data;
- where our collection, storage or use of your personal data is unlawful, but you choose not to request erasure;
- where we no longer need your personal data but you need it to establish, exercise or defend a legal claim
- for the period necessary to determine whether we have an overriding legal basis to continue processing your personal data if you have exercised your right to object to the processing of personal data.
- You have the right to the transfer of data processed by automated means which we have received from you with your consent or for the purpose of concluding a contract. If you exercise this right, we will transfer a copy of the data you have provided to us upon your request.
- You have the right to object to our use of your personal data in accordance with Article 21 of the GDPR. You have the right to object when your personal data is processed on the basis of legitimate interest (each of the above processing purposes is accompanied by the basis on which the data is processed) or for direct marketing purposes.
15.3. Right to request further information
We hope that you understand that it is very difficult to discuss all possible ways of collecting and using personal data. We endeavour to provide as clear and complete information as possible and we undertake to update this Privacy Policy as and when the use of personal data changes.
However, if you have any questions about our use of your personal data, we will be happy to answer them or provide you with any additional information we may disclose. If you have any specific questions or do not understand the information provided, please contact us.
16. Complaints
If you believe that your rights as a Data Subject have been and/or may be violated, please contact us immediately at the email address set out in this Privacy Policy. We ensure that only upon receipt of your complaint, we will contact you within a reasonable period of time to inform you of the progress of the investigation of the complaint and, subsequently, of the outcome.
If you are not satisfied with the results of the investigation, you can lodge a complaint with the supervisory authority – the Federal Data Protection Supervisory Authority.
17. Responsibility
You are responsible for maintaining the confidentiality of the data you provide to us and for ensuring that the data you provide to us is accurate, correct and complete. If there is any change in the data you have provided, you must inform us immediately by e-mail. In no event shall we be liable for any damage caused to you as a result of your providing incorrect or incomplete personal data or your failure to inform us of any change in the data.
19. Changes to the Privacy Policy
We may update or change this Privacy Policy at any time. You can always find the current version of this Privacy Policy on our website at https://kristinakorsake.com.
Privacy Policy last updated on 2024-09-09