GDPR

INFORMATION CLAUSE

Parents/legal guardians and pupils

 

Personal Data Administrator

The administrator of your personal data and your child’s personal data is EPIXPERT Sp. z o.o. with its registered office in Warsaw (03-934), st. Kryniczna 7. Here’s how you can contact us:

• by letter, sending correspondence to our address,
• by phone, at the phone number: 22 308 90 60,
• by e-mail, sending correspondence to biuro@epixpert.pl.

Data Protection Officer

We have appointed a Data Protection Officer who can be contacted:

• by letter, sending correspondence to our address (with the DPO’s note),
• by e-mail, sending correspondence to iodo@epixpert.pl.

Source and scope of processed data

Personal data (name of the student, class, name and surname of the parent/guardian, contact details) could be obtained from the educational institution to which your child attends.

Purpose and basis of personal data processing

Your personal data will be processed only for the purpose of:

• the implementation of health services, in accordance with art. 9 (2) (h) of the GDPR,
• fulfillment of the legal obligation incumbent on us, in accordance with art. 6 (1) (c) of the GDPR, resulting from: the Act of 12 April 2019 on health care for students, the Act on Patient Rights and the Patient Ombudsman, the Act of 15 April 2011 on medical activities, the Act of 5 December 1996 on the professions of doctor and dentist, the obligation to archive documentation, from 74 of the Accounting Act, in connection with settlements and the Civil Code,
• the implementation of our justified objectives, in accordance with art. 6 (1) (f) of the GDPR, such as claims or defense against claims, contact for purposes related to the provision of medical care services.

Data recipients

The recipients of your personal data may be: postal service providers – in the case of sending records by post, a law firm, in the case of claims, another medical facility to which records will be transferred after termination of the contract for the provision of medical services between the school and us or another school to which records will be transferred after your child’s education at the American School of Warsaw has ended or has been transferred to another facility, and entities cooperating with us in connection with the provision of services:

• hosting services,
• IT systems;
• service and software providers.

We may also provide to the American School of Warsaw the data of your child in order to enable the American School of Warsaw perform its services specified in the Enrollment Agreement, in particular data on your child’s the well-being at school or information about the need to send the student home due to illness.

Data retention period

We will process your personal data for the period of:

• until your child changes educational institution or until the end of the educational process.
• 5 years (from the end of the year), in the scope of data necessary for settlements, counting from the date of performance of the service, in accordance with 74 of the Accounting Act,
• until the period of limitation for claims or the lodging of an effective objection.

Legal rights

In connection with the processing of your personal data, you have the following rights:

• the right to access your personal data,
• Right to rectification
• the right to delete data in the event that we process them without a legal basis,
• the right to restriction of processing
• the right to object
• the right to lodge a complaint with the PDPO (st. Stawki 2, 00-193 Warsaw), when you consider that the processing of your personal data violates the provisions of the GDPR.

Voluntary nature of data provision:

Providing your personal data is a condition for medical care of your child.

INFORMATION CLAUSE

Individuals representing the school

 

Personal Data Administrator

The administrator of your personal data is EPIXPERT Sp. z o.o. with its registered office in Warsaw (03-934), st. Kryniczna 7. Here’s how you can contact us:

• by letter, sending correspondence to our address,
• by phone, at the phone number: 22 308 90 60,
• by e-mail, sending correspondence to biuro@epixpert.pl.

Data Protection Officer

We have appointed a Data Protection Officer who can be contacted:

• by letter, sending correspondence to our address (with the DPO’s note),
• by e-mail, sending correspondence to iodo@epixpert.pl.

Purpose and basis of personal data processing

Your personal data will be processed only for the purpose of:

• performing activities aimed at concluding a contract or implementing a concluded contract, in accordance with art. 6 (1) (b) of the GDPR, of which you are the representative of a party to the agreement,
• fulfillment of the legal obligation incumbent on us, in accordance with art. 6 (1) (c) of the GDPR, resulting from the Act of 29 September 1994 on accounting – keeping accounting documentation and the Civil Code
• the implementation of our justified objectives, in accordance with art. 6 (1) (f) of the GDPR, such as claims, or defense against claims.

Data recipients

The recipients of your personal data may be postal service providers, postal service providers, a law firm, in the event of claims and entities cooperating with us, in connection with the provision of services:

• hosting services,
• IT systems;
• Taxpayer Identification Number of Accounting Office
• service and software providers.

Data retention period

We will process your personal data for the period of:

• 5 years (from the end of the year), in the scope of data processing of which is regulated by law, counting from the date of termination of cooperation, in accordance with 74 of the Accounting Act,
• until the period of limitation for claims or the lodging of an effective objection.

Legal rights

In connection with the processing of your personal data, you have the following rights:

• the right to access your personal data,
• The right to rectification
• the right to delete data in the event that we process them without a legal basis,
• the right to transfer data the processing of which is based on a contract,
• the right to restriction of processing
• the right to object,
• the right to lodge a complaint with the PDPO (st. Stawki 2, 00-193 Warsaw), when you consider that the processing of your personal data violates the provisions of the GDPR.

Voluntary nature of data provision:

Providing your personal data is voluntary, but necessary for the conclusion of the contract.

INFORMATION CLAUSE

Staff representing the school responsible for the implementation of the contract

 

Personal Data Administrator

The administrator of your personal data is EPIXPERT Sp. z o.o. with its registered office in Warsaw (03-934), st. Kryniczna 7. Here’s how you can contact us:

• by letter, sending correspondence to our address,
• by phone, at the phone number: 22 308 90 60,
• by e-mail, sending correspondence to biuro@epixpert.pl.

Data Protection Officer

We have appointed a Data Protection Officer who can be contacted:

• by letter, sending correspondence to our address (with the DPO’s note),
• by e-mail, sending correspondence to iodo@epixpert.pl.

Source and scope of processed data

We have obtained personal data (name, surname, contact phone number, e-mail) from your employer in connection with the implementation of the provisions of the contract.

Purpose and basis of personal data processing

Your personal data will be processed only for the purpose of:

• enabling the implementation of the concluded agreement in which you are designated to contact, which is my legitimate interest, in accordance with art. 6 (1) (f) of the GDPR,
• fulfillment of the legal obligation incumbent on us, in accordance with art. 6 (1) (c) of the GDPR, resulting from the Act of 29 September 1994 on accounting – keeping accounting documentation and the Civil Code
• the implementation of my justified goals, in accordance with art. 6 (1) (f) of the GDPR, such as claims, or defense against claims.

Data recipients

The recipients of your personal data may be postal service providers, postal service providers, a law firm, in the event of claims and entities cooperating with us, in connection with the provision of services:

• hosting services,
• IT systems;
• Taxpayer Identification Number of Accounting Office
• service and software providers.

Data retention period

We will process your personal data for the period of:

• 5 years (from the end of the year), in the scope of data processing of which is regulated by law, counting from the date of termination of cooperation, in accordance 74 of the Accounting Act,
• until the period of limitation for claims or the lodging of an effective objection.

Legal rights

In connection with the processing of your personal data, you have the following rights:

• the right to access your personal data,
• The right to rectification
• the right to delete data in the event that we process them without a legal basis,
• the right to transfer data the processing of which is based on a contract,
• the right to restriction of processing
• the right to object,
• the right to lodge a complaint with the PDPO (st. Stawki 2, 00-193 Warsaw), when you consider that the processing of your personal data violates the provisions of the GDPR.

INFORMATION CLAUSE

Patients– Individuals

 

Personal Data Administrator

The administrator of your personal data is EPIXPERT Sp. z o.o. with its registered office in Warsaw (03-934), ul. Kryniczna 7. Here’s how you can contact us:

• by letter, sending correspondence to our address,
• by phone, at the phone number:  22 308 90 60,
• by e-mail, sending correspondence to biuro@epixpert.pl.

Data Protection Officer

We have appointed a Data Protection Officer who can be contacted:

• by letter, sending correspondence to our address (with the DPO’s note),
• by e-mail, sending correspondence to iodo@epixpert.pl.

Source and scope of processed data

Personal data (name, surname, contact phone number, service address) could be obtained from the person who purchased the test for you in our online store.

Purpose and basis of personal data processing

Your personal data will be processed only for the purpose of:

• implementation of the contract for the provision of test services, in accordance with art. 6 (1) (b) of the GDPR,
• the implementation of health services, in accordance with art. 9 (2) (h) of the GDPR,
• fulfillment of the legal obligation incumbent on us, in accordance with art. 6 (1) (c) of the GDPR, resulting from the Act on the Patient’s Rights and the Patient’s Ombudsman, the Act of 15 April 2011 on medical activities, the Act of 5 December 1996 on the professions of doctor and dentist, from the obligation to archive documentation, from Art. 74 of the Accounting Act, in connection with settlements and the [Polish] Civil Code,
• the implementation of our justified objectives, in accordance with art. 6 (1) (f) of the GDPR, such as claims or defence against claims, contact in order to arrange a visit, its cancellation or reminder, inform about the availability of research results.

Data recipients

The recipients of your personal data will be: a diagnostic laboratory, an appropriate epidemiological station – in the case of a positive test result, postal service providers – in the case of sending documentation by post, a law firm, in the case of claims and entities cooperating with us in connection with the provision of services:

• hosting services,
• IT systems;
• accounting
• subcontractors in the field of sampling and settlements with the National Health Fund,
• service and software providers.

Data retention period

We will process your personal data for the period:

• resulting from the Act of 6 November 2008 on patient rights and the Patient Rights Ombudsman,
• of 5 years (from the end of the year), in the scope of data necessary for settlements, counting from the date of performance of the service, in accordance with Art. 74 of the Accounting Act,
• until the limitation of claims

Legal rights

In connection with the processing of your personal data, you have the following rights:

• the right to access your personal data,
• the right to rectification
• the right to delete data in the event that we process them without a legal basis,
• the right to transfer, in the scope of data that we process on the basis of the concluded contract,
• the right to restriction of processing
• the right to object
• the right to lodge a complaint with the PDPO (st. Stawki 2, 00-193 Warsaw), when you consider that the processing of your personal data violates the provisions of the GDPR.

Voluntary nature of data provision:

Providing your personal data is a condition for using our medical services. The consequence of not providing personal data will be the inability to use our services.

INFORMATION CLAUSE

Persons sending correspondence

 

Personal Data Controller

The Data Controller with respect to your personal data is EPIXPERT Sp. z o.o. with its registered office in Warsaw (03-934), st. Kryniczna 7. You can contact us

• by mail, with the correspondence sent to our address,
• by phone, at the telephone number: 22 308 90 60,
• by e-mail, by sending the correspondence to: biuro@epixpert.pl.

Data Protection Officer

We have appointed a Data Protection Officer who can be contacted:

• by mail, with the correspondence sent to our address (with the annotation “Data Protection Officer”),
• by e-mail, by sending the correspondence to: iodo@epixpert.pl.

Purpose and legal basis for the processing of personal data

Your personal data will only be processed for the purpose of:

• communicating with you in the event that you submit an inquiry, which constitutes our legitimate interest, in accordance with Article 6 (1) (f) of the GDPR,
• the implementation of our justified objectives, in accordance with Article 6 (1) (f) of the GDPR, such as pursuing claims, or defense against claims.

Data recipients

The recipients of your personal data may include postal service providers, law firms, in the event of claims, as well as entities cooperating with us in connection with the provision of services:

• hosting services providers,
• IT services providers;
• other service and software providers.

Data retention period

Your personal data will be stored in connection with the correspondence for the following period:

• until a comprehensive answer to the inquiry is provided,
• until the expiry of the period of limitations for claims or the submission of an effective objection.

Rights relating to data processing

In connection with the processing of your personal data, you have the following rights:

• the right to access your personal data,
• the right to rectify data,
• the right to data portability,
• the right to restrict data processing,
• the right to lodge an objection to data processing,
• the right to erase data,
• the right to lodge a complaint with the Personal Data Protection Office (st. Stawki 2, 00-193 Warsaw), if you determine that the processing of your personal data violates the provisions of the GDPR.

Voluntary nature of data provision:

Providing your personal data is voluntary. The provision of personal data is a prerequisite for correspondence with us.