Privacy Notice

This information contains information about the processing of data of patients visiting Ganglion Medical Center.

Please read the Notice to learn how we process your personal data and to learn about your rights regarding data processing.

Since you have voluntarily contacted our institution, we consider your consent to the processing of your health and personal identification data related to your medical treatment to be given by law. However, you have the option to prohibit the processing of any of your data. Such a prohibition may limit or make healthcare provision impossible, as there is insufficient information available to establish a diagnosis, develop a therapeutic proposal or for the data processing required during healthcare processes. If you wish to prohibit the processing of your data, we will inform you whether the given prohibition will have consequences affecting your healthcare provision.

Health data is any data that is information about your physical, mental condition, illnesses, as well as data that influences these (for example, data related to your occupation) and data derived from them.

In addition to your health data, we process your last and first name, place and date of birth, mother's name, residential address, e-mail address, telephone number, and the name, telephone number, and e-mail address of the person you provide to help you communicate with you. You are responsible for the truthfulness and accuracy of the data you provide.

During your healthcare, Ganglion Medical Center (operator: Nozologen Kft.) only those persons are authorized to process your data to the extent that they are involved and necessary for the care. Healthcare personnel are subject to a strict statutory obligation of confidentiality, from which only you can grant exemption, except for exceptions specified in the law.

We will inform you directly about your test results and other information concerning your treatment. If you wish us to inform another person or persons about the above, this can be done on the basis of a power of attorney written and signed by you, signed by two witnesses or otherwise ensuring the conditions for private documents with full evidentiary value.

If you request an accounting or other document or certificate containing personal data, we will use the personal data you provide, unless you have otherwise instructed us to do so. We store the documents and certificates containing personal data in our own accounting and other documentation, which can be accessed by our employee or external contracted partner performing the task for which the document is intended, subject to the applicable confidentiality conditions.

We will only forward your data to other healthcare providers if you have given your consent or if it is necessary for your further care. We will also forward your health data to your GP – unless you prohibit this – without your specific consent. We may also forward your data – with your consent – to authorities – for example, in the case of the use of a medication that requires a separate permit.

If you participate in medical research at the Ganglion Medical Center's office as a testing site, the rules regarding your data processing are contained in a separate informational material that you should familiarize yourself with before participating in the study; this information does not apply to data processing within the scope of such medical research.

We will only use your personal data or the personal data of the person you have designated to contact us for the purpose of providing you with services (e.g. scheduling an appointment). If we would like to contact you for any other purpose or process your data for a purpose other than the above, we will ask for your prior consent and only after you have given your consent will we contact you or process your data for that purpose.

If required by law, your data may be processed without your permission – for example, based on an order from an authority or court.

We inform you that in the context of the storage of your data and other so-called data processing activities for the purposes specified by Nozologen Kft., as the data controller, we use data processors for the purpose of storing electronic and paper-based data and recording internal work processes. During data processing, only such activities take place that our data processing partners undertake to comply with the data processing rules of the European Union, in particular the so-called GDPR regulation.

We use the following partners as data processors:

Olive&Brown Ltd., 1152, Szilas park 6. (accounting)
Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043 USA (G Suite Business office suite)
Tárhely.EU Kft, 1097 Budapest, Könyves Kálmán körút 12-14. (domain registrar service) We retain health documentation for the period specified by law, usually 30 years, accounting documents for eight years. In the case of data processing for other purposes, we will inform you about the duration of data processing before your separate consent.

You have the following rights regarding the data we process:

You can find out what data is being processed about you and whether your data is being processed.
You can request correction of outdated or incorrect data.
You can request the deletion of your data, except in cases where data processing is mandatory by law.
You may restrict the processing of your data if you dispute its accuracy, if you consider the processing to be unlawful but oppose the deletion of your data, if we no longer need your data but you request it, or if you have objected to the processing and the legitimacy of the objection has not yet been assessed.
You can prohibit the use of your personal data for direct marketing purposes. Even in the absence of a prohibition, we will only use your personal data for direct marketing purposes with your prior express consent.
You can request that your personal data be transferred or forwarded to a third party, or you can prohibit this.
You can request a copy or take a photo of any personal data we process.
You may object to the use of your personal data if, in your opinion, it goes beyond the scope of your authorization or the scope permitted by law. With the simultaneous suspension of data processing, we will examine the objection within the shortest possible time from the submission of the request, but no later than 15 days, and we will inform you of the result in writing. If the objection is justified, we will terminate the data processing - including further data collection and transmission - and block the data, and we will notify all those to whom we have previously transmitted the personal data affected by the objection, and who are obliged to take measures to enforce the right to object, of the objection and the measures taken on its basis. If you do not agree with our decision, you have the right to apply to court - within 30 days of its notification. You may also apply to court in the event of a violation of your other rights related to data processing. The court will proceed with the case ex officio. The data controller is obliged to prove the lawfulness of the data processing.

You can file a complaint with the data protection supervisory authority regarding data processing.

The data of Nozologen Kft., which operates Ganglion Medical Center, as the data controller:

Nozologen Egészségügyi Szolgáltató Korlátolt Felelősségű Társaság
registered office: 1075 Budapest, Károly krt. 13-15
website: www.ganglion.hu

Contact:

phone: +36-30-539-2825
e-mail: adatkezeles@ganglion.hu

Name and contact information of the Data Protection Officer: Dr. Péter Varsányi

phone: +36-30-539-2825
e-mail: adatkezeles@ganglion.hu

Submitting data protection requests:

by mail: Ganglion Medical Center, 7621 Pécs, Váradi Antal Street 10/a
by e-mail: adatkezeles@ganglion.hu

In Hungary, the data protection supervisory authority is the National Data Protection and Freedom of Information Authority (1125 Budapest, Szilágyi Erzsébet fasor 22/C; telephone: +36 1 391 1400, e-mail: ugyfelszolgalat@naih.hu, website: www.naih.hu.

The adjudication of data protection disputes falls within the jurisdiction of the courts. The lawsuit may also be initiated before the court of the data subject's place of residence or residence, at the data subject's choice.

The most important provisions regarding our data processing can be found in the following laws:

REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation; GDPR)
Act CXII of 2011 on the right to informational self-determination and freedom of information
Act XLVII of 1997 on the processing and protection of health and related personal data