Privacy
INFORMATION ON THE PROCESSING OF PERSONAL DATA
pursuant to art. 13 of EU Regulation 679/2016
Identity and contact details of Data Controller
The Data Controller is Brixsana Private Clinic L.l.c., whose registered and operational office is located in 39042 - Bressanone (BZ), at Julius Durst street, 28. You can contact the Data Controller as follows:
Tel: 0472 824800
E- mail: info@brixsana.it
Contact details of the Data Protection Officer
The Data Protection Officer is the company Reggiani Consulting L.l.c., whose registered office is located in 39100 - Bolzano (BZ) at Antonio Pacinotti street, 13. You can contact the Data Protection Officer as follows:
Tel: 0471920141
E-mail (PEC): dpo@pec.brennercom.net
Purposerelated to the medical service
Your data will be processed in order:
to provide you with the required medical services and treatments;
for the management of your medical records, as they are necessary for the purposes of diagnosis, assistance and health therapy;
for the management of invoicing and all administrative aspects;
to execute the contract in place with our structure and to fulfil legal obligations.
Consent to the communication of data and/or information regarding your state of health to the subjects indicated by you
The information and/or data concerning your state of health, in relation to the services provided to you by our structure, may be communicated to your family members and to the persons expressly indicated by you, only with your prior specific and optional consent. Failure to give your consent for this purpose is optional and your refusal to do so will not affect the performance of the service.
You may revoke your consent at any time and/or change the persons to whom you may provide information regarding your state of health.
The structure complies with the provisions of the regulations in force.
Persons to whom data may be communicated
Your personal data, for the purposes referred to in point c), in relation to the agreed medical service will not be communicated to third parties.
Your personal data, for the purposes referred to in point c), may be communicated in order to be able to fulfil the agreed performance and to fulfil legal obligations, by way of example, to accounting or tax advisors, banking and companies associated with us. Only such data strictly necessary for the performance of the requested service will be communicated and, where possible, anonymous processing methods will be preferred.
The communication of such data is obligatory in order to provide the service requested, and refusal to permit such communication will mean that we are unable to provide the agreed services.
Your data will not be disclosed to any third party in any way without your prior and express consent.
If you are insured with an insurance company or are an employee, customer or member of a company or group of companies to which the Data controller applies special prices or benefits, or if you have applied for financing through an entity collaborating with our Structure, your personal data will be communicated to these entities with which our Structure has a contractual link. This communication has as its sole purpose the management and provision of the services covered by insurance, discounts or financing.
Data transfer to third countries or international organisations
Brixsana Private Clinic L.l.c. makes use of sharing platforms such as DropBox. It is specified that Dropbox finds its data centres in the USA and the company (DropBox Inc.) guarantees the security of data protection through the use of the most recent standard contractual clauses.
Brixsana Private Clinic L.l.c. specifies that this platform is not used for sending and sharing data relating to health status. A copy of your data is available at the headquarters of the data Controller, who can be contacted using the contact details in points a) and b) of this notice.
Retention period for personal data
Your personal data contained in your medical records, together with the relevant reports, will be kept, in accordance with the law, for an indefinite period of time, since they represent an essential official act to guarantee legal certainty, as well as being a valuable documentary source for historical health research.
The retention period of the diagnostic documentation similar to X-rays will be kept for 25 years, in compliance with the reference regulations.
Your personal data, for the purposes related to the execution of the contract in place with our structure will be kept for the entire duration of the treatment relationship with our structure, in compliance with other civil and fiscal regulations that could determine further storage times.
Rights of the data subject
You have at all times the right to request access to your data from the Data Controller, as well as to request the correction or deletion of said data. You will receive a written reply within 30 days (unless you specifically request a verbal reply), which may also be in electronic format. You also have the right to request the limitation of processing or to object to processing. Finally, you may request the portability of your data to another Data Controller. You may also at any time revoke the consent provided by means of this notice. In order to revoke one or more of the elements of consent provided, simply contact one of the addresses indicated at point a) of this notice.
Right to lodge a complaint to the Supervisory Authority
If you believe your data have been processed unlawfully you have the right to contact the Supervisory Authority in order to lodge a complaint.
Mandatory or optional nature of the data submitted and consequences of non-submission
Your data must be submitted to the Data Controller only where the data are necessary to fulfil the purposes indicated at point c): failure to submit such data will mean that the contract as stipulated cannot be properly executed, which will in turn prevent its performance.
Automated decision-making processes
The Data Controller does not use any automated decision-making processes in respect of your personal data.
CONSENT FOR SENDING REPORTS
Brixsana Private Clinic L.l.c. (hereinafter Brixsana) offers its patients the possibility to receive their reports by sending
e-mail messages. The use of this tool is recommended in cases where the patient is unable to go to the facility to collect his or her report, as well as facilitating and simplifying the relationship/contact between the patient and the Brixsana staff, who may use the address indicated to provide any requested clarifications.
We inform you that Brixsana, with your explicit consent, will send the reports concerning you by e-mail to the address you have indicated. The clinical examinations will be sent as attachments and you will be able to download and view them on your personal computer, smartphone or tablet.
Using this possibility is an optional choice that can also be revoked following your initial consent; the possibility of collecting the reports in person at the facility remains unaffected. The provision of the data requested below is mandatory in order to proceed with the online reporting service. The data will be processed by electronic means.
You may contact Brixsana, the Data Controller, to exercise your rights, including the right to obtain confirmation of the existence or not of data concerning you, to know its content and origin, verify its accuracy or request its integration or updating, or correction. You may also request cancellation, transformation into anonymous form or blocking of data processed in violation of the law, as well as oppose, in any case for legitimate reasons, their processing. The reports will be sent to the e-mail address indicated by you and we decline any responsibility in case of not strictly confidential use of the box or in case of access to the same by third parties.
INFORMATION ON THE PROCESSING OF PERSONAL DATA
pursuant to art. 13 of EU Regulation 679/2016
Identity and contact details of Data Controller
The Data Controller is Brixsana Private Clinic L.l.c., whose registered and operational office is located in 39042 - Bressanone (BZ), at Julius Durst street, 28. You can contact the Data Controller as follows:
Tel: 0472 824800
E- mail: info@brixsana.it
Contact details of the Data Protection Officer
The Data Protection Officer is the company Reggiani Consulting L.l.c., whose registered office is located in 39100 - Bolzano (BZ) at Antonio Pacinotti street, 13. You can contact the Data Protection Officer as follows:
Tel: 0471920141
E-mail (PEC): dpo@pec.brennercom.net
Purposerelated to the medical service
Your data will be processed in order:
to provide you with the required medical services and treatments;
for the management of your medical records, as they are necessary for the purposes of diagnosis, assistance and health therapy;
for the management of invoicing and all administrative aspects;
to execute the contract in place with our structure and to fulfil legal obligations.
Consent to the communication of data and/or information regarding your state of health to the subjects indicated by you
The information and/or data concerning your state of health, in relation to the services provided to you by our structure, may be communicated to your family members and to the persons expressly indicated by you, only with your prior specific and optional consent. Failure to give your consent for this purpose is optional and your refusal to do so will not affect the performance of the service.
You may revoke your consent at any time and/or change the persons to whom you may provide information regarding your state of health.
The structure complies with the provisions of the regulations in force.
Persons to whom data may be communicated
Your personal data, for the purposes referred to in point c), in relation to the agreed medical service will not be communicated to third parties.
Your personal data, for the purposes referred to in point c), may be communicated in order to be able to fulfil the agreed performance and to fulfil legal obligations, by way of example, to accounting or tax advisors, banking and companies associated with us. Only such data strictly necessary for the performance of the requested service will be communicated and, where possible, anonymous processing methods will be preferred.
The communication of such data is obligatory in order to provide the service requested, and refusal to permit such communication will mean that we are unable to provide the agreed services.
Your data will not be disclosed to any third party in any way without your prior and express consent.
If you are insured with an insurance company or are an employee, customer or member of a company or group of companies to which the Data controller applies special prices or benefits, or if you have applied for financing through an entity collaborating with our Structure, your personal data will be communicated to these entities with which our Structure has a contractual link. This communication has as its sole purpose the management and provision of the services covered by insurance, discounts or financing.
Data transfer to third countries or international organisations
Brixsana Private Clinic L.l.c. makes use of sharing platforms such as DropBox. It is specified that Dropbox finds its data centres in the USA and the company (DropBox Inc.) guarantees the security of data protection through the use of the most recent standard contractual clauses.
Brixsana Private Clinic L.l.c. specifies that this platform is not used for sending and sharing data relating to health status. A copy of your data is available at the headquarters of the data Controller, who can be contacted using the contact details in points a) and b) of this notice.
Retention period for personal data
Your personal data contained in your medical records, together with the relevant reports, will be kept, in accordance with the law, for an indefinite period of time, since they represent an essential official act to guarantee legal certainty, as well as being a valuable documentary source for historical health research.
The retention period of the diagnostic documentation similar to X-rays will be kept for 25 years, in compliance with the reference regulations.
Your personal data, for the purposes related to the execution of the contract in place with our structure will be kept for the entire duration of the treatment relationship with our structure, in compliance with other civil and fiscal regulations that could determine further storage times.
Rights of the data subject
You have at all times the right to request access to your data from the Data Controller, as well as to request the correction or deletion of said data. You will receive a written reply within 30 days (unless you specifically request a verbal reply), which may also be in electronic format. You also have the right to request the limitation of processing or to object to processing. Finally, you may request the portability of your data to another Data Controller. You may also at any time revoke the consent provided by means of this notice. In order to revoke one or more of the elements of consent provided, simply contact one of the addresses indicated at point a) of this notice.
Right to lodge a complaint to the Supervisory Authority
If you believe your data have been processed unlawfully you have the right to contact the Supervisory Authority in order to lodge a complaint.
Mandatory or optional nature of the data submitted and consequences of non-submission
Your data must be submitted to the Data Controller only where the data are necessary to fulfil the purposes indicated at point c): failure to submit such data will mean that the contract as stipulated cannot be properly executed, which will in turn prevent its performance.
Automated decision-making processes
The Data Controller does not use any automated decision-making processes in respect of your personal data.
CONSENT FOR SENDING REPORTS
Brixsana Private Clinic L.l.c. (hereinafter Brixsana) offers its patients the possibility to receive their reports by sending
e-mail messages. The use of this tool is recommended in cases where the patient is unable to go to the facility to collect his or her report, as well as facilitating and simplifying the relationship/contact between the patient and the Brixsana staff, who may use the address indicated to provide any requested clarifications.
We inform you that Brixsana, with your explicit consent, will send the reports concerning you by e-mail to the address you have indicated. The clinical examinations will be sent as attachments and you will be able to download and view them on your personal computer, smartphone or tablet.
Using this possibility is an optional choice that can also be revoked following your initial consent; the possibility of collecting the reports in person at the facility remains unaffected. The provision of the data requested below is mandatory in order to proceed with the online reporting service. The data will be processed by electronic means.
You may contact Brixsana, the Data Controller, to exercise your rights, including the right to obtain confirmation of the existence or not of data concerning you, to know its content and origin, verify its accuracy or request its integration or updating, or correction. You may also request cancellation, transformation into anonymous form or blocking of data processed in violation of the law, as well as oppose, in any case for legitimate reasons, their processing. The reports will be sent to the e-mail address indicated by you and we decline any responsibility in case of not strictly confidential use of the box or in case of access to the same by third parties.